Posts made by george1421

Ugh, surface pros… Just kidding. Well not really…

There was a recent thread that discussed this issue: https://forums.fogproject.org/topic/11635/microsoft-surface-pro-4-using-dock-has-issues-with-dhcp-for-imaging-task

In a nut shell the issue is with the external dock and the current series of linux kernels. Both issues are outside of the FOG Project control.

So what can you do?

1. Strong arm (force) Microsoft to release the design guide on their network adapters.
2. Use a down level kernel just for the MS surface systems (4.10 should work??)
3. Force the kernel developers to reverse engineer the surface nic drivers to make it work again.
4. Use a supported third party USB NIC, and USB boot into iPXE bypassing uefi pxe booting on the surface devices.

Out of all of the options #4 has the least pain in the group.

@janspook I was just looking at the config files for iPXE issued by fog for another ticket and I found the NFS code has been turned off.

https://github.com/FOGProject/fogproject/blob/master/src/ipxe/src/config/general.h

Line #60. So that IS why the NFS protocol doesn’t work in the tutorial. The iPXE kernels I sent you should address the issue in the short term.

Note these are not official iPXE boot loaders, these are tests to see if the certificate code offered by the iPXE developers are causing problems with 1709 based Hyper-V virtual machines

Here is the rom-o-matic build image url for undionly.kpxe and ipxe.kpxe without

#undefine DOWNLOAD_PROTO_HTTPS
#undefine IMAGE_TRUST_CMD
#undefine CERT_CMD

The following link will create undionly.kpxe (you will need to rename the output of this script to undionly.kpxe since it will default to ipxe.kpxe.

https://rom-o-matic.eu/build.fcgi?BINARY=ipxe.kpxe&BINDIR=bin&REVISION=master&DEBUG=&EMBED.00script.ipxe=%23%21ipxe%0Aisset%20%24%7Bnet0/mac%7D%20%26%26%20ifopen%20net0%20%26%26%20dhcp%20net0%20%7C%7C%20goto%20dhcpnet1%0Aecho%20Received%20DHCP%20answer%20on%20interface%20net0%20%26%26%20goto%20proxycheck%0A%0A%3Adhcpnet1%0Aisset%20%24%7Bnet1/mac%7D%20%26%26%20ifopen%20net1%20%26%26%20dhcp%20net1%20%7C%7C%20goto%20dhcpnet2%0Aecho%20Received%20DHCP%20answer%20on%20interface%20net1%20%26%26%20goto%20proxycheck%0A%0A%3Adhcpnet2%0Aisset%20%24%7Bnet2/mac%7D%20%26%26%20ifopen%20net2%20%26%26%20dhcp%20net2%20%7C%7C%20goto%20dhcpall%0Aecho%20Received%20DHCP%20anser%20on%20infterface%20net2%20%26%26%20goto%20proxycheck%0A%0A%3Adhcpall%0Adhcp%20%26%26%20goto%20proxycheck%20%7C%7C%20goto%20dhcperror%0A%0A%3Adhcperror%0Aprompt%20--key%20s%20--timeout%2010000%20DHCP%20failed%2C%20hit%20%27s%27%20for%20the%20iPXE%20shell%3B%20reboot%20in%2010%20seconds%20%26%26%20shell%20%7C%7C%20reboot%0A%0A%3Aproxycheck%0Aisset%20%24%7Bproxydhcp/next-server%7D%20%26%26%20set%20next-server%20%24%7Bproxydhcp/next-server%7D%20%7C%7C%20goto%20nextservercheck%0A%0A%3Anextservercheck%0Aisset%20%24%7Bnext-server%7D%20%26%26%20goto%20netboot%20%7C%7C%20goto%20setserv%0A%0A%3Asetserv%0Aecho%20-n%20Please%20enter%20tftp%20server%3A%20%26%26%20read%20next-server%20%26%26%20goto%20netboot%20%7C%7C%20goto%20setserv%0A%0A%3Anetboot%0Achain%20tftp%3A//%24%7Bnext-server%7D/default.ipxe%20%7C%7C%0Aprompt%20--key%20s%20--timeout%2010000%20Chainloading%20failed%2C%20hit%20%27s%27%20for%20the%20iPXE%20shell%3B%20reboot%20in%2010%20seconds%20%26%26%20shell%20%7C%7C%20reboot&settings.h/VMWARE_SETTINGS:=1&general.h/PXE_STACK:=1&general.h/PXE_MENU:=1&general.h/DOWNLOAD_PROTO_NFS:=1&general.h/IMAGE_PXE:=1&general.h/IMAGE_SCRIPT:=1&general.h/IMAGE_BZIMAGE:=1&general.h/IMAGE_PNM:=1&general.h/IWMGMT_CMD:=0&general.h/NSLOOKUP_CMD:=1&general.h/TIME_CMD:=1&general.h/DIGEST_CMD:=1&general.h/LOTEST_CMD:=1&general.h/VLAN_CMD:=1&general.h/PXE_CMD:=1&general.h/REBOOT_CMD:=1&general.h/POWEROFF_CMD:=1&general.h/PCI_CMD:=1&general.h/PARAM_CMD:=1&general.h/NEIGHBOUR_CMD:=1&general.h/PING_CMD:=1&general.h/CONSOLE_CMD:=1&general.h/IPSTAT_CMD:=1&general.h/NTP_CMD:=1&console.h/CONSOLE_FRAMEBUFFER:=1&console.h/CONSOLE_VMWARE:=1&general.h/ROM_BANNER_TIMEOUT=40&branding.h/PRODUCT_NAME=FOG%20iPXE&branding.h/PRODUCT_TAG_LINE=FOG%20Network%20Boot%20Firmware&

The following link will create the ipxe.kpxe file (all drivers)

https://rom-o-matic.eu/build.fcgi?BINARY=ipxe.kpxe&BINDIR=bin&REVISION=master&DEBUG=&EMBED.00script.ipxe=%23%21ipxe%0Aisset%20%24%7Bnet0/mac%7D%20%26%26%20ifopen%20net0%20%26%26%20dhcp%20net0%20%7C%7C%20goto%20dhcpnet1%0Aecho%20Received%20DHCP%20answer%20on%20interface%20net0%20%26%26%20goto%20proxycheck%0A%0A%3Adhcpnet1%0Aisset%20%24%7Bnet1/mac%7D%20%26%26%20ifopen%20net1%20%26%26%20dhcp%20net1%20%7C%7C%20goto%20dhcpnet2%0Aecho%20Received%20DHCP%20answer%20on%20interface%20net1%20%26%26%20goto%20proxycheck%0A%0A%3Adhcpnet2%0Aisset%20%24%7Bnet2/mac%7D%20%26%26%20ifopen%20net2%20%26%26%20dhcp%20net2%20%7C%7C%20goto%20dhcpall%0Aecho%20Received%20DHCP%20anser%20on%20infterface%20net2%20%26%26%20goto%20proxycheck%0A%0A%3Adhcpall%0Adhcp%20%26%26%20goto%20proxycheck%20%7C%7C%20goto%20dhcperror%0A%0A%3Adhcperror%0Aprompt%20--key%20s%20--timeout%2010000%20DHCP%20failed%2C%20hit%20%27s%27%20for%20the%20iPXE%20shell%3B%20reboot%20in%2010%20seconds%20%26%26%20shell%20%7C%7C%20reboot%0A%0A%3Aproxycheck%0Aisset%20%24%7Bproxydhcp/next-server%7D%20%26%26%20set%20next-server%20%24%7Bproxydhcp/next-server%7D%20%7C%7C%20goto%20nextservercheck%0A%0A%3Anextservercheck%0Aisset%20%24%7Bnext-server%7D%20%26%26%20goto%20netboot%20%7C%7C%20goto%20setserv%0A%0A%3Asetserv%0Aecho%20-n%20Please%20enter%20tftp%20server%3A%20%26%26%20read%20next-server%20%26%26%20goto%20netboot%20%7C%7C%20goto%20setserv%0A%0A%3Anetboot%0Achain%20tftp%3A//%24%7Bnext-server%7D/default.ipxe%20%7C%7C%0Aprompt%20--key%20s%20--timeout%2010000%20Chainloading%20failed%2C%20hit%20%27s%27%20for%20the%20iPXE%20shell%3B%20reboot%20in%2010%20seconds%20%26%26%20shell%20%7C%7C%20reboot&settings.h/VMWARE_SETTINGS:=1&general.h/PXE_STACK:=1&general.h/PXE_MENU:=1&general.h/DOWNLOAD_PROTO_NFS:=1&general.h/IMAGE_PXE:=1&general.h/IMAGE_SCRIPT:=1&general.h/IMAGE_BZIMAGE:=1&general.h/IMAGE_PNM:=1&general.h/IWMGMT_CMD:=0&general.h/NSLOOKUP_CMD:=1&general.h/TIME_CMD:=1&general.h/DIGEST_CMD:=1&general.h/LOTEST_CMD:=1&general.h/VLAN_CMD:=1&general.h/PXE_CMD:=1&general.h/REBOOT_CMD:=1&general.h/POWEROFF_CMD:=1&general.h/PCI_CMD:=1&general.h/PARAM_CMD:=1&general.h/NEIGHBOUR_CMD:=1&general.h/PING_CMD:=1&general.h/CONSOLE_CMD:=1&general.h/IPSTAT_CMD:=1&general.h/NTP_CMD:=1&console.h/CONSOLE_FRAMEBUFFER:=1&console.h/CONSOLE_VMWARE:=1&general.h/ROM_BANNER_TIMEOUT=40&branding.h/PRODUCT_NAME=FOG%20iPXE&branding.h/PRODUCT_TAG_LINE=FOG%20Network%20Boot%20Firmware&

@shad0wguy If you scroll all the way to the bottom of my synology tutorial the post titled Part 2: testing the nfs share. There is a process of populating the /images and /images/dev directories from the master FOG server.

@tom-elliott 10-4. I built the wrong kernel with the rom-o-matic, don’t trust and old guy’s memory on what he should be doing.

In the first go around I just built a test version to see if it might work.

@lukebarone OK well then I’m the lost one. I built the wrong frick’n boot loader. I’ll have to go back and start over and build the undionly.kpxe one. Sorry I’m trying to do too many things at one. I’ll work on the bios version one over night.

@lukebarone Ok lets backup here. The issue we were trying to solve is pxe booting into uefi mode. The image above makes me think we are in bios mode.

@lukebarone Can/will you paste in the link in my last post into your browser. That will instruct the rom-o-matic site to create a new ipxe.efi where the certificate stuff is turned off. FOG doesn’t currently use the certificate code at all. I’m interested in see if having the code turned off works for you too. Once the rom-o-matic site finishes it will present you will a new ipxe.efi to download. Swap that file out for the FOG supplied image and test.

In the end we are waiting for the iPXE folks to fix the issue with the certificate code running on hyper-v

@shad0wguy Well what I’m proposing is to only create the services that FOG uses on your NAS and not install it using the fog installer.

I thought we had a tutorial for the readnas, but all I can find is the qnap and the synology. I can get you started but you will have to carry the configuration home (and hopefully document it for the next guy).

Here is the tutorial I created for the synology NAS: https://forums.fogproject.org/topic/9430/synology-nas-as-fog-storage-node

Here is the tutorial @Iarwayn created for the QNAP: https://forums.fogproject.org/topic/10973/add-a-nas-qnap-ts-231-as-a-storage-node-fog-v1-4

Basically to turn a nas into a FOG storage node you need 4 services.

1. FTP
2. NFS
3. TFTP
4. The ability to create a fog user.

I also wrote a PoC on turning a windows server into a fog storage node. https://forums.fogproject.org/topic/10097/setting-up-a-windows-2012-server-as-a-fog-storage-node

The purpose of providing all of these documents is you can see what is in common with each variant.

The only thing that you won’t be able to do is install the fog storage node management code, because of course it will take over the management interface on your fog server. The nas will work well as a storage node.

@shad0wguy Ok that explains why. So what you can do is turn your readynas into a FOG storage node. Would that work for you?

@shad0wguy ok let me turn the question around. Why are you using a nas with FOG? And what NAS manufacturer do you have?

You can not reshare an nfs mounted share. This will not work. FOS connects to the FOG server over NFS, so you can’t mount an nfs share on your fog server and then reshare it via nfs.

@chris-whiteley Upload to a google drive / dropbox and IM me the link

Make sure you use the capture filter I posted so we don’t get extra stuff I should not see.

@chris-whiteley I think we have a disconnect somewhere (remember I’m trying to visualize how you have things setup).

We need to get a monitoring computer on the same vlan as the computer that will not pxe boot. Typically when we debug this, we will take a laptop with wireshark installed to the remote site and plug it into the same vlan as the failing to boot computer. Start wireshark and then try to pxe boot the target computer. Once the target computer fails to boot, stop the pcap and look at what is collected.

This is not possible to do?

The port 3306, is mysql server traffic. The storage nodes don’t have their own mysql database. They are reaching out to the master node for instructions from its database. But I wouldn’t think this traffic would be very much. I would tend to think the fog client check-ins to the master node or something wrong with the replicator where it continues to replicate with no changes would consume more bandwidth that the mysql queries.

@chris-whiteley For the ease of debugging it would be helpful to have them on the same subnet. We have a document for debugging pxe booting using the fog server: https://forums.fogproject.org/topic/9673/when-dhcp-pxe-booting-process-goes-bad-and-you-have-no-clue

But in your case since the target computers are on a different subnet the fog server can’t spy on the entire conversation. So in your case you will need to take a computer on the same subnet as the (non)pxe booting computer and install wireshark on it. Then setup a capture filter of port 67 or port 68, then launch the target computer to pxe boot. This will watch the dhcp dialog. What will be interesting is the “offer” response from the dhcp server. If you don’t know what you are looking for in the dhcp process upload the pcap to a google drive and IM me the link. I’ll take a look at it to see if the dhcp server is sending the right information.

If that bit is good then we will need to run a pcap on the fog server to see that side of the conversation.

@chris-whiteley Is your fog server and target (pxe booting) computer on the same subnet?

Just for an additional bit of information. Your reference/golden image should never be connected to AD before you sysprep it. Even if it was connected to AD, then removed from AD before system. The first time you connect a computer to AD the target computer will be tattooed causing every image created from that golden image problems down the road.

@tesparza If you copy the file to a target computer, open a cmd window using run as administrator. Then issue the command with the /silent key switch does it install without asking any additional questions?