Posts made by astrugatch

astrugatch

I am looking at the migration instructions in the wiki and see a mention of SSL at the top by don’t see it mentioned in the instructions (except for migrating from 1.3)

astrugatch

@Sebastian-Roth

Tried dev-branch but still no dice. I think the issue is related to my current system. I’m going to spin up a new instance and migrate to that with a clean install of 18.04 and 1.5.7 and see how it behaves after that.

astrugatch

@Sebastian-Roth
No worries. I’m not in a rush to have a newer version and our windows footprint is fairly small so even if our fog install crashes and burns its not the end of the world.

Here you go.

fogadmin@fogimaging:~$ apt-cache policy | grep http | awk '{print $2 $3}' | sort -u
http://security.ubuntu.com/ubuntubionic-security/main
http://security.ubuntu.com/ubuntubionic-security/multiverse
http://security.ubuntu.com/ubuntubionic-security/restricted
http://security.ubuntu.com/ubuntubionic-security/universe
http://us.archive.ubuntu.com/ubuntubionic-backports/main
http://us.archive.ubuntu.com/ubuntubionic-backports/universe
http://us.archive.ubuntu.com/ubuntubionic/main
http://us.archive.ubuntu.com/ubuntubionic/multiverse
http://us.archive.ubuntu.com/ubuntubionic/restricted
http://us.archive.ubuntu.com/ubuntubionic/universe
http://us.archive.ubuntu.com/ubuntubionic-updates/main
http://us.archive.ubuntu.com/ubuntubionic-updates/multiverse
http://us.archive.ubuntu.com/ubuntubionic-updates/restricted
http://us.archive.ubuntu.com/ubuntubionic-updates/universe

astrugatch

@Sebastian-Roth

fogadmin@fogimaging:~$ sudo dpkg -l | grep -e mariadb -e mysql -e curl
[sudo] password for fogadmin:
ii  libcurl3:amd64                        7.58.0-2ubuntu2                                          amd64        easy-to-use client-side URL transfer library (OpenSSL flavour)
ii  libcurl3-gnutls:amd64                 7.58.0-2ubuntu3.8                                        amd64        easy-to-use client-side URL transfer library (GnuTLS flavour)
ii  mysql-client                          5.7.29-0ubuntu0.18.04.1                                  all          MySQL database client (metapackage depending on the latest version)
ii  mysql-client-5.7                      5.7.29-0ubuntu0.18.04.1                                  amd64        MySQL database client binaries
ii  mysql-client-core-5.7                 5.7.29-0ubuntu0.18.04.1                                  amd64        MySQL database core client binaries
ii  mysql-common                          5.8+1.0.4                                                all          MySQL database common files, e.g. /etc/mysql/my.cnf
ii  mysql-server                          5.7.29-0ubuntu0.18.04.1                                  all          MySQL database server (metapackage depending on the latest version)
ii  mysql-server-5.7                      5.7.29-0ubuntu0.18.04.1                                  amd64        MySQL database server binaries and system database setup
ii  mysql-server-core-5.7                 5.7.29-0ubuntu0.18.04.1                                  amd64        MySQL database server binaries
ii  php7.1-curl                           7.1.30-1+ubuntu16.04.1+deb.sury.org+1                    amd64        CURL module for PHP
ii  php7.1-mysql                          7.1.30-1+ubuntu16.04.1+deb.sury.org+1                    amd64        MySQL module for PHP
ii  python-pycurl                         7.43.0.1-0.2                                             amd64        Python bindings to libcurl
ii  python3-pycurl                        7.43.0.1-0.2                                             amd64        Python bindings to libcurl (Python 3)
fogadmin@fogimaging:~$ sudo dpkg -l apache2 | grep '^ii'
ii  apache2        2.4.39-1+ubuntu16.04.1+deb.sury.org+1 amd64        Apache HTTP Server
fogadmin@fogimaging:~$ sudo dpkg --configure -a
fogadmin@fogimaging:~$ sudo apt-get install -f
Reading package lists... Done
Building dependency tree
Reading state information... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
fogadmin@fogimaging:~$

astrugatch

@Sebastian-Roth

I’ll check this tomorrow. There may be idiosyncrasies with my system. I’ve been upgrading in place from 1.5.0RC2 and 16.04 to the present.

astrugatch

@Sebastian-Roth

No worries. Let me know if you need someone to test. I can clone / snapshot my setup pretty quickly.

astrugatch

Sorry I needed the server and rolled back to a snapshot so I don’t have the log. Ill take another snapshot in a little while and run the install again.

astrugatch

Tried to upgrade my system (1.5.7 on Ubuntu 18.04) to latest 1.5.7.xxx

Git pull master and run the installer and this is what I get:

Installing LSB_Release as needed
 * Attempting to get release information.......................Done


   +------------------------------------------+
   |     ..#######:.    ..,#,..     .::##::.  |
   |.:######          .:;####:......;#;..     |
   |...##...        ...##;,;##::::.##...      |
   |   ,#          ...##.....##:::##     ..:: |
   |   ##    .::###,,##.   . ##.::#.:######::.|
   |...##:::###::....#. ..  .#...#. #...#:::. |
   |..:####:..    ..##......##::##  ..  #     |
   |    #  .      ...##:,;##;:::#: ... ##..   |
   |   .#  .       .:;####;::::.##:::;#:..    |
   |    #                     ..:;###..       |
   |                                          |
   +------------------------------------------+
   |      Free Computer Imaging Solution      |
   +------------------------------------------+
   |  Credits: http://fogproject.org/Credits  |
   |       http://fogproject.org/Credits      |
   |       Released under GPL Version 3       |
   +------------------------------------------+


   Version: 1.5.8 Installer/Updater


 * Found FOG Settings from previous install at: /opt/fog/.fogsettings

 * Performing upgrade using these settings


  Starting Debian based Installation



   ######################################################################
   #     FOG now has everything it needs for this setup, but please     #
   #   understand that this script will overwrite any setting you may   #
   #   have setup for services like DHCP, apache, pxe, tftp, and NFS.   #
   ######################################################################
   # It is not recommended that you install this on a production system #
   #        as this script modifies many of your system                 #
######################################################################
   #             This script should be run by the root user.            #
   #      It will prepend the running with sudo if root is not set      #
   ######################################################################
   #            Please see our wiki for more information at:            #
   ######################################################################
   #             https://wiki.fogproject.org/wiki/index.php             #
   ######################################################################

 * Here are the settings FOG will use:
 * Base Linux: Debian
 * Detected Linux Distribution: Ubuntu
 * Interface: eth0
 * Server IP Address: REDACTED
 * Server Subnet Mask: 255.255.255.0
 * Server Hostname: REDACTED
 * Installation Type: Normal Server
 * Internationalization: 0
 * Image Storage Location: /images
 * Using FOG DHCP: No
 * DHCP will NOT be setup but you must setup your
 | current DHCP server to use FOG for PXE services.

 * On a Linux DHCP server you must set: next-server and filename

 * On a Windows DHCP server you must set options 066 and 067

 * Option 066/next-server is the IP of the FOG Server: (e.g. 10.10.70.4)
 * Option 067/filename is the bootfile: (e.g. undionly.kpxe)


 * Are you sure you wish to continue (Y/N) y

 * Installation Started

 * Testing internet connection.................................Done
 * Adding repository if needed.................................OK
 * Preparing Package Manager...................................OK
 * Packages to be installed:

	apache2 bc build-essential cpp curl g++ gawk gcc genisoimage git gzip htmldoc isolinux lftp libapache2-mod-php7.2 libc6 libcurl4 liblzma-dev m4 mariadb-client mariadb-server net-tools nfs-kernel-server openssh-server php7.2 php7.2-bcmath php7.2-cli php7.2-curl php7.2-fpm php7.2-gd php7.2-json php7.2-ldap php7.2-mbstring php7.2-mysql php7.2-mysqlnd php-gettext sysv-rc-conf tar tftpd-hpa tftp-hpa unzip vsftpd wget xinetd zlib1g 


 * Skipping package:   apache2.................................(Already Installed)
 * Skipping package:   bc......................................(Already Installed)
 * Skipping package:   build-essential.........................(Already Installed)
 * Skipping package:   cpp.....................................(Already Installed)
 * Installing package: curl....................................Failed! (Will try later)
 * Skipping package:   g++.....................................(Already Installed)
 * Skipping package:   gawk....................................(Already Installed)
 * Skipping package:   gcc.....................................(Already Installed)
 * Skipping package:   genisoimage.............................(Already Installed)
 * Skipping package:   git.....................................(Already Installed)
 * Skipping package:   gzip....................................(Already Installed)
 * Skipping package:   htmldoc.................................(Already Installed)
 * Skipping package:   isolinux................................(Already Installed)
 * Skipping package:   lftp....................................(Already Installed)
 * Installing package: libapache2-mod-php7.2...................OK
 * Skipping package:   libc6...................................(Already Installed)
 * Installing package: libcurl4................................OK
 * Skipping package:   liblzma-dev.............................(Already Installed)
 * Skipping package:   m4......................................(Already Installed)
 * Installing package: mariadb-client..........................Failed! (Will try later)
 * Installing package: mariadb-server..........................Failed! (Will try later)
 * Skipping package:   net-tools...............................(Already Installed)
 * Skipping package:   nfs-kernel-server.......................(Already Installed)
 * Skipping package:   openssh-server..........................(Already Installed)
 * Installing package: php7.2..................................OK
 * Installing package: php7.2-bcmath...........................OK
 * Skipping package:   php7.2-cli..............................(Already Installed)
 * Installing package: php7.2-curl.............................OK
 * Installing package: php7.2-fpm..............................OK
 * Installing package: php7.2-gd...............................OK
 * Skipping package:   php7.2-json.............................(Already Installed)
 * Installing package: php7.2-ldap.............................OK
 * Installing package: php7.2-mbstring.........................OK
 * Installing package: php7.2-mysql............................OK
 * Skipping package:   php7.2-mysql............................(Already Installed)
 * Skipping package:   php-gettext.............................(Already Installed)
 * Skipping package: sysv-rc-conf..............................(Does not exist)
 * Skipping package:   tar.....................................(Already Installed)
 * Skipping package:   tftpd-hpa...............................(Already Installed)
 * Skipping package:   tftp-hpa................................(Already Installed)
 * Skipping package:   unzip...................................(Already Installed)
 * Skipping package:   vsftpd..................................(Already Installed)
 * Skipping package:   wget....................................(Already Installed)
 * Skipping package:   xinetd..................................(Already Installed)
 * Skipping package:   zlib1g..................................(Already Installed)
 * Updating packages as needed.................................OK
 * Installing now everything is updated........................OK

 * Confirming package installation

 * Checking package: apache2...................................Failed!
]0;root@fogimaging: ~/trunk/binroot@fogimaging:~/trunk/bin# reboot

After this completes I cannot access the web console at all (not a failed database connection, its as if apache isn’t running at all) this persists even if I restart apache manually.

astrugatch

If I recall correctly the Acrobat exe installer has an MSI baked inside of it. If you run it on a machine and don’t complete the install, then go to your app data local low there should be an acrobat folder in there that has the MSI and a CAB. These are what I use to deploy via group policy.

If your machines are bound you could also do this as a batch script and use a UNC path for the exe and include the arguments in that.

astrugatch

@george1421
The only reason I can see it continuing to work is because microsoft isn’t primarily a hardware company. They need their OS to be available on many different standard x86_64 hardware. Now if they stop selling OEM installers and only using somesort of pre-baked internet recovery I would be more nervous.

astrugatch

@ismith-hpu

While I’m sure @Sebastian-Roth will work with you to try and get this going. As someone who manages a rather large fleet of Apple computers I’m going to tell you whatever the solution is; its not worth it.

As far as Apple is concerned imaging is dead. Full stop.
The procedure for provisioning machines in bulk is as such:

Install OS via internet recovery or if the machine is brand new it should come out of the box with a current OS (You can do net install on older machines but T2 makes this impossible on newer machines unless you are willing to disable SIP, which you shouldn’t)
Have your machines enrolled in DEP via school manager or business manager
DEP will put your machine into your MDM of choice (JAMF, Mosley etc)
Your MDM will provision profiles and software from your repository

Yes. You can technically image Macs for now, but the process is going to be full of work arounds and scotch tape which in the end will stop working at the next OS and you will need to start over.

Do yourself a favor and stop imaging Macs.

astrugatch

@SBrady

This is more of a Linux question rather than a Xen/Hypervisor question. You can do it by booting to a liveCD and running gparted. Don’t try to modify your drive from your running OS.

astrugatch

@spooninbrian

@Sebastian-Roth said in HTTPS FOG GUI webpage:

You’d need to either manually edit the apache config to not make it force redirect to HTTPS or edit C:\Program File (x86)\FOG\settings.json on the clients and set parameter HTTPS to 1. The later method is preferred from my point of view.

Updating the settings.json on my hosts is what I did for existing clients when I made the move to HTTPS, and creating a new image with an updated install to be used with future clients. The easiest way I found with existing clients was to create a group policy that would move a corrected settings.json into place from a file share.

astrugatch

@Quazz

In K12 its pretty common to treat many of your internal users as hostile (right or wrong) since students seem to always try to mess with things whether with malice or just screwing around.

Also with some of the other changes in security on FOG (DB and HTTPS etc) pointing toward the outside to manage devices via the client doesn’t sound impossible for small deployments. Again, it’s not what I’m doing or planning to do, but it would be possible if measures like these were in place.

astrugatch

Might be useful for FOS login too. Shouldn’t be impossible to implement. Add Fail2Ban to list of apps to get from the repo and point it to the login logs. I’m sure I’m way over simplifying it (not a dev obviously). As FOG moves to a more secure standard install (SQL password, HTTPS etc) this would be another great feature to have.

astrugatch

@george1421

I used to see the issues with warm boots on older versions. That seems to not be the case in the latest version.

astrugatch

@JRA

Virtualbox is where I make all my base images. Are you using EFI or just a standard BIOS VM?

astrugatch

@george1421

I would be very interested in that. Do you have a GIT for that, that I could look at?

astrugatch

@Deimos

Isn’t that what command and configure is for (if you’re a dell shop at least)?

astrugatch

@Sebastian-Roth

It would be nice to have, but definitely not make or break for our environment. We already have to touch so many things in BIOS to set our machines up the way we want them that turning off secure boot is just one of many. I don’t really see the value. I know its sold to protect from rootkits, but it feels more like vendor lock-in to Windows.