Menu na taya 🥇PXE tare da Manajan Kanfigareshan Cibiyar

Muna la'akari da faɗaɗa iyawar Manajan Kanfigareshan Cibiyar Tsarin (samfurin don sarrafa kayan aikin IT) lokacin tayar da kwamfutocin masu amfani akan hanyar sadarwa ta amfani da PXE. Mun ƙirƙiri menu na taya bisa PXELinux tare da ayyukan Cibiyar Tsari kuma muna ƙara sikanin rigakafin ƙwayoyin cuta, ganowa da hotuna na dawo da su. A ƙarshen labarin, mun taɓa fasalulluka na Manajan Kanfigareshan Cibiyar Tsarin Tsarin 2012 tare da Sabis na Haɓakawa na Windows (WDS) lokacin yin booting ta hanyar PXE.

Muna yin duk ayyuka akan yanayin gwaji wanda ya riga ya shigar da Manajan Kanfigareshan Cibiyar Tsarin Tsarin 2012 SP1, mai sarrafa yanki, da adadin injin gwaji. An ɗauka cewa SCCM an riga an tura shi akan hanyar sadarwa ta amfani da PXE.

Gabatarwa

Yanayin gwajin ya ƙunshi na'urori masu kama-da-wane da yawa. Duk injuna suna da Microsoft Windows Server 2008 R2 (x64) baƙo OS shigar, E1000 adaftar cibiyar sadarwa, SCSI Controller: LSI Logic SAS

Suna (Roles)
Adireshin IP / sunan DNS
Aiki

SCCM (Mai sarrafa Kanfigareshan Tsari)
192.168.57.102
sccm2012.test.local

Mai Sarrafa Manajan Kanfigareshan Cibiyar Tsara 2012 SP1

DC (AD, DHCP, DNS)
192.168.57.10
dc1.test.local

Matsayin mai sarrafa yanki, uwar garken DHCP da uwar garken DNS

TEST (Na'urar gwaji)
192.168.57.103
gwada.gwaji.local

Don gwaji

G.W. (Gateway)
192.168.57.1
Gudanarwa tsakanin cibiyoyin sadarwa. Matsayin Ƙofa

1. Ƙara PXELinux zuwa SCCM

Muna yin ayyuka akan injin inda aka shigar Manajan Kanfigareshan Cibiyar

Bari mu tantance kundin adireshi inda fayilolin WDS suke don zazzagewa, saboda wannan muna duba cikin rajista don ƙimar ma'aunin. RootFolder a cikin reshe HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesWDSServerProvidersWDSTFTP
Ƙimar ta asali C:RemoteInstall
Fayilolin da za a zazzage daga wurin tura SCCM suna cikin kundayen adireshi smsbootx86 и smsbootx64 dangane da gine-gine.
Da farko, saita kundin adireshi don gine-gine 32-bit, ta tsohuwa c:Remoteinstallsmsbootx86
Zazzage ma'ajin tare da sabo syslinux . Kwafi daga syslinux-5.01.zip zuwa c:Remoteinstallsmsbootx86 fayiloli masu zuwa:
memdisk, chain.c32, ldlinux.c32, libcom32.c32, libutil.c32, pxechn.c32, vesamenu.c32, pxelinux.0
Ana buƙatar ƙarin fayiloli don guje wa irin wannan kuskuren.
В c:Remoteinstallsmsbootx86 sake suna pxelinux.0 в pxelinux.com
A babban fayil c:remoteinstallsmsbootx86 yi kwafi abortpxe.com kuma sake suna zuwa abortpxe.0
Idan ba a sake suna zuwa tsawo ba .0, to misali umarnin
```
Kernel abortpxe.com
```
zai gaza tare da kuskure mai zuwa: Booting kernel ya kasa: Mummunan lambar fayil
Don PXELINUX, ya kamata a saita tsawo na fayil ɗin zazzage bisa ga farantin
```
none or other	Linux kernel image
 .0		PXE bootstrap program (NBP) [PXELINUX only]
 .bin		"CD boot sector" [ISOLINUX only]
 .bs		Boot sector [SYSLINUX only]
 .bss		Boot sector, DOS superblock will be patched in [SYSLINUX only]
 .c32		COM32 image (32-bit COMBOOT)
 .cbt		COMBOOT image (not runnable from DOS)
 .com		COMBOOT image (runnable from DOS)
 .img		Disk image [ISOLINUX only]
```
source: http://www.syslinux.org/wiki/index.php/SYSLINUX#KERNEL_file sashe "Kernel fayil"
Don kar a danna maɓallin F12 sau da yawa lokacin loda SCCM ta cikin menu, sake suna pxeboot.com zuwa pxeboot.com.f12, kwafi pxeboot.n12 zuwa pxeboot.com
Idan ba a yi haka ba, to lokacin zabar, za mu sami irin wannan sakon a kowane lokaci

Lura: Kar a manta da sake suna waɗannan fayilolin a cikin babban fayil ɗin x64 kuma. idan yayi lodi x86wdsnbp.com daga babban fayil x86, mai ɗaukar kaya yana ƙayyade tsarin gine-gine kuma ana ɗora fayil na gaba daga babban fayil tare da tsarin gine-ginen da ya dace. Don haka, don x64, fayil ɗin da ke gaba ba zai kasance ba x86pxeboot.comda kuma x64pxeboot.com
Sauke / ƙirƙira baya.png, ƙuduri 640x480, kwafi zuwa babban fayil guda. Ƙirƙiri babban fayil ISO inda za mu sanya hotunan ISO. Ƙirƙiri babban fayil pxelinux.cfg don daidaitawa.

A cikin babban fayil na pxelinux.cfg, ƙirƙiri tsoho fayil, a cikin rufaffen mara-unicode, tare da abun ciki.
tsoho (danna don nunawa)

# используем графическое меню
DEFAULT vesamenu.c32
PROMPT 0
timeout 80
TOTALTIMEOUT 9000

MENU TITLE PXE Boot Menu (x86)
MENU INCLUDE pxelinux.cfg/graphics.conf
MENU AUTOBOOT Starting Local System in 8 seconds

# Boot local HDD (default)
LABEL bootlocal
menu label Boot Local
menu default
localboot 0x80
# if it doesn't work 
#kernel chain.c32
#append hd0

# Вход в меню по паролю Qwerty, алгоритм MD5
label av
menu label Antivirus and tools
menu PASSWD $1$15opgKTx$dP/IaLNiCbfECiC2KPkDC0
kernel vesamenu.c32
append pxelinux.cfgav.conf 

label sccm
menu label Start to SCCM
COM32 pxechn.c32
APPEND sccm2012.test.local::smsbootx86wdsnbp.com -W

label pxe64
menu label Start to x64 pxelinux
COM32 pxechn.c32
APPEND sccm2012.test.local::smsbootx64pxelinux.com

LABEL Abort
MENU LABEL Exit
KERNEL abortpxe.0

A babban fayil pxelinux.cfg ƙirƙirar fayil graphics.conf tare da abun ciki
graphics.conf (danna don nunawa)

MENU MARGIN 10
MENU ROWS 16
MENU TABMSGROW 21
MENU TIMEOUTROW 26
MENU COLOR BORDER 30;44 #00000000 #00000000 none
MENU COLOR SCROLLBAR 30;44 #00000000 #00000000 none
MENU COLOR TITLE 0 #ffffffff #00000000 none
MENU COLOR SEL 30;47 #40000000 #20ffffff
MENU BACKGROUND background.png
NOESCAPE 0
ALLOWOPTIONS 0

A babban fayil pxelinux.cfg ƙirƙirar fayil av.conf tare da abun ciki
av.conf (danna don nunawa)

DEFAULT vesamenu.c32
PROMPT 0
MENU TITLE Antivirus and tools
MENU INCLUDE pxelinux.cfg/graphics.conf

label main menu
menu label return to main menu
kernel vesamenu.c32
append pxelinux.cfg/default

label drweb
menu label DrWeb
kernel memdisk
append iso raw initrd=isodrweb.iso

label eset
menu label Eset
kernel memdisk
append iso raw initrd=isoeset_sysrescue.iso

label kav
menu label KAV Rescue CD
KERNEL kav/rescue
APPEND initrd=kav/rescue.igz root=live rootfstype=auto vga=791 init=/init kav_lang=ru udev liveimg doscsi nomodeset quiet splash

#Загружаем ISO по полному пути, можно загружать с другого TFTP
label winpe
menu label WinPE  from another TFTP
kernel sccm2012.test.local::smsbootx86memdisk
append iso raw initrd=sccm2012.test.local::smsbootx86isoWinPE_RaSla.iso

label clonezilla
menu label Clonezilla
kernel memdisk
append iso raw initrd=isoclonezilla.iso

Sakamakon haka, kundin adireshin c:remoteinstallsmsbootx86 ya ƙunshi tsarin
c:remoteinstallsmsbootx86
pxelinux.cfg

sarkar.c32
ldlinux.c32
libcom32.c32
libutil.c32
pxechn.c32
wuta.c32
pxelinux.com
baya.png
pxelinux.cfg
pxelinux.cfg
pxelinux.cfg
ISO
zubar da ciki.0
wdsnbp.com
bootmgfw.efi
wdsmgfw.efi
bootmgr.exe
pxeboot.n 12
pxeboot.com
abortpxe.com

tsoho
av.conf
graphics.conf
*. iso
Don tsarin gine-ginen x64, haka nan muna kwafi kuma mu ƙirƙiri tsari iri ɗaya a cikin babban fayil ɗin c:remoteinstallsmsbootx64

.Arin ƙari
Lokacin amfani da umarnin menu PASSWD za a iya saita kalmar sirri ko dai yadda yake, ko amfani da hashing algorithm ta ƙara sa hannu daidai a farkon siga.

Algorithm
Sa hannu

MD5
$ 1 $

SHA-1
$ 4 $

SHA-2-256
$ 5 $

SHA-2-512
$ 6 $

Don haka ga kalmar sirri Qwerty da kuma MD5 algorithm
menu PASSWD $1$15opgKTx$dP/IaLNiCbfECiC2KPkDC0
Kuna iya samar da kalmar sirri, misali, ta hanyar janareta na zanta na kan layi www.insidepro.com/hashes.php?lang=rus, layi MD5(Unix)

2. Saita PXELinux boot

Yanzu za mu nuna yadda ake loda pxelinux.com kuma sami menu.
Ƙayyade pxelinux.com bootloader ta aikin WDS baya aiki a SCCM. Duba Umurni

wdsutil /set-server /bootprogram:bootx86pxeboot.com /architecture:x86

ba a sarrafa su. Kuna iya tabbatar da cewa ba'a saita hotunan taya ta hanyar aiwatar da umarnin daidaitawar uwar garken WDS

wdsutil /get-server /show:images

Don haka, a cikin SCCM 2012, ba za ku iya tantance fayil ɗinku don saukar da PXE zuwa mai bada SMSPXE ba. Saboda haka, za mu saita wurin aiki na uwar garken DHCP.
A cikin sigogi na yankin aiki na DHCP, saita sigogi bisa ga farantin

DHCP zaɓi
Sunan madaidaici
Ma'ana

066
Boot uwar garken sunan mai masaukin baki
sccm2012.test.local

067
Bootfile sunan
smsbootx86pxelinux.com

006
Sabobin DNS
192.168.57.10

015
DNS Domain Name
gwadawa.na gida

A cikin zaɓi 066 mun ƙayyade sunan FQDN na uwar garken sccm, a cikin zaɓi na 067 mun ƙayyade hanyar zuwa x86 bootloader pxelinux.com wanda ya fara daga tushen TFTP, a cikin zaɓi 006 mun ƙayyade adireshin IP na uwar garken DNS. Idan an yi amfani da ɗan gajeren sunan uwar garken a zaɓi na 066, a cikin zaɓi na 015 mun ƙididdige suffix na DNS na yankin.

.Arin ƙari
An bayyana tsarin DHCP daki-daki mvgolubev a nan. Amma a kan DC zaɓi 150, adireshin IP na uwar garken TFTP, ya ɓace daga saitunan DHCP, kuma ƙayyade zaɓi 150 ta hanyar netsh bai yi aiki ba.

3. Duba aiki

An kammala ainihin saitunan kuma za ku iya fara dubawa. Mun nuna akan kwamfutar gwajin da ke cikin BIOS an ɗora ta akan hanyar sadarwa kuma an ɗora ta cikin menu

Zabi wani abu «Start to SCCM» idan kuma aka sanya jerin ayyuka a kwamfutar, to bayan wani lokaci sai taga “Task Sequence Wizard” zata bayyana wanda zai sa ka shigar da kalmar sirri.

Sake kunna na'ura, koma zuwa menu, zaɓi a cikin menu «Antivirus and tools» kuma shigar da kalmar sirri Qwerty

Muna zaɓar abu na sabani kuma muna lura da loda hoton ISO cikin ƙwaƙwalwar ajiya

Jira da ganin sakamakon

An gama tabbatarwa

4. Ƙarin saituna da fasali

Saitin hanya

Idan abokin ciniki, uwar garken DHCP da uwar garken mai ɗauke da mai ɗaukar hanyar sadarwa suna cikin sashin cibiyar sadarwa iri ɗaya, ba a buƙatar ƙarin saiti. Koyaya, idan abokin ciniki da uwar garken DHCP ko uwar garken WDS/SCCM suna kan sassan cibiyar sadarwa daban-daban, ana ba da shawarar ku saita masu amfani da hanyoyin sadarwa don tura fakitin watsa shirye-shirye daga abokin ciniki zuwa uwar garken DHCP mai aiki da uwar garken WDS/SCCM mai aiki. A cikin wallafe-wallafen Turanci, ana kiran wannan tsari da "IP Helper table updates". A wannan yanayin, abokin ciniki, bayan samun adireshin IP, yana tuntuɓar uwar garken da ke ɗauke da mai ɗaukar hanyar sadarwa kai tsaye ta hanyar fakitin DHCP don sauke mai ɗaukar hanyar sadarwa.
Don masu amfani da hanyar sadarwa na Cisco, yi amfani da umarnin

ip helper-address {ip address}

inda {ip address} uwar garken DHCP ko adireshin uwar garken WDS/SCCM. Wannan umarni kuma yana aika fakitin watsa shirye-shiryen UDP masu zuwa

Tashar jiragen ruwa
РџСЂРѕС‚РѕРєРѕР »

69
TFTP

53
Sunan Yanki (DNS)

37
Sabis na lokaci

137
NetBIOS Server Name

138
NetBIOS Datagram Server

67
Bootstrap Protocol (BOOTP)

49
TACACS

Hanya ta biyu don abokin ciniki don samun bayani game da mai ɗaukar hanyar sadarwa kai tsaye daga uwar garken DHCP shine don ƙayyade zaɓuɓɓukan 60,66,67 akan uwar garken DHCP. Yin amfani da zaɓi na DHCP 60 tare da ƙima «PXEClient» zuwa ga dukkan iyakokin DHCP, kawai idan uwar garken DHCP ta kasance a cikin sabar iri ɗaya da Sabis na Deployment na Windows. A wannan yanayin, abokin ciniki yana sadarwa kai tsaye tare da sabar Sabis na Ayyuka na Windows ta amfani da TFTP akan tashar tashar UDP 4011 maimakon amfani da DHCP. Microsoft ba ta ba da shawarar wannan hanyar ba saboda al'amurra tare da daidaita nauyi, rashin kulawar zaɓuɓɓukan DHCP da zaɓuɓɓukan amsawar Sabis na Sabis na Windows a gefen abokin ciniki. Hakanan saboda amfani da zaɓin DHCP guda biyu kawai 66 da 67 yana ba ku damar ketare sigogi da aka saita akan sabar boot ɗin cibiyar sadarwa.
Hakanan kuna buƙatar buɗe tashoshin jiragen ruwa na UDP masu zuwa akan sabar Sabis na Sabis na Windows
tashar jiragen ruwa 67 (DHCP)
tashar jiragen ruwa 69 (TFTP)
tashar jiragen ruwa 4011 (PXE)
da tashar jiragen ruwa 68 idan ana buƙatar izinin DHCP akan uwar garken.

A cikin ƙarin daki-daki, tsarin daidaitawa da nuances na juyawa tsakanin sabar WDS daban-daban an bayyana su a ƙasa a cikin maɓuɓɓuka:
Gudanar da shirin boot na hanyar sadarwa http://technet.microsoft.com/ru-ru/library/cc732351(v=ws.10).aspx
Gudanar da Sabar http://technet.microsoft.com/ru-ru/library/cc770637(v=ws.10).aspx
Sabis na Taimakon Samfuran Microsoft (PSS) yana tallafawa iyakoki don haɓaka hanyar sadarwa ta Microsoft Windows Preinstallation Environment (Windows PE) 2.0 http://support.microsoft.com/kb/926172/en-us
Yadda ake tura watsa shirye-shiryen UDP (BOOTP / DHCP) akan Cisco http://www.cisco-faq.com/163/forward_udp_broadcas.html
Siffofin aiki da daidaitawar DHCP akan masu amfani da hanyar Cisco (Sashe na 2) http://habrahabr.ru/post/89997/

Ƙarin zaɓuɓɓuka don zazzagewar gida

A kan yanayin gwaji, umarnin

localboot 0

yana ba da irin wannan kuskure

Ya biyo baya daga takaddun syslinux cewa lokacin

localboot 0

loading zai tafi daga faifan gida. Kuma lokacin tantance takamaiman ƙimar 0x00 daga farkon (primary) floppy faifai, lokacin ƙayyade 0x80 daga babban diski na farko (primary). Ta canza umarni zuwa

localboot 0x80

OS na gida ya loda.
Idan akwai buƙatar yin taya daga takamaiman faifai, bangare ko umarni localboot ba ya aiki, to, za ka iya amfani da damar da module chain.c32. Bayan loda shi, yi amfani da umarnin append don tantance takamaiman diski ko ɓangaren diski, lambar diski tana farawa daga 0, lambar ɓangaren tana farawa daga 1. idan an ƙayyade bangare 0, ana loda MBR. Lokacin ƙayyade faifai, ana iya barin ɓangaren.

KERNEL chain.c32
APPEND hd0 0

KERNEL chain.c32
APPEND hd0

Sources: http://www.syslinux.org/wiki/index.php/SYSLINUX#LOCALBOOT_type_.5BISOLINUX.2C_PXELINUX.5D
http://www.gossamer-threads.com/lists/syslinux/users/7127

Oda da bayanin zazzage fayiloli ta hanyar PXE

Kamar yadda aka ambata a farkon labarin, jagorar inda fayilolin WDS suke don saukewa yana ƙunshe da ƙimar ma'aunin. RootFolder a cikin reshen rajista HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesWDSServerProvidersWDSTFTP
Ƙimar ta asali C:RemoteInstall
Anan a cikin siga ReadFilter an ƙayyade kundayen adireshi inda uwar garken TFTP ke neman fayiloli don saukewa, farawa daga tushen. Tare da shigar SCCM 2012 SP1, wannan saitin shine

boot*
tmp*
SMSBoot*
SMSTemp*
SMSImages*

Idan kun canza ƙimar siga zuwa * sannan duk fayilolin da ke cikin directory za a sarrafa su RemoteInstall.

An ayyana matsayin wurin tura aikin SCCM 2012 a cikin ƙimar rajista ProvidersOrderdake cikin reshe HKLMSystemCurrentControlSetWDSServerProvidersWDSPXE
Alamar ProvidersOrder zai iya ɗaukar dabi'u

SMSPXE
Wurin sabis na PXE a cikin SCCM

SMS.PXE.Tace
Mai sarrafa rubutun PXE daga MDT (Kayan aikin ƙaddamar da Microsoft)

BINLSVC
Standard WDS da injin RIS

Tare da shigar SCCM, siga ProvidersOrder al'amura SMSPXE. Ta hanyar canza siga, zaku iya canza tsarin da ake ɗorawa masu samarwa.

A cikin kundin bayanai RemoteInstall wadannan daidaitattun fayiloli suna nan

wdsnbp.com

Shirin taya na cibiyar sadarwa wanda aka ƙera don Sabis na Deployment Windows wanda ke yin ayyuka masu zuwa:
1. Gano gine-gine.
2. Kula da kwamfutocin jira. Lokacin da manufar ƙarawa ta atomatik, ana aika wannan shirin taya na cibiyar sadarwa zuwa kwamfutoci masu jira don dakatar da boot ɗin cibiyar sadarwa da sanar da uwar garken tsarin gine-ginen kwamfutar abokin ciniki.
3. Yin amfani da hanyoyin haɗin taya na cibiyar sadarwa (ciki har da amfani da zaɓuɓɓukan DHCP 66 da 67)

PXEboot.com

(Default) Yana buƙatar mai amfani ya danna maɓallin F12 don ci gaba da taya cibiyar sadarwa

PXEboot.n12

Baya buƙatar mai amfani ya danna maɓallin F12 kuma ya fara booting na cibiyar sadarwa nan da nan

AbortPXE.com

Boots kwamfutar ta amfani da abin taya na gaba a cikin BIOS ba tare da jira ba

bootmgr.exe

Windows Boot Manager (Bootmgr.exe ko Bootmgr.efi). Load da bootloader na Windows ta amfani da firmware daga takamaiman ɓangaren faifai ko kan haɗin cibiyar sadarwa (a yanayin boot ɗin cibiyar sadarwa)

Bootmgfw.efi

Sigar EFI na PXEboot.com da PXEboot.n12 (a cikin EFI, zaɓin taya ko kar a taya PXE yana cikin harsashi na EFI, ba shirin taya na cibiyar sadarwa ba). Bootmgfw.efi ya haɗu da damar PXEboot.com, PXEboot.n12, abortpxe.com, da bootmgr.exe. A halin yanzu yana wanzu don x64 da gine-ginen Itanium.

Default.bcd

Boot Kanfigareshan Data Store (BCD), tsarin REGF, ana iya loda shi cikin REGEDIT, ya maye gurbin fayil ɗin rubutu na Boot.ini

Loading yana faruwa a cikin tsari mai zuwa kamar yadda aka bayyana a sama
1. Load wdsnbp.com.
2. Na gaba, pxeboot.com na gine-ginen da ya dace yana ɗorawa
3. PXEboot.com yana zazzage bootmgr.exe da ma'ajin bayanai na boot na BCD
4. Bootmgr.exe yana karanta shigarwar tsarin bayanan boot ɗin boot na BCD kuma yana loda fayil ɗin Boot.sdi da hoton Windows PE (boot.wim)
5. Bootmgr.exe ya fara loda Windows PE ta hanyar shiga Winload.exe a cikin hoton Windows PE

Idan a ciki RemoteInstall akwai manyan fayiloli

Boot
Images
Mgmt
Templates
Tmp
WdsClientUnattend

kasancewarsu yana nufin cewa kafin ƙara matsayin wurin rarrabawa a cikin SCCM 2012 (PXE wuraren sabis a SCCM 2007), akwai wasu matakan daidaitawa akan Sabis na Deployment Windows da aka shigar (WDS) wanda ya ƙirƙiri waɗannan manyan fayiloli ta atomatik.
Don rawar wurin rarraba (makin sabis na PXE a cikin SCCM 2007), manyan fayiloli masu zuwa kawai sun isa

SMSBoot
SMSIMAGES
SMSTemp
Stores

Wannan ba yana nufin an shigar da SCCM ba daidai ba, amma yana iya nuni ga yuwuwar tushen kurakurai.
Maganin matsalolin daban-daban na WDS, SCCM da PXE an tattauna su dalla-dalla a cikin labarin. Shirya matsala wurin Sabis na PXE da WDS a cikin Manajan Kanfigareshan 2007

Sakamakon

Kayan aikin IT wanda Manajan Kanfigareshan Cibiyar ke gudanarwa ya ƙara sabon kayan aiki don masu gudanar da tsarin filin.

Jerin hanyoyin haɗi zuwa hotunan ISO ( Danna don nunawa)download.f-secure.com/estre/rescue-cd-3.16-52606.iso
git.ipxe.org/releases/wimboot/wimboot-latest.zip
download.geo.drweb.com/pub/drweb/livecd/drweb-livecd-602.iso
cetodisk.kaspersky-labs.com/rescuedisk/updatable/kav_rescue_10.iso
esetsupport.com/eset_sysrescue.iso
boot.ipxe.org/ipxe.iso
citylan.dl.sourceforge.net/project/clonezilla/clonezilla_live_alternative/20130226-quantal/clonezilla-live-20130226-quantal-i386.iso
ftp.rasla.ru/_Distr_/WinPE/RaSla/WinPE_RaSla.iso
www.kernel.org/pub/linux/utils/boot/syslinux/syslinux-5.01.zip

Na gode da hankali!

source: www.habr.com

Menu na taya na PXE tare da Manajan Kanfigareshan Tsarin Cibiyar