• 0 Votes
    2 Posts
    7 Views
    F

    Follow-up: I think I (spelled Claude) found the cause of 1b (post-upgrade runs missing from the chart).

    taskLog.createTime is a TIMESTAMP, so with the session at +00:00 it comes back as UTC (my 9:27 PM EST run reads as 2026-11-04 02:27). But WindowedStats::dailySeries() calls toDisplayStored($value) with the default $isDatetime = true. Inside the 26-hour band, that treats the UTC value as pre-boundary America/New_York time, puts it on Nov 4, past the end of the series, and drops it.

    The same applies to every chart that uses dailySeries() on a TIMESTAMP column: imaging (taskLog.createTime), storage (images.imageDateTime), inventory (inventory.iCreateDate) and fleet (hosts.hostCreateDate). Audit and snapin use DATETIME columns, so they’re fine.

    Suggested fix: add an $isDatetime parameter to dailySeries(), pass it through to toDisplayStored(), and have the four TIMESTAMP callers pass false:

    // WindowedStats::dailySeries(): new last parameter $countK = 'c', $isDatetime = true ) { ... $day = self::toDisplayStored( (string)$row[$dateK], $isDatetime )->format('Y-m-d'); // ImagingStats::runsPerDay(): taskLog.createTime is a TIMESTAMP return self::dailySeries($rows, $start, $end, 'd', 'c', false); // StorageStats, InventoryStats, FleetStats: same, add 'd', 'c', false

    Claude put together a full patch against current dev-branch (5 files, +30/−6) if that’s helpful. I haven’t applied it to my server (yet), so it’s untested beyond reading the code. I thought I’d run it by the forum first for feedback. See attached.

    Thanks

    fog-dashboard-timestamp-fix.patch.txt

  • 0 Votes
    1 Posts
    3 Views
    No one has replied
  • 0 Votes
    1 Posts
    5 Views
    No one has replied
  • FOG Server : Certificate validation failed

    Unsolved FOG Problems
    4
    0 Votes
    4 Posts
    53 Views
    Tom ElliottT

    @fgaudin Do not delete the host. The dates on srvpublic.crt show the problem.

    That certificate started on 21 May 2026. That is the date of your first install, so the installer did not issue it again. The root CA is new, but srvpublic.crt is still signed by the old root. The client checks it against the new root, and the check fails.

    Do these steps on the server:

    Run this check. It shows the mismatch:
    openssl verify -CAfile /var/www/html/fog/management/other/ca.cert.pem /var/www/html/fog/management/other/ssl/srvpublic.crt Run the installer with -K (--recreate-keys) : ./installfog.sh -y -K. This issues a new srvpublic.crt from the current root. It does not change the root CA. Run the check from step 1 again. It must say OK.

    On the client, restart the FOGService. You do not need to reinstall it again, because the client already has the current root.

    If step 2 fails, or step 3 does not say OK, post the output and the newest log from bin/error_logs/.

  • Access denied: Master node

    Unsolved FOG Problems
    7
    0 Votes
    7 Posts
    296 Views
    Tom ElliottT

    @piaFOG26 Are you able to confirm if things are now working for you?

  • ASSERT_EFI_ERROR Ubuntu 26.04.1 FOG Server 1.5.10.2518

    Unsolved FOG Problems
    7
    0 Votes
    7 Posts
    336 Views
    Tom ElliottT

    @Paladin1 Thanks, that explains the registration error. Registration reads the machine’s disk, so it needs a disk attached. With no disk it stops with that message every time. That is expected, so you do not need the debug task.

    For your question: neither. Do not reinstall anything yet.

    The BIOS boot mode on this machine applies to both the network boot and the installed OS. Your image is a UEFI install, so this machine has to network boot in UEFI too. We can try a different iPXE file for UEFI that loads its own network driver. That can avoid the firmware error.

    On the FOG server:

    Edit /etc/kea/kea-dhcp4.conf. In the classes FOG-UEFI-64-1, FOG-UEFI-64-2, FOG-UEFI-64-3 and FOG-Surface-Pro-4, change "boot-file-name": "snponly.efi" to "boot-file-name": "ipxe.efi". Run sudo systemctl restart kea-dhcp4-server. Set the target BIOS back to UEFI and network boot it.

    Tell us if you get the FOG menu or the same ASSERT. If it fails, change the file back. A re-run of the installer also puts snponly.efi back.

  • "Bad response" sending a restart task

    Unsolved FOG Problems
    3
    0 Votes
    3 Posts
    188 Views
    A

    @Tom-Elliott I wondered if that was the case, thank you.

  • 1.6 Migration via new Install with no DB Transfer

    Unsolved FOG Problems
    4
    0 Votes
    4 Posts
    348 Views
    Tom ElliottT

    @Coolguy3289 I believe we fixed the problem, please confirm and I can solve this thread, thank you!

  • Upgraded to 1.5.10.2482 - Now problems with replication to nodes

    Unsolved FOG Problems
    2
    0 Votes
    2 Posts
    173 Views
    Tom ElliottT

    @mp12 Thanks for the logs. This is a bug in 1.5.10.2482, not your node passwords.

    A security change in 2482 removes the storage node password from the node data that the API returns. The image and snapin replicators read their node list from that same data. So they now send an empty password, and every node rejects the login. The Undefined property: stdClass::$pass warning is that missing field.

    The fix is merged to dev-branch: https://github.com/FOGProject/fogproject/pull/1770

    To get it now, update from dev-branch:

    cd /path/to/fogproject git checkout dev-branch git pull cd bin sudo ./installfog.sh -y

    Or wait for the next stable release. Your stored passwords are correct, so you do not need to change anything on the nodes.

  • 0 Votes
    2 Posts
    197 Views
    Tom ElliottT

    @AUTH-IT-Center I do believe snponly would be the recommended, rather than iPXE’s driver.

    The developers at iPXE wrote the driver on their own (of course using documentation and stuff, but for all intents/purposes it is still a handrolled driver) so anything is possible.

    We shipped the native iPXE 2.0.0 mainly because of the feature it allows with actual Secureboot capabilities and instead of embedding everyfile with a custom script, a more dynamic approach for when iPXE releases new version we can upgrade more easily.

    For what it’s worth, I would almost want more people to default to snponly.efi (or secureboot/snponly-shimx64.efi if using/wanting secureboot after enrolling your machines of course) because this is supposed to be using the generic driver for EFI boot protocols on the NIC rather then attempting to discover the NIC using a driver loaded.

  • Secureboot preventing booting into windows after imaging

    Unsolved Windows Problems
    3
    0 Votes
    3 Posts
    350 Views
    Tom ElliottT

    Glad you have a workaround. I think the cause is the Windows boot manager certificate change, not the image.

    Your golden Optiplex installed Windows with Secure Boot on. Windows servicing then added the “Windows UEFI CA 2023” certificate to that machine’s db, and switched the boot files to a boot manager signed with it. The other Optiplex 3000s only trust the 2011 Microsoft certificates, so they reject that boot manager. bcdboot works because it copies the older 2011-signed boot manager.

    Can you confirm with two checks, in admin PowerShell, on the golden machine and on one target?

    [Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023' mountvol S: /s (Get-AuthenticodeSignature S:\EFI\Microsoft\Boot\bootmgfw.efi).SignerCertificate.Issuer

    If the golden machine says True and the target says False, that is the cause. A newer Dell BIOS may include the 2023 certificate in its default keys. I am also looking at having FOS add it during the Secure Boot enrollment task.

  • FOG 1.5.10 - Problem with AD Join.

    Unsolved FOG Problems
    5
    0 Votes
    5 Posts
    356 Views
    JJ FullmerJ

    @gmaurice resetting the host encryption in the gui and then restart the fog service and it should be back up and running. You can also use the api for this, the FogApi powerhsell module (links in my signature) I have this Reset-HostEncryption function https://fogapi.readthedocs.io/en/latest/commands/Reset-HostEncryption/?h=reset+host which will also handle this reset.

    Your other other option is to look into post download scripts, there’s some examples in the forums and the docs. If you’re using sysprep and unattend.xml you can inject domain join information into the unattend.xml after imaging and before windows launches for the first time, so the computer is joined to the domain before the fog service or any ui is reachable.

  • 0 Votes
    5 Posts
    324 Views
    Tom ElliottT

    @Balage80 Thanks for confirming the enrollment fix.

    UEFI boot: I think the cause is two new lines in default.ipxe. They read Secure Boot state from the firmware. iPXE reads it by stepping through every firmware variable, and some firmware never ends that list, so iPXE hangs there.

    Please test this: take the new 979-byte default.ipxe and delete only these two lines. Keep everything else.

    param secureboot ${efi/SecureBoot} param setupmode ${efi/SetupMode}

    Does UEFI boot with that file? Please also post the make, model, and BIOS version of the machine. Note that re-running installfog.sh writes a new default.ipxe, which replaces a manual edit.

    Pending MACs: these are not related to default.ipxe. They come from the legacy FOG Client’s Host Registration module. That module reports every adapter Windows sees, including Wi-Fi, Bluetooth, and virtual Wi-Fi Direct adapters. FOG stores each unknown MAC as pending, up to FOG_QUICKREG_MAX_PENDING_MACS per host (default 4). iPXE cannot see those adapters. You can delete the pending MACs. To stop new ones, add MAC fragments to FOG_QUICKREG_PENDING_MAC_FILTER (comma separated), or turn off Host Registration.

  • dhcpd.conf configuration

    Unsolved FOG Problems
    1
    0 Votes
    1 Posts
    100 Views
    No one has replied
  • Task 0

    Unsolved FOG Problems
    50
    0 Votes
    50 Posts
    4k Views
    K

    @Tom-Elliott
    These are the two machines that were just cloned!

    I deployed the Snap-in three times:
    the two newly cloned machines and one old machine to see if any certificate issues arise with the old computers. All of them were assigned Image B.

    The computer, which has not yet been cloned, did not process the snap-in.

    ec06f2be-575a-48f2-9f68-3a9f156dd330-grafik.png

    ------------------------------------------------------------------------------ --------------------------------Authentication-------------------------------- ------------------------------------------------------------------------------ 28.09.2026 07:38:56 Client-Info Version: 0.13.0 28.09.2026 07:38:56 Client-Info OS: Windows 28.09.2026 07:38:56 Middleware::Authentication Waiting for authentication timeout to pass 28.09.2026 07:40:56 Middleware::Communication Download: http://192.168.0.196/fog/management/other/ssl/srvpublic.crt 28.09.2026 07:40:58 Middleware::Communication ERROR: Could not download file 28.09.2026 07:40:58 Middleware::Communication ERROR: Die Verbindung mit dem Remoteserver kann nicht hergestellt werden. 28.09.2026 07:40:58 Client-Info ERROR: Failed to authenticate, will not run Module Looper.

    78935d01-cc19-4dd8-b5bc-fb03e7885c58-grafik.png
    Resetting the encryption settings, deleting the snap-in that wasn’t running, and restarting it didn’t help…

    Rebooting of the pc helped

  • no viable macs to use after switching to http

    Unsolved FOG Problems
    3
    0 Votes
    3 Posts
    272 Views
    A

    FYI for anyone else running into this issue - I believe the problem was that I didn’t erase the /tftpboot images when I switched from http to https. I’m not really sure why that would matter, but when I did that, then re-ran the server reinstall and selected https, the images got but back in /tftpboot and my hosts didn’t see the mac error anymore.

  • PXE boot was stuck

    Unsolved FOG Problems
    2
    0 Votes
    2 Posts
    212 Views
    Tom ElliottT

    @Priyankha We need a lot more details.

    FOG Version

    What bootfile is your boot server trying to send?

    Is you server sending the right FOG server for option 66/67?

    What OS are you trying to capture?

    What does the error show or maybe a screen shot? (UEFI Boot looks different from Legacy boot from Mac from arm, etc…)

    What type of machine are you trying to image?

    What have you tried?

  • Group Multicast - Dev-Branch

    Unsolved FOG Problems
    3
    0 Votes
    3 Posts
    270 Views
    Tom ElliottT

    @JJ-Fullmer @edvandro This should be fixed in dev-branch as well, but I agree with JJ here, please upgrade to working-1.6.

  • iPXE build failing

    Unsolved FOG Problems
    7
    0 Votes
    7 Posts
    472 Views
    Tom ElliottT

    @astrugatch Okay thanks and sorry there was that issue.

    Can you pull and try installing again?

    Thank you!

  • 0 Votes
    1 Posts
    142 Views
    No one has replied