PXE boot menyu yokhala ndi System Center Configuration Manager

Tikuganiza zokulitsa luso la System Center Configuration Manager (chinthu choyang'anira ma IT) poyambitsa ma PC ogwiritsa ntchito pa netiweki pogwiritsa ntchito PXE. Timapanga menyu yoyambira yotengera PXELinux yokhala ndi magwiridwe antchito a System Center ndikuwonjezera kusanthula kwa antivayirasi, zowunikira komanso kuchira. Pamapeto pa nkhaniyi, tikhudza mawonekedwe a System Center 2012 Configuration Manager molumikizana ndi Windows Deployment Services (WDS) poyambira kudzera pa PXE.

Timachita zonse pamalo oyesera omwe ali kale ndi System Center 2012 Configuration Manager SP1, woyang'anira madambwe, ndi makina angapo oyesera. Zikuganiziridwa kuti SCCM ikuyendetsa kale pa intaneti pogwiritsa ntchito PXE.

kulowa

Malo oyesera amakhala ndi makina angapo enieni. Makina onse ali ndi Microsoft Windows Server 2008 R2 (x64) mlendo OS yoyika, E1000 network adapter, SCSI Controller: LSI Logic SAS

Dzina (Maudindo)
IP adilesi / DNS dzina
Yogwira

SCCM (System Center Configuration Manager)
192.168.57.102
sccm2012.test.local

Anaika System Center Configuration Manager 2012 SP1

DC (AD, DHCP, DNS)
192.168.57.10
dc1.test.local

Udindo wa woyang'anira dera, seva ya DHCP ndi seva ya DNS

TEST (Makina oyesera)
192.168.57.103
test.test.local

Kuyesedwa

GW (Gateway)
192.168.57.1
Njira pakati pa maukonde. Ntchito ya Gateway

1. Onjezani PXELinux ku SCCM

Timachita zinthu pamakina omwe System Center Configuration Manager imayikidwa

• Tiyeni tiwone chikwatu komwe mafayilo a WDS ali kuti atsitsidwe, chifukwa cha izi timayang'ana m'kaundula wa mtengo wa parameter. RootFolder mu nthambi HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesWDSServerProvidersWDSTFTP
  Mtengo wofikira C:RemoteInstall
  Mafayilo oti mutsitse kuchokera kumalo otumizira a SCCM ali m'madongosolo smsbootx86 и smsbootx64 malingana ndi kamangidwe.
  Choyamba, khazikitsani chikwatu cha zomangamanga za 32-bit, mwachisawawa c:Remoteinstallsmsbootx86
• Tsitsani zakale ndi zatsopano alireza . Koperani kuchokera ku syslinux-5.01.zip kupita c:Remoteinstallsmsbootx86 mafayilo otsatirawa:
  memdisk, chain.c32, ldlinux.c32, libcom32.c32, libutil.c32, pxechn.c32, vesamenu.c32, pxelinux.0
  Mafayilo owonjezera amafunikira kuti mupewe cholakwika chotere.
  
• В c:Remoteinstallsmsbootx86 sintha dzina pxelinux.0 в pxelinux.com
  Mu foda c:remoteinstallsmsbootx86 koperani abortpxe.com ndi kusintha dzina ku abortpxe.0
  Ngati simunatchulenso kuti muwonjezere .0, ndiye mwachitsanzo malangizo

  Kernel abortpxe.com

  idzalephera ndi zolakwika zotsatirazi: Kuyambitsa kernel kwalephera: Nambala yoyipa ya fayilo
  Kwa PXELINUX, kukulitsa fayilo yotsitsa kuyenera kukhazikitsidwa molingana ndi mbale

  none or other	Linux kernel image
   .0		PXE bootstrap program (NBP) [PXELINUX only]
   .bin		"CD boot sector" [ISOLINUX only]
   .bs		Boot sector [SYSLINUX only]
   .bss		Boot sector, DOS superblock will be patched in [SYSLINUX only]
   .c32		COM32 image (32-bit COMBOOT)
   .cbt		COMBOOT image (not runnable from DOS)
   .com		COMBOOT image (runnable from DOS)
   .img		Disk image [ISOLINUX only]
  

  Source: http://www.syslinux.org/wiki/index.php/SYSLINUX#KERNEL_file gawo "Kernel file"

• Kuti musakanize kiyi ya F12 kangapo potsitsa SCCM kudzera pa menyu, sinthani dzina pxeboot.com kukhala pxeboot.com.f12, lembani pxeboot.n12 kuti pxeboot.com
  Ngati izi sizichitika, ndiye posankha, tidzalandira uthenga wotere nthawi zonse
  
  Zindikirani: Osayiwala kutchulanso mafayilowa mufoda ya x64. ikadzaza x86wdsnbp.com kuchokera pa chikwatu cha x86, chojambulira chimasankha kamangidwe ka purosesa ndipo fayilo yotsatira imakwezedwa kuchokera pafoda ndi zomanga zofananira. Chifukwa chake, pa x64, fayilo yotsatira sikhala x86pxeboot.comndi x64pxeboot.com
• Koperani / pangani maziko.png, kusamvana 640x480, koperani ku chikwatu chomwechi. Pangani chikwatu ISO kumene tidzayika zithunzi za ISO. Pangani chikwatu pxelinux.cfg za configs.
• Mu foda ya pxelinux.cfg, pangani fayilo yokhazikika, mu encoding yopanda unicode, ndi zomwe zili.
  kusakhazikika (Dinani kuti muwonetse)

  # используем графическое меню
  DEFAULT vesamenu.c32
  PROMPT 0
  timeout 80
  TOTALTIMEOUT 9000
  
  MENU TITLE PXE Boot Menu (x86)
  MENU INCLUDE pxelinux.cfg/graphics.conf
  MENU AUTOBOOT Starting Local System in 8 seconds
  
  # Boot local HDD (default)
  LABEL bootlocal
  menu label Boot Local
  menu default
  localboot 0x80
  # if it doesn't work 
  #kernel chain.c32
  #append hd0
  
  # Вход в меню по паролю Qwerty, алгоритм MD5
  label av
  menu label Antivirus and tools
  menu PASSWD $1$15opgKTx$dP/IaLNiCbfECiC2KPkDC0
  kernel vesamenu.c32
  append pxelinux.cfgav.conf 
  
  label sccm
  menu label Start to SCCM
  COM32 pxechn.c32
  APPEND sccm2012.test.local::smsbootx86wdsnbp.com -W
  
  label pxe64
  menu label Start to x64 pxelinux
  COM32 pxechn.c32
  APPEND sccm2012.test.local::smsbootx64pxelinux.com
  
  LABEL Abort
  MENU LABEL Exit
  KERNEL abortpxe.0

  Mu foda pxelinux.cfg pangani fayilo graphics.conf ndi zomwe zili
  graphics.conf (Dinani kuti muwonetse)

  MENU MARGIN 10
  MENU ROWS 16
  MENU TABMSGROW 21
  MENU TIMEOUTROW 26
  MENU COLOR BORDER 30;44 #00000000 #00000000 none
  MENU COLOR SCROLLBAR 30;44 #00000000 #00000000 none
  MENU COLOR TITLE 0 #ffffffff #00000000 none
  MENU COLOR SEL 30;47 #40000000 #20ffffff
  MENU BACKGROUND background.png
  NOESCAPE 0
  ALLOWOPTIONS 0

  Mu foda pxelinux.cfg pangani fayilo av.conf ndi zomwe zili
  av.conf (Dinani kuti muwonetse)

  DEFAULT vesamenu.c32
  PROMPT 0
  MENU TITLE Antivirus and tools
  MENU INCLUDE pxelinux.cfg/graphics.conf
  
  label main menu
  menu label return to main menu
  kernel vesamenu.c32
  append pxelinux.cfg/default
  
  label drweb
  menu label DrWeb
  kernel memdisk
  append iso raw initrd=isodrweb.iso
  
  label eset
  menu label Eset
  kernel memdisk
  append iso raw initrd=isoeset_sysrescue.iso
  
  label kav
  menu label KAV Rescue CD
  KERNEL kav/rescue
  APPEND initrd=kav/rescue.igz root=live rootfstype=auto vga=791 init=/init kav_lang=ru udev liveimg doscsi nomodeset quiet splash
  
  #Загружаем ISO по полному пути, можно загружать с другого TFTP
  label winpe
  menu label WinPE  from another TFTP
  kernel sccm2012.test.local::smsbootx86memdisk
  append iso raw initrd=sccm2012.test.local::smsbootx86isoWinPE_RaSla.iso
  
  label clonezilla
  menu label Clonezilla
  kernel memdisk
  append iso raw initrd=isoclonezilla.iso
  

• Zotsatira zake, chikwatu c:remoteinstallsmsbootx86 chili ndi dongosolo

  c:remoteinstallsmsbootx86
  pxelinux.cfg

  unyolo.c32
  ldlinux.c32
  libcom32.c32
  libutil.c32
  pxechn.c32
  vesamenu.c32
  pxelinux.com
  maziko.png
  pxelinux.cfg
  pxelinux.cfg
  pxelinux.cfg
  ISO
  abortpxe.0
  wdsnbp.com
  udaku.efi
  wdsmgfw.efi
  foto.exe
  pxbox.n12
  pxeboot.com
  abortpxe.com

  chosasintha
  av.conf
  zithunzi.conf
  *.izi

• Pazomangamanga za x64, timakoperanso ndikupanga mawonekedwe omwewo mufoda c:remoteinstallsmsbootx64

Zowonjezera
Mukamagwiritsa ntchito lamulo menu PASSWD mawu achinsinsi akhoza kukhazikitsidwa monga momwe alili, kapena gwiritsani ntchito hashing algorithm powonjezera siginecha yofananira kumayambiriro kwa parameter.

Algorithm
Siginecha

MD5
$ 1 $

SHA-1
$ 4 $

SHA-2-256
$ 5 $

SHA-2-512
$ 6 $

Ndiye kwa password Qwerty ndi MD5 algorithm

menu PASSWD $1$15opgKTx$dP/IaLNiCbfECiC2KPkDC0

Mutha kupanga mawu achinsinsi, mwachitsanzo, kudzera pa jenereta ya hashi pa intaneti www.insidepro.com/hashes.php?lang=rus, mzere MD5(Unix)

2. Konzani PXELinux boot

Tsopano tikuwonetsani momwe mungayikitsire pxelinux.com ndikupeza menyu.
Kufotokozera pxelinux.com bootloader kudzera pa WDS sikugwira ntchito mu SCCM. Onani Malamulo

wdsutil /set-server /bootprogram:bootx86pxeboot.com /architecture:x86

sizikukonzedwa. Mutha kutsimikizira kuti zithunzi za boot sizinakhazikitsidwe poyendetsa lamulo la kasinthidwe ka seva ya WDS

wdsutil /get-server /show:images

Chifukwa chake, mu SCCM 2012, simungatchule fayilo yanu kuti mutsitse PXE kwa opereka SMSPXE. Chifukwa chake, tidzakonza malo omwe akugwira ntchito pa seva ya DHCP.
Mu magawo a DHCP yogwira ntchito, ikani magawo malinga ndi mbale

DHCP njira
Dzina la parameter
mtengo

066
Dzina la seva yoyambira
sccm2012.test.local

067
Dzina la bootfile
smsbootx86pxelinux.com

006
Seva za DNS
192.168.57.10

015
Dzina la DNS Domain
kuyesa.kwawoko

Muchisankho 066 timatchula dzina la FQDN la seva ya sccm, posankha 067 timalongosola njira yopita ku x86 bootloader pxelinux.com kuyambira muzu wa TFTP, mwa kusankha 006 timatchula adilesi ya IP ya seva ya DNS. Ngati dzina lalifupi la seva likugwiritsidwa ntchito posankha 066, posankha 015 timafotokozera DNS suffix ya domain.

Zowonjezera
Kufotokozera za kasinthidwe ka DHCP mwatsatanetsatane mgololubev apa. Koma pa DC kusankha 150, adilesi ya IP ya seva ya TFTP, idasowa pazokonda za DHCP, ndipo kufotokoza njira 150 kudzera netsh sikunagwire ntchito.

3. Kuwona ntchito

Zokonda zoyambira zatha ndipo mutha kuyamba kuyang'ana. Tikuwonetsa pamakompyuta oyeserera mu BIOS kuti imakwezedwa pamaneti ndikuyikidwa mumenyu

Sankhani chinthu «Start to SCCM» ndipo ngati mndandanda wa ntchito waperekedwa ku kompyuta, pakapita nthawi, zenera la "Task Sequence Wizard" lidzakupangitsani kuti mulowetse mawu achinsinsi.


Yambitsaninso makinawo, bwererani ku menyu, sankhani menyu «Antivirus and tools» ndi kulowa mawu achinsinsi Qwerty

Timasankha chinthu chosagwirizana ndikuwona kutsitsa kwa chithunzi cha ISO pamtima

Kudikirira ndikuwona zotsatira zake

Kutsimikizira kwatha

4. Zokonda zina ndi mawonekedwe

Kupanga njira

Ngati kasitomala, seva ya DHCP, ndi seva yomwe ili ndi chojambulira cha netiweki zili mugawo lomwelo la netiweki, palibe kusintha kwina komwe kumafunikira. Komabe, ngati kasitomala ndi seva ya DHCP kapena seva ya WDS/SCCM ali pamagulu osiyanasiyana a netiweki, tikulimbikitsidwa kuti mukonze ma routers kuti atumize mapaketi owulutsa kuchokera kwa kasitomala kupita ku seva yogwira ya DHCP ndi seva yogwira ya WDS/SCCM. M'mabuku a Chingerezi, njirayi imadziwika kuti "IP Helper table updates". Pankhaniyi, kasitomala, atapeza adilesi ya IP, amalumikizana ndi seva yomwe ili ndi chojambulira cha netiweki mwachindunji kudzera pamapaketi a DHCP kuti atsitse chojambulira cha netiweki.
Kwa ma routers a Cisco, gwiritsani ntchito lamulo

ip helper-address {ip address}

kumene {ip address} Seva ya DHCP kapena adilesi ya seva ya WDS/SCCM. Lamuloli limatumizanso mapaketi otsatirawa a UDP

Doko
Pulogalamu

69
TFTP

53
Domain Name System (DNS)

37
Utumiki wa nthawi

137
NetBIOS Name Server

138
NetBIOS Datagram Server

67
Bootstrap Protocol (BOOTP)

49
Malingaliro a kampani TACACS

Njira yachiwiri kuti kasitomala adziwe zambiri za chojambulira cha netiweki mwachindunji kuchokera ku seva ya DHCP ndikutchula zosankha 60,66,67 pa seva ya DHCP. Kugwiritsa ntchito DHCP njira 60 ndi mtengo «PXEClient» kumadera onse a DHCP, pokhapokha ngati seva ya DHCP ikugwiritsidwa ntchito pa seva yomweyo monga Windows Deployment Services. Pankhaniyi, kasitomala amalumikizana mwachindunji ndi Windows Deployment Services seva pogwiritsa ntchito TFTP pa UDP port 4011 m'malo mogwiritsa ntchito DHCP. Njirayi sivomerezedwa ndi Microsoft chifukwa cha zovuta zolemetsa, kusagwira bwino njira za DHCP ndi njira zoyankhira za Windows Deployment Services kumbali ya kasitomala. Komanso chifukwa kugwiritsa ntchito njira ziwiri zokha za DHCP 66 ndi 67 kumakupatsani mwayi wodutsa magawo omwe akhazikitsidwa pa seva ya boot ya network.
Muyeneranso kutsegula madoko otsatirawa a UDP pa seva ya Windows Deployment Services
port 67 (DHCP)
port 69 (TFTP)
port 4011 (PXE)
ndi port 68 ngati chilolezo cha DHCP chikufunika pa seva.

Mwatsatanetsatane, kasinthidwe kachitidwe ndi ma nuances owongolera pakati pa ma seva osiyanasiyana a WDS akufotokozedwa pansipa muzochokera:
Network boot management management http://technet.microsoft.com/ru-ru/library/cc732351(v=ws.10).aspx
Kuwongolera Seva http://technet.microsoft.com/ru-ru/library/cc770637(v=ws.10).aspx
Microsoft Product Support Services (PSS) yothandizira malire a network ya Microsoft Windows Preinstallation Environment (Windows PE) 2.0 http://support.microsoft.com/kb/926172/en-us
Momwe mungatumizire UDP kuwulutsa (BOOTP / DHCP) pa Cisco http://www.cisco-faq.com/163/forward_udp_broadcas.html
Zomwe zimagwiritsidwa ntchito ndikusintha kwa DHCP pa Cisco routers (Gawo 2) http://habrahabr.ru/post/89997/

Zosankha zina zotsitsa kwanuko

Pamalo oyesera, lamulo

localboot 0

amapereka cholakwika chotero

Zimatengera zolemba za syslinux kuti liti

localboot 0

kutsitsa kumachoka pa disk yakomweko. Ndipo pofotokoza zamtengo wapatali 0x00 kuchokera ku floppy disk yoyambirira (yoyambirira), pofotokoza 0x80 kuchokera ku diski yoyamba (yoyambirira) yolimba. Posintha lamulo kuti

localboot 0x80

OS yakomweko yadzaza.
Ngati pakufunika kuyambiranso kuchokera pa disk, magawo kapena lamulo localboot sichikugwira ntchito, ndiye mutha kugwiritsa ntchito kuthekera kwa module chain.c32. Mukatsitsa, gwiritsani ntchito lamulo lowonjezera kuti mufotokozere diski kapena magawo a disk, manambala a disk amayamba kuchokera ku 0, kugawa manambala kumayambira 1. ngati kugawa 0 kutchulidwa, MBR imayikidwa. Pofotokoza disk, kugawa kumatha kuchotsedwa.

KERNEL chain.c32
APPEND hd0 0

kapena

KERNEL chain.c32
APPEND hd0

Zotsatira: http://www.syslinux.org/wiki/index.php/SYSLINUX#LOCALBOOT_type_.5BISOLINUX.2C_PXELINUX.5D
http://www.gossamer-threads.com/lists/syslinux/users/7127

Kukonza ndi kufotokozera kutsitsa mafayilo kudzera pa PXE

Monga tafotokozera kumayambiriro kwa nkhaniyi, chikwatu chomwe mafayilo a WDS ali kuti atsitsidwe chili ndi mtengo wa parameter. RootFolder mu kaundula nthambi HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesWDSServerProvidersWDSTFTP
Mtengo wofikira C:RemoteInstall
Apa mu parameter ReadFilter Maupangiri amafotokozedwa komwe seva ya TFTP imayang'ana mafayilo kuti atsitsidwe, kuyambira muzu. Ndi SCCM 2012 SP1 yoyikidwa, kukhazikitsidwa uku ndi

boot*
tmp*
SMSBoot*
SMSTemp*
SMSImages*

Ngati musintha mtengo wa parameter kukhala * ndiye mafayilo onse omwe ali mu bukhuli adzakonzedwa RemoteInstall.

Udindo wa SCCM 2012 deployment point wafotokozedwa mu registry value ProvidersOrderili mu nthambi HKLMSystemCurrentControlSetWDSServerProvidersWDSPXE
chizindikiro ProvidersOrder akhoza kutenga mfundo

Mtengo wa SMSPXE
PXE service point ku SCCM

Sefa ya SMS.PXE
PXE script handler kuchokera ku MDT (Microsoft Deployment Toolkit)

Mtengo wa BINLSVC
Standard WDS ndi RIS injini

Ndi SCCM yoyikidwa, parameter ProvidersOrder nkhani SMSPXE. Mwa kusintha parameter, mutha kusintha momwe operekera amanyamulira.

M'ndandanda RemoteInstall owona muyezo zotsatirazi zilipo

wdsnbp.com

Pulogalamu ya boot network yopangidwira Windows Deployment Services yomwe imagwira ntchito zotsatirazi:
1. Kuzindikira kwa zomangamanga.
2. Kukonza makompyuta akudikirira. Pamene ndondomeko yowonjezera-auto yayatsidwa, pulogalamu ya boot ya netiwekiyi imatumizidwa ku makompyuta omwe akudikirira kuti ayimitse boot ya netiweki ndikudziwitsa seva za kamangidwe ka kasitomala.
3. Kugwiritsa ntchito maulalo a boot network (kuphatikiza kugwiritsa ntchito DHCP options 66 ndi 67)

PXEboot.com

(Kufikira) Kumafuna wosuta kuti akanikizire F12 kuti apitirize boot ya netiweki

PXEboot.n12

Sichifuna kuti wosuta akanikizire kiyi F12 ndikuyamba kuwotcha maukonde nthawi yomweyo

AbortPXE.com

Imayatsa kompyuta pogwiritsa ntchito chinthu chotsatira cha boot mu BIOS osadikirira

bootmgr.exe

Windows Boot Manager (Bootmgr.exe kapena Bootmgr.efi). Imalowetsa Windows bootloader pogwiritsa ntchito firmware kuchokera pagawo linalake la disk kapena pa intaneti (panthawi ya boot network)

Bootmgfw.efi

Mtundu wa EFI wa PXEboot.com ndi PXEboot.n12 (mu EFI, kusankha kuyambitsa kapena kusatsegula PXE kuli mu chipolopolo cha EFI, osati pulogalamu ya boot ya netiweki). Bootmgfw.efi imaphatikiza kuthekera kwa PXEboot.com, PXEboot.n12, abortpxe.com, ndi bootmgr.exe. Pakali pano imangopezeka pamapangidwe a x64 ndi Itanium.

Zosasintha.bcd

Boot Configuration Data Store (BCD), mtundu wa REGF, ukhoza kuikidwa mu REGEDIT, m'malo mwa fayilo ya Boot.ini

Kutsegula kumachitika motere monga tafotokozera pamwambapa
1. Kwezani wdsnbp.com.
2. Kenaka, pxeboot.com ya zomangamanga zoyenera imayikidwa
3. PXEBoot.com imatsitsa bootmgr.exe ndi sitolo ya data yosinthira boot ya BCD
4. Bootmgr.exe amawerenga zolemba za BCD boot configuration data operating system ndikukweza fayilo ya Boot.sdi ndi chithunzi cha Windows PE (boot.wim)
5. Bootmgr.exe imayamba kutsitsa Windows PE mwa kupeza Winload.exe mu chithunzi cha Windows PE

Ngati RemoteInstall pali mapepala

Boot
Images
Mgmt
Templates
Tmp
WdsClientUnattend

kupezeka kwawo kumatanthawuza kuti musanawonjezere gawo logawa mu SCCM 2012 (malo operekera chithandizo cha PXE mu SCCM 2007), panali zosintha zina pa Windows Deployment Services (WDS) zomwe zidapanga zokha zikwatu izi.
Pa gawo logawa (PXE service point mu SCCM 2007), mafoda otsatirawa okha ndi okwanira

SMSBoot
SMSIMAGES
SMSTemp
Stores

Izi sizikutanthauza kuti SCCM idayikidwa molakwika, koma imatha kuloza komwe kungayambitse zolakwika.
Njira yothetsera mavuto osiyanasiyana a WDS, SCCM ndi PXE ikufotokozedwa mwatsatanetsatane m'nkhaniyi. Kuthetsa PXE Service Point ndi WDS mu Configuration Manager 2007

Zotsatira

Zipangizo za IT zomwe zimayendetsedwa ndi System Center Configuration Manager zawonjezera chida chatsopano kwa oyang'anira ma field.

Mndandanda wamaulalo ku zithunzi za ISO (Dinani kuti muwonetse)download.f-secure.com/estore/rescue-cd-3.16-52606.iso
git.ipxe.org/releases/wimboot/wimboot-latest.zip
download.geo.drweb.com/pub/drweb/livecd/drweb-livecd-602.iso
rescuedisk.kaspersky-labs.com/rescuedisk/updatable/kav_rescue_10.iso
esetsupport.com/eset_sysrescue.iso
boot.ipxe.org/ipxe.iso
citylan.dl.sourceforge.net/project/clonezilla/clonezilla_live_alternative/20130226-quantal/clonezilla-live-20130226-quantal-i386.iso
ftp.rasla.ru/_Distr_/WinPE/RaSla/WinPE_RaSla.iso
www.kernel.org/pub/linux/utils/boot/syslinux/syslinux-5.01.zip

Zikomo chifukwa cha chidwi chanu!


Source: www.habr.com