Posts made by Reuban1219

Not sure if Ill get much help but, Ill hope for the best.
Im already running FOG server with clients. In total, 5 physical devices connected to each other using a switch. I need to run malware tests on all 4 clients in a sandbox (cuckoo) & make my life easier by automating the image deployment using cuckoo. Ive installed Cuckoo Host. but, I’m struggling to find any guide on the Cuckoo documents on how to configure Fog for the physical.conf files. If anyone here has any links or other sources it would be helpful.

My set up:
Fog server- Debian 10.3
Clients- Win_10, Win_8.1, Win_7, Win_XP

Additional notes:
-my clients are not allowed to connect to the internet
-each client has their own static IP address
-capture & deploy is working well for all clients
-Server has two NIC (one to the internet & one to the locally connected to other clients)

@Sebastian-Roth Other than Single Disk - Resizable option there is three other choices.
a) Multiple Partition Image - Single Disk(Not Resizable)
b)Multiple Partition Image - All Disks(Not Resizable)
c)Raw Image (Sector BY Sector,DD,Slow)

Which of these do I choose?
Btw, I have an additional question. Is it okay to capture and deploy image without doing sysprep? Or is it a must to do sysprep?

Ive managed to capture & deploy images of Win 10,8.1 & 7. But, after I capture an image of Windows XP(completed as it shows in my FOG server), my Windows XP screen goes blank after it reboots. Initially, I thought it was still trying to boot to the NIC. But, I changed it to HDD back, yet, it still remains blank. Its just a small blinking “_” symbol at the top left corner and nothing more.

My Windows XP client has a .NET Framework v3.5 & I used FOG Client Legacy set up since I know MSI & FOG installer doesn’t work in Windows XP. I have started the client service, I can receive undionly.kpxe file through TFTP, I can ping to my server. So, Im kinda clueless to whats the issue. Any suggestions?

@Sebastian-Roth @george1421 Thank you two so much. Ive managed to successfully upload and deploy an image. You’ve been very patient and helpful throughout. And it wasn’t the spanning tree problem. It was the switch which automatically closed the port. I then decided to connect the PC directly to each other and it immediately booted into FOG image upload. Now, I have to figure out how to keep the ports open at all times for the switch. Thank you again for all the help.

@Sebastian-Roth Im sorry. I just realized that the installer was asking for my DHCP server address. Ive got that fixed. Now, currently:

1. Installed Fog client in Windows 7 in another PC.
2. Ive created image and host for windows 7 and also created a capture task.
3. I booted into nic for my client. Everything goes fine now. But, now im getting error saying:

Either DHCP failed or we were unable to access http://X.X.X.X/fog//index.php for connection testing.
No DHCP response on interface eth0, skipping it
Failed to get IP via DHCP! Tried on interface(s): eth0
Please check your network set up and try again

@Sebastian-Roth For the DHCP & TFTP server, Debian 10.3 sources.list file are not reachable. I had this problem during my first time set up for Debian 10.3. I could not get updates. So, i edited the sources.list file with the latest links and sources so that it has DHCP and TFTP capabilities as well.

For the router,I just chose “No”. I guess in my understanding, since im already setting a default gateway and server IP addresses, i dont think i need to set router IP as well.

@Sebastian-Roth @george1421 @Tom-Elliott Here is my current update.

1. I have reinstalled Debian 10.3 into my CPU and installed and updated all necessary files (DHCP & TFTP server)
2. I have set up two network interfaces. One is to the ethernet port of my office for updates and etc. Another is connected to a dumb switch( this switch is connected to my other CPU’s that I need to upload images from)
   3.As suggested by @Sebastian-Roth I have set my local network to have a static IP and my other connection is accessible to the internet. Now, When trying to install FOG(1.5.8). I am being prompted to choose my default network interface. I choose the LOCAL interface. Now, its asking for setup router interface. Do i say no or default(yes)?

@Sebastian-Roth this is the link :
https://wiki.fogproject.org/wiki/index.php/Building_undionly.kpxe

@george1421 Okay,thankyou. If i am to use two network interfaces, during installation, which should be my default network interface? The one connected to the internet or to the Local-Switch without the internet?

@george1421 Thank you. But, what if i have already updated and installed Fog to the latest version. Do i still need to be connected to the internet? Because from what I’ve read, FOG server can be run without internet to upload and export images.

@Tom-Elliott Yes. I did build it myself based of the Fog Wiki page at the undionly build section. And yes, I also rebuild the ipxe files after commenting them. Yet, i still get the same error.

Trying to create a testbed for malware analysis. Boss told me to use FOG in Debian(because ill be working with only terminal later on). Im new to Debian & only knew FOG existed last week. I tried setting up the server but I keep failing and I’m being pressured due to time constraints. Im not sure if Im doing this right. Im stuck in a situation that makes me come back again to the start each time. So, Im going to list down what I’ve done to Install my FOG Server.

1. I Installed Debian 10.3 in a PC to make it as my server.
2. I then installed FOG’s latest version 1.5.7 into my Debian.
3. I already get-update the installer.
4. I followed the instruction as it is. Since I cannot connect my other PC’s to the internet, I am using a switch to connect them locally with ethernet cables. Therefore, my DHCP server(also my FOG server) is set up to assign IP addresses to other PC’s.
5. Ive opened up the web page to my localhost FOG.
6. From here, Im stuck. The Wiki & also other tutorials online have different ways to capture an image and it all seems so easy to do. But, I keep encountering problems.
   Problems that I faced:
   -DHCP server didn’t want to turn on
   -TFTP server didn’t want to turn on
   -Link files from the FOG zip file was outdated therefore, I had to manually input Debian 10.3 links for drivers.
   -pxelinux files were missing
   -tftpboot files missing
   After solving all these problems.
   Im now stuck at my bios with these error:

params: command not found
Could not boot: Exec format error (http://ipxe.org/2e22001)

And yes, I did check my config.h file and I did add the #define PARAM_CMD. I also restarted the TFTP and DHCP services. I even uninstalled, purge and reinstalled the latest versions for he services. Im honestly stuck. I don’t mind starting all over again from scratch. I would be glad to uninstall and purge the entire FOG system and start from scratch if someone gave me proper instructions that are helpful for Debian 10.3. A proper, step-by-step,hassle free installation. Because its very troublesome to install offline versions of file and extracting them then putting it in a usb and transferring it to the server and client. I know connecting to the internet would save me all the trouble but it was strict rules from my supervisor to not connect them to the internet. If anyone would help me, Id be very grateful. Thank you. Im sorry if I sound like a child whining.

@george1421 Thank you for the links. But, I am now facing an issue with installing the Fog clients. I downloaded the MSI installer in my windows XP and configured the server address. But, it keeps giving error of installation ending prematurely. Is this probably due to my DHCP server not set up properly?

@Fog_Newb Thank you. But, is there a DHCP server setting for Debian 10? Most of the tutorials that I have seen setting up servers in Windows which is fairly easy because of their network setting.

I am trying to run a testbed to test malwares on different operating systems. This is to save me time to reconfigure the operating systems each time I run a malware therefore, I created a Fog Server running on Debian 10.3 on a PC. Now, I want to upload images from 4 different PC’s without using the internet.Each PC runs a different version of Microsoft OS( 10 Pro,8.1 Pro, 7 Ultimate, XP Pro). But, I am clueless on how to upload them without using the internet. I need guidance on how else can I do this. Plus, I only heard about Fog yesterday so, i followed a youtube video to set up the server.