Posts made by lebrun78

lebrun78

Thank you for your answer.
Your document is complete.

lebrun78

Hello,
I have a kernel panic problem when I try to install linux OS using ipxe in UEFI mode.
I have not problem to install using ipxe boot in legacy mode or to point my MDT server.

Should I have differents entries for UEFI ?
Which parameter should I modify ?

Here is my Advanced Menu settings

:MENU
menu
item --gap -- ---------------- iPXE boot menu ----------------
item Centos7 Install mini Centos7
item Centos8 Installation Centos8
item Ubuntu20 Installation Ubuntu20
item WIN10MDT1903 Boot MDT-Win10-1903
item shell ipxe shell
item return return to previous menu
choose --default WIN10MDT1903 --timeout 10000 target && goto ${target}
:Centos7
kernel https://192.168.122.2/linuxboot/vmlinuz-CentOS7 ks=https://mdt.istic.univ-rennes1.fr/Centos7/anaconda-ks.cfg
initrd https://192.168.122.2/linuxboot/initrd.img-CentOS7
boot
:Centos8
kernel https://192.168.122.2/linuxboot/vmlinuz-CentOS8 ks=https://mdt.istic.univ-rennes1.fr/Centos8/anaconda-ks.cfg
initrd https://192.168.122.2/linuxboot/initrd.img-CentOS8
boot
:Ubuntu20
kernel https://192.168.122.2/linuxboot/linux-Ub20 ks=https://mdt.istic.univ-rennes1.fr/Ubuntu20/anaconda-ub20-ks.cfg
initrd https://192.168.122.2/linuxboot/initrd-Ub20.gz
boot
:WIN10MDT1903
cpuid --ext 29 && set arch x64 || set arch x86
kernel http://${next-server}/wimboot
initrd http://${next-server}/mdtboot/${arch}/media/Boot/BCD BCD
initrd http://${next-server}/mdtboot/${arch}/media/Boot/boot.sdi boot.sdi
initrd -n boot.wim http://${next-server}/mdtboot/${arch}/LiteTouchPE_1903.wim boot.wim
boot
:shell
shell ||
goto MENU

Here is the error trying to install Ubuntu 2004:
text alternatif
Here is the error trying to install Centos:

Thank you for your help.

lebrun78

Hello
On my testing server, centos8 up to date, fog 1.5.9-RC2,
I try to use local certificates.
I placed my certificates in /etc/httpd/cert path.
I first tried to install with the private key using this command:

sslprivkey='/etc/httpd/cert/star.istic.univ-rennes1.fr.key' ./installfog.sh -y

No success

I have reinstall forcing certificates generation ```
./installfog.sh -C -K

I modified /etc/httpd/conf.d/fog.conf with:
```    #SSLCertificateFile /var/www/html/fog/management/other/ssl/srvpublic.crt
    #SSLCertificateKeyFile /opt/fog/snapins/ssl//.srvprivate.key
    #SSLCACertificateFile /var/www/html/fog//management/other/ca.cert.pem
    SSLCertificateKeyFile /etc/httpd/cert/star.istic.univ-rennes1.fr.key
    SSLCertificateFile /etc/httpd/cert/star_istic_univ-rennes1_fr.crt
    SSLCertificateChainFile /etc/httpd/cert/DigiCertCA.crt

Web console works fine, no more certificat warnings.
But I have problem on pxe boot.

I get
“https://148.60.4.2/fog/service/ipxe/boot.php… No such file or directory (http://ipxe.org/2d0c613b)”

I tried to generate a new ipxe configuration
cd /opt/fogproject-1.5.9-RC2/utils/FOGiPXE/
./buildipxe.sh
But iI don’t understand where the configuration obtained is put ?

Any help would be greatly appreciated.

lebrun78

@Sebastian-Roth
Yes class and host are now declarated in groups, not in subnets.
So now, I declare all subnets first and after all groups.
Here is my new dhcpd.conf file:

# dhcpd.conf  
#
ddns-update-style standard;
authoritative;

#log-facility local7;
set vendor-string = option vendor-class-identifier;
log (info, option vendor-class-identifier);


##############################################
# rajoute pour les telephones IP IFSIC/ISTIC
# C'est pour pouvoir utiliser le prise LAN
# derriere le telephone dans l'un des reseau ESIR/ISTIC
##################################################
option space Tel-Sip;
option Tel-Sip.cfg-server-address code 2 = text;
option Tel-Sip.contact-rcs code 3 = boolean;

class "telephones-ip" {
	# voir man dhcp-eval
	match if substring(hardware,1,3) = 00:08:5d;
	option server.min-lease-time 40;
        option ntp-servers 129.20.251.1;
        #option tftp-server-name "129.20.131.108";
	option server.vendor-option-space Tel-Sip;
      	option server.boot-unknown-clients true;
      	option Tel-Sip.contact-rcs true;
      	option Tel-Sip.cfg-server-address "ftp://connexio994:xa3SGXZE74@10.21.7.8";
}

# sacker un peu les smartphones ...
class "android" {
  match if substring(option host-name,0,7) = "android";
  default-lease-time 900 ;
  max-lease-time 900 ;
}
class "iPhone" {
  match if substring(option host-name,0,6) = "iPhone";
  default-lease-time 900 ;
  max-lease-time 900 ;
}
class "iPad" {
  match if substring(option host-name,0,4) = "iPad";
  default-lease-time 900 ;
  max-lease-time 900 ;
}
class "Windows-Phone" {
  match if substring(option host-name,0,13) = "Windows-Phone";
  default-lease-time 900 ;
  max-lease-time 900 ;
}
class "Galaxy" {
  match if substring(option host-name,0,6) = "Galaxy";
  default-lease-time 900 ;
  max-lease-time 900 ;
}
class "HUAWEI" {
  match if substring(option host-name,0,6) = "HUAWEI";
  default-lease-time 900 ;
  max-lease-time 900 ;
}
class "Samsung" {
  match if substring(option host-name,0,7) = "Samsung";
  default-lease-time 900 ;
  max-lease-time 900 ;
}
class "Honor" {
  match if substring(option host-name,0,5) = "Honor";
  default-lease-time 900 ;
  max-lease-time 900 ;
}


#
# machines recevant une IP dynamique dans le vlan2 (lan-free).
#

include "/etc/dhcp/vip.conf";

subnet 145.55.0.0 netmask 255.255.248.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 145.55.7.254 ;
option subnet-mask 255.255.248.0 ;
default-lease-time 86400 ;
max-lease-time 172800 ;

pool {
                allow members of "vip";
                range 145.55.7.200 145.55.7.230;
}




	####################################################
        # pool d'adresse dynamique reserve aux telephones IP
	# masque de 255.255.255.240 pour le firewall
        pool {
                allow members of "telephones-ip";
                range 145.55.0.224 145.55.0.239;
        }
}


#subnet 145.55.8.0 netmask 255.255.255.0 {
##########################################                                                
#option domain-name-servers 145.55.15.109,145.55.15.106 ;
#option domain-name "monuniversite1.fr" ;
#option routers 145.55.8.254 ;
#option subnet-mask 255.255.255.0 ;
#default-lease-time 6000 ;
#max-lease-time 12000 ;
#group {
#}
#}

subnet 145.55.10.0 netmask 255.255.255.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 145.55.10.254 ;
option subnet-mask 255.255.255.0 ;
default-lease-time 600 ;
max-lease-time 1200 ;



	pool {
		deny members of "telephones-ip";
		range 145.55.10.180 145.55.10.220;
		next-server 145.55.4.1;
        	#filename "pxelinux.0";
	}

	####################################################
	# pool d'adresse dynamique reserve aux telephones IP
	# testsip
	pool {
		allow members of "telephones-ip";
		range 145.55.10.224 145.55.10.239; #avec un masque de 255.255.255.240 pour erebus
	}
}

subnet 145.55.11.0 netmask 255.255.255.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 145.55.11.254 ;
option subnet-mask 255.255.255.0 ;
default-lease-time 86400 ;
max-lease-time 172800 ;
range 145.55.11.1 145.55.11.9 ;


}

subnet 145.55.12.0 netmask 255.255.255.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 145.55.12.254 ;
option subnet-mask 255.255.255.0 ;
default-lease-time 86400 ;
max-lease-time 172800 ;
#

range 145.55.12.101 145.55.12.140 ;
#range 145.55.12.100 145.55.12.199 ;
}

subnet 145.55.13.0 netmask 255.255.255.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 145.55.13.254 ;
option subnet-mask 255.255.255.0 ;
option ntp-servers 129.20.128.22;
default-lease-time 3600 ;
max-lease-time 3600 ;
adaptive-lease-time-threshold 80;
min-lease-time 900;
range 145.55.13.1 145.55.13.247 ;
}

subnet 145.55.14.0 netmask 255.255.255.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 145.55.14.254 ;
option subnet-mask 255.255.255.0 ;
option ntp-servers 129.20.128.22;
default-lease-time 3600 ;
max-lease-time 3600 ;
adaptive-lease-time-threshold 80;
min-lease-time 900;
range 145.55.14.16 145.55.14.253 ;
}

subnet 145.55.15.0 netmask 255.255.255.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 145.55.15.254 ;
option subnet-mask 255.255.255.0 ;
default-lease-time 2592000 ;
max-lease-time 5184000 ;
}

subnet 129.20.15.0 netmask 255.255.255.0 {
##########################################
option domain-name-servers 145.55.15.109,145.55.15.106 ;
option domain-name "monuniversite1.fr" ;
option routers 129.20.15.254 ;
option subnet-mask 255.255.255.0 ;
default-lease-time 2592000 ;
max-lease-time 172800 ;
#

	####################################################
	# pool d'adresse dynamique reserve aux telephones IP
	# testsip
	pool {
		allow members of "telephones-ip";
		range 129.20.15.224 129.20.15.239; #avec un masque de 255.255.255.240 pour erebus
	}
}

group { #######################################VLAN2 > FOG ########################################
	next-server 145.55.4.1;

class "Legacy" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
        filename "undionly.kkpxe";
    }
    class "UEFI-32-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-32-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-64-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
        filename "ipxe.efi";
    }
    class "UEFI-64-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
        filename "ipxe.efi";
    }
    class "UEFI-64-3" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
        filename "ipxe.efi";
    }

host admin01 { hardware ethernet 74:e6:e2:d9:dd:cf; fixed-address admin01; option Host-name "admin01";} # 
host admin02 { hardware ethernet b8:85:84:ac:89:fa; fixed-address admin02; option Host-name "admin02";} # proto windows salles istic
..........................................................................
host imp-b42-001 { hardware ethernet 78:e3:b5:fb:31:da; fixed-address imp-b42-001; option Host-name "imp-b42-001";}
host imp-b42-002 { hardware ethernet 10:1F:74:47:1E:4E; fixed-address imp-b42-002; option Host-name "imp-b42-002";}
# Gateway LORA F.Bodin le 11/12/2019


##module niusrp
host niusrp6 { hardware ethernet 00:80:2f:17:b4:e3; fixed-address niusrp6; option Host-name "niusrp6";}

### Salle machines virtuelles
#

host virt01m01 { hardware ethernet aa:bb:aa:bb:aa:aa; fixed-address virt01m01; option Host-name "virt01m01";}
host virt01m02 { hardware ethernet aa:bb:aa:bb:aa:ab; fixed-address virt01m02; option Host-name "virt01m02";}

host w10 { hardware ethernet 9c:8e:99:f5:1a:a9; fixed-address w10; option Host-name "w10";}

# marque debut pour dhcp-vm vlan 2, pas touche SVP.

# marque fin pour dhcp-vm vlan 2, pas touche SVP.

}

group {  #######################################VLAN2 > COSINUS ########################################
# Groupe pointant vers le pxe du Fog de test                                                                                                                                    
  	option domain-name-servers 145.55.15.109,145.55.15.106;
        next-server 145.55.4.2;

class "Legacy" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
        filename "undionly.kkpxe";
    }
    class "UEFI-32-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-32-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-64-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
        filename "ipxe.efi";
    }
    class "UEFI-64-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
        filename "ipxe.efi";
    }
    class "UEFI-64-3" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
        filename "ipxe.efi";
    }
#
#Machine test cosinus

#host centos7-6 { hardware ethernet 52:54:00:b3:30:b5; fixed-address centos7-6; option Host-name "centos7-6";} # VM sur admin11
..................................................................................................................
#host b06-013m01 { hardware ethernet 9c:8e:99:f5:69:2a; fixed-address b06-013m01; option Host-name "b06-013m01";}



}


group {  ###################################### VLAN2 IMPRIMANTES ########################################
host imp-2a-020 { hardware ethernet 00:11:85:FA:28:9A; fixed-address imp-2a-020; option Host-name "imp-2a-020";} # 
h
host d262m03 { hardware ethernet 00:11:43:2C:11:8D; fixed-address d262m03; option Host-name "d262m03";} # gx280 carte acquisition
host e114m01 { hardware ethernet 00:13:72:0D:55:B7; fixed-address e114m01; option Host-name "e114m01";} # F Lamarche
#host imp-b05-001 { hardware ethernet 00:1f:29:1f:23:c9; fixed-address imp-b05-001; option Host-name "imp-b05-001";} 

}
group {  #######################################VLAN2 COMMUT ########################################
#
# groupe  : commut
#
host c12eb { hardware ethernet ; fixed-address c12eb; option Host-name "c12eb";} # 
host c12ea { hardware ethernet ; fixed-address c12ea; option Host-name "c12ea";} # 
host c12ee { hardware ethernet ; fixed-address c12ee; option Host-name "c12ee";} # 
host c2ba { hardware ethernet ; fixed-address c2ba; option Host-name "c2ba";} # 
.................................................................................
host c12dt { hardware ethernet ; fixed-address c12dt; option Host-name "c12dt";} # 
host c12du { hardware ethernet ; fixed-address c12du; option Host-name "c12du";} # 
}


group { ####################################################VLAN10################################################
# On commente les deux lignes suivantes pour eviter le menu de Fog
 	next-server 145.55.4.1;

class "Legacy" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
        filename "undionly.kkpxe";
    }
    class "UEFI-32-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-32-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-64-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
        filename "ipxe.efi";
    }
    class "UEFI-64-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
        filename "ipxe.efi";
    }
    class "UEFI-64-3" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
        filename "ipxe.efi";
    }

host arrakis { hardware ethernet 00:23:AE:6A:83:FA; fixed-address arrakis; option Host-name "arrakis";} # Gx360 Gentoo AD
host admin11 { hardware ethernet 9c:8e:99:f5:68:ca; fixed-address admin11; option Host-name "admin11";} #linux test 8300 AD
......................................................................................................................
#host miage-dell6 { hardware ethernet 10:65:30:83:5c:4b; fixed-address miage-dell6; option Host-name "miage-dell6";} #   
# marque debut pour dhcp-vm vlan 10, pas touche SVP.
host winrm10 {hardware ethernet 00:11:E2:61:00:03; fixed-address winrm10; option Host-name "winrm10";}     # Ajout par dhcp-vm le 22/08/2016 (11:32:32)
# marque fin pour dhcp-vm vlan 10, pas touche SVP.

}

group { ####################################################VLAN11################################################
# marque debut pour dhcp-vm vlan 11, pas touche SVP.
host pret13 {hardware ethernet 00:11:E7:61:00:10; fixed-address pret13; option Host-name "pret13";}     # Ajout par dhcp-vm le 24/5/2013 (11:21:05)
...........................................................................................................
host palme02 { hardware ethernet 00:23:ae:74:66:85; fixed-address palme02; option Host-name "palme02";} # poste asso Palme d193 Maxime Lambert 12006967
}


group { ##########################################VLAN12#######################################
	next-server 145.55.4.1;

class "Legacy" {
      match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
        filename "undionly.kkpxe";
    }
    class "UEFI-32-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-32-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-64-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
        filename "ipxe.efi";
    }
    class "UEFI-64-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
        filename "ipxe.efi";
    }
    class "UEFI-64-3" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
        filename "ipxe.efi";
    }
#
### Salle_i204
#
host i204m01 { hardware ethernet 14:b3:1f:19:81:02; fixed-address i204m01; option Host-name "i204m01";}
.........................................................................................................
host i204m10 { hardware ethernet 14:b3:1f:19:80:20; fixed-address i204m10; option Host-name "i204m10";}

### Salle_i206
#
host i206m01 { hardware ethernet b8:85:84:b9:68:49; fixed-address i206m01; option Host-name "i206m01";}
...........................................................................................................
host i206m10 { hardware ethernet b8:85:84:b9:5e:9f; fixed-address i206m10; option Host-name "i206m10";}
#

### Salle_i207
#
host i207m01 { hardware ethernet 78:ac:c0:b1:aa:f6; fixed-address i207m01; option Host-name "i207m01";} # 
............................................................................................................
host i207m22 { hardware ethernet 00:11:43:14:42:11; fixed-address i207m22; option Host-name "i207m22";} #

}
group {
host psyche { hardware ethernet 00:13:72:08:e1:93; fixed-address psyche; option Host-name "psyche";} # 
# host psyche { hardware ethernet 00:13:72:0D:70:D8; fixed-address psyche; option Host-name "psyche";} # 
host anubis { hardware ethernet 00:14:22:75:AF:18; fixed-address anubis; option Host-name "anubis";} # 
}


group { ##############################################VLAN15################################################
#
        next-server 145.55.4.1;

class "Legacy" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
        filename "undionly.kkpxe";
    }
    class "UEFI-32-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-32-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-64-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
        filename "ipxe.efi";
    }
    class "UEFI-64-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
        filename "ipxe.efi";
    }
    class "UEFI-64-3" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
        filename "ipxe.efi";
    }

#
host wifsic1 { hardware ethernet 00:42:68:44:79:18; fixed-address wifsic1; option Host-name "wifsic1";} #
h....................................................................................................
host satus {hardware ethernet 78:2B:CB:6D:38:C3; fixed-address satus; option Host-name "satus";} 
}


group { ######################################## VLAN3 Personnels ############################
# On commente les deux lignes suivantes pour eviter le menu de Fog 
 	next-server 145.55.4.1;

class "Legacy" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
	filename "undionly.kkpxe";
    }
    class "UEFI-32-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-32-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-64-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
        filename "ipxe.efi";
    }
    class "UEFI-64-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
        filename "ipxe.efi";
    }
    class "UEFI-64-3" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
        filename "ipxe.efi";
    }
                                                                                                                                                                               #
host ad-istic1 { hardware ethernet 00:15:5d:0f:fb:00; fixed-address ad-istic1; option Host-name "ad-istic1";}
.....................................................................................................
host b06-014m01 { hardware ethernet 8c:04:ba:5d:81:cc; fixed-address b06-014m01; option Host-name "b06-014m01";} # portable Samuel Crand 2019-06
host bug { hardware ethernet 9c:8e:99:f5:9c:2e; fixed-address bug; option Host-name "bug";} # HP 8300 
}
group {  ######################################## VLAN3 Personnels > COSINUS############################
# boot cosinus pour 129.20.15
    next-server 145.55.4.2;

class "Legacy" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00000";
        filename "undionly.kkpxe";
    }
    class "UEFI-32-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00002";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-32-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00006";
        filename "i386-efi/ipxe.efi";
    }
    class "UEFI-64-1" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00007";
        filename "ipxe.efi";
    }
    class "UEFI-64-2" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00008";
        filename "ipxe.efi";
    }
    class "UEFI-64-3" {
        match if substring(option vendor-class-identifier, 0, 20) = "PXEClient:Arch:00009";
        filename "ipxe.efi";
    }
#host d000m02 { hardware ethernet c8:1f:66:aa:26:b2; fixed-address d000m02; option Host-name "d000m02";}
#host b42-015m01new {hardware ethernet b8:85:84:b5:ea:9c; fixed-address b42-015m01new;option Host-name "b42-015m01new";}

}

lebrun78

@george1421

Here is the post:
https://lists.isc.org/pipermail/dhcp-users/2020-April/022039.html

lebrun78

I found the solution of the problem
After a post on dhcp-users-request@lists.isc.org, Niall O’Reilly proposed to declare hosts out of the subnet.
And effectivly , now, hosts are declared in group but not in the subnet and it works .

Thank you very much for your help, Sebastian and George.

lebrun78

@Sebastian-Roth
Thank you very much for your work !

lebrun78

@george1421
So here is a capture with 2 request, on pxe at time 0 and at time 196 a usb boot ubuntu.
When ubuntu loaded, ip a give good IP adress, good router and good netwask
capturedhcp.pcap

lebrun78

@Sebastian-Roth
Hello
I have blanked the lease file. At the reboot of the client, same problem.
Here is the actual lease file:

cat dhcpd.leases
# The format of this file is documented in the dhcpd.leases(5) manual page.
# This lease file was written by isc-dhcp-4.2.5

server-duid "\000\001\000\001&\036\337\215P\232L\202P~";

lease 148.60.10.180 {
  starts 2 2020/04/07 06:53:04;
  ends 3 2020/04/08 06:53:04;
  cltt 2 2020/04/07 06:53:04;
  binding state active;
  next binding state free;
  rewind binding state free;
  hardware ethernet 10:65:30:83:5c:4b;
  set vendor-string = "PXEClient:Arch:00007:UNDI:003016";

lebrun78

@george1421
I have just done the search of extra curly brace with notepadd++, I didn’t see the problem.

The file in first post is an extract, you can view the production file here:
https://filesender.renater.fr/?s=download&token=11cc357f-4663-41c8-830b-71938d2d2aa7

lebrun78

@george1421
Hello Geoge
this morning I made a test by reversing the places of the declarations of the subnet.
In fact the client recovers the mask and router of the first declared subnet…

lebrun78

I have made 2 boot on the windows machine, UEFi pxe boot and hard drive boot.
I get this logs in my dhcp server:

Apr  6 09:46:02 sybille2 dhcpd: PXEClient:Arch:00007:UNDI:003016
Apr  6 09:46:02 sybille2 dhcpd: DHCPDISCOVER from 10:65:30:83:5c:4b via em2.10
Apr  6 09:46:03 sybille2 dhcpd: DHCPOFFER on 148.60.10.198 to 10:65:30:83:5c:4b via em2.10
Apr  6 09:46:05 sybille2 dhcpd: PXEClient:Arch:00007:UNDI:003016
Apr  6 09:46:05 sybille2 dhcpd: DHCPREQUEST for 148.60.10.198 (148.60.10.252) from 10:65:30:83:5c:4b via em2.10
Apr  6 09:46:05 sybille2 dhcpd: DHCPACK on 148.60.10.198 to 10:65:30:83:5c:4b via em2.10
Apr  6 09:46:41 sybille2 dhcpd: MSFT 5.0
Apr  6 09:46:41 sybille2 dhcpd: DHCPDISCOVER from 10:65:30:83:5c:4b via em2.10
Apr  6 09:46:42 sybille2 dhcpd: DHCPOFFER on 148.60.10.190 to 10:65:30:83:5c:4b (MININT-S9D1BSU) via em2.10
Apr  6 09:46:42 sybille2 dhcpd: MSFT 5.0
Apr  6 09:46:42 sybille2 dhcpd: DHCPREQUEST for 148.60.10.190 (148.60.10.252) from 10:65:30:83:5c:4b (MININT-S9D1BSU) via em2.10
Apr  6 09:46:42 sybille2 dhcpd: DHCPACK on 148.60.10.190 to 10:65:30:83:5c:4b (MININT-S9D1BSU) via em2.10
Apr  6 09:46:42 sybille2 dhcpd: Unable to add forward map from MININT-S9D1BSU.istic.univ-rennes1.fr to 148.60.10.190: not found

The same machine gets to differents IP, 148.60.10.190 and 148.60.10.198 at 09:46:03 (pxe booot) and at 09:46:40

lebrun78

@george1421

So I’ll ask you the same question again in a different way. Is dhcp server 148.60.10.252 and 148.60.4.3 the same computer?
YES
I have only one dhcpd.conf file, sone only one instance of dhcp

Here is what I get on the same machine on vlan 148.60.10.0/24 when windows is loaded:

It’s crazy, no ?

lebrun78

@george1421

Yes, we don’t have dhcp relay, the dhcp server have several virtual network interface, one on each vlan.

lebrun78

@george1421
I’m the infrastructure manager, the dhcpd.conf is the one in the first post …

lebrun78

@Sebastian-Roth
Yes ipconfig is good.

lebrun78

@george1421
“At this time the problem is infrastructure related and not FOG.” I agree.
I don’t understand the boot dhcp response on vlan 10.
The ip configuration is good when loaded !

lebrun78

@george1421
Here is the capture from fog server, client in uefi mode
uefi.pcap

lebrun78

Several vlan:

148.60.0.0 255.255.248.0 (148.60.0.0 > 148.60.7.255)
(fog server vlan 148.60.4.1, dhcp 148.60.4.3 router 148…60.7.254
148.60.8.0 255.255.255.0 (148.60.8.0 > 148.60.8.255)
router 148…60.8.254 no dhcp
148.60.10.0 255.255.255.0 (148.60.10.0 > 148.60.10.255)
dhcp 148.60.10.252 router 148…60.10.254 (vlan with deployment problem)
148.60.11.0 255.255.255.0 (148.60.11.0 > 148.60.11.255)
dhcp 148.60.11.248 router 148…60.11.254
148.60.12.0 255.255.255.0 (148.60.12.0 > 148.60.12.255)
dhcp 148.60.11.252 router 148…60.12.254
148.60.13.0 255.255.255.0 (148.60.13.0 > 148.60.13.255)
dhcp 148.60.13.248 router 148…60.13.254
148.60.14.0 255.255.255.0 (148.60.14.0 > 148.60.14.255)
dhcp 148.60.14.252 router 148…60.14.254
148.60.15.0 255.255.255.0 (148.60.15.0 > 148.60.15.255)
dhcp 148.60.15.109 (its native vlan) router 148…60.15.254