🥇PXE bhutsu menyu ine System Center Configuration Maneja

Isu tiri kufunga kuwedzera kugona kweSystem Center Configuration Manager (chigadzirwa chekutarisira IT zvivakwa) paunenge uchibhota maPC evashandisi pamusoro petiweki uchishandisa PXE. Isu tinogadzira bhutsu menyu yakavakirwa paPXELinux ine System Center mashandiro uye kuwedzera anti-virus scanning, diagnostic uye kudzoreredza mifananidzo. Pakupera kwechinyorwa, tinobata pane maficha eSystem Center 2012 Configuration Maneja takabatana neWindows Deployment Services (WDS) kana uchibhowa kuburikidza nePXE.

Isu tinoita zviito zvese panzvimbo yekuyedza yatova neSystem Center 2012 Configuration Manager SP1 yakaiswa, domain controller, uye akati wandei emishini yekuyedza. Zvinofungidzirwa kuti SCCM yave kutoendesa pamusoro petiweki ichishandisa PXE.

kupinda

Iyo yekuyedza nharaunda ine akati wandei chaiwo michina. Michina yese ine Microsoft Windows Server 2008 R2 (x64) muenzi OS yakaiswa, E1000 network adapter, SCSI Controller: LSI Logic SAS.

Zita (Mabasa)
IP kero / DNS zita
Inoshanda

SCCM (System Center Configuration Manager)
192.168.57.102
sccm2012.test.local

Yakaiswa System Center Configuration Manager 2012 SP1

DC (AD,DHCP,DNS)
192.168.57.10
dc1.test.local

Basa remutongi wedura, DHCP server uye DNS server

TEST (Muchina wekuyedza)
192.168.57.103
test.test.local

Zvekuyedza

GW (Gateway)
192.168.57.1
Kufambisa pakati pemambure. Gateway Basa

1. Wedzera PXELinux kuSCCM

Isu tinoita zviito pamushini unoiswa System Center Configuration Manager

Ngationei dhairekitori uko mafaera eWDS ari kurodha pasi, nekuda kweizvi isu tinotarisa mune registry kukosha kweiyo parameter. RootFolder mubazi HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesWDSServerProvidersWDSTFTP
Default value C:RemoteInstall
Mafaira ekurodha kubva kunzvimbo yekuendesa SCCM ari mumadhairekitori smsbootx86 и smsbootx64 zvichienderana nemavakirwo.
Kutanga, gadzira dhairekitori ye 32-bit architecture, nekukasira c:Remoteinstallsmsbootx86
Dhaunirodha dura nezvinozvino syslinux . Kopa kubva syslinux-5.01.zip kuenda c:Remoteinstallsmsbootx86 mafaira anotevera:
memdisk, chain.c32, ldlinux.c32, libcom32.c32, libutil.c32, pxechn.c32, vesamenu.c32, pxelinux.0
Mamwe mafaira anodiwa kudzivirira kukanganisa kwakadaro.
В c:Remoteinstallsmsbootx86 rename pxelinux.0 в pxelinux.com
Mune folda c:remoteinstallsmsbootx86 ita kopi abortpxe.com woitumidza zita kuti abortpxe.0
Kana zvisina kutumidza zita rekuwedzera .0, tevere semuenzaniso murayiridzo
```
Kernel abortpxe.com
```
ichakundikana nekukanganisa kunotevera: Booting kernel yakundikana: Yakaipa faira nhamba
YePXELINUX, iyo yekudhawunirodha faira yekuwedzera inofanirwa kusetwa zvinoenderana nendiro
```
none or other	Linux kernel image
 .0		PXE bootstrap program (NBP) [PXELINUX only]
 .bin		"CD boot sector" [ISOLINUX only]
 .bs		Boot sector [SYSLINUX only]
 .bss		Boot sector, DOS superblock will be patched in [SYSLINUX only]
 .c32		COM32 image (32-bit COMBOOT)
 .cbt		COMBOOT image (not runnable from DOS)
 .com		COMBOOT image (runnable from DOS)
 .img		Disk image [ISOLINUX only]
```
Source: http://www.syslinux.org/wiki/index.php/SYSLINUX#KERNEL_file chikamu "Kernel file"
Kuti urege kudzvanya kiyi yeF12 kakawanda paunenge uchirodha SCCM kuburikidza nemenyu, rename pxeboot.com kuti pxeboot.com.f12, kopira pxeboot.n12 ku pxeboot.com
Kana izvi zvikasaitwa, saka pakusarudza, tichagamuchira meseji yakadaro nguva dzese

Cherechedza: Usakanganwa kutumidzazve mafaera aya mux64 folda zvakare. painotakura x86wdsnbp.com kubva kune x86 folda, iyo inotakura inosarudza iyo processor architecture uye inotevera faira inotakurwa kubva kune folda ine inoenderana dhizaini. Saka, ye x64, iyo inotevera faira haizove x86pxeboot.comuye x64pxeboot.com
Dhawunirodha / gadzira background.png, resolution 640x480, kopi kune imwechete folda. Gadzira folda ISO kwatinozoisa ISO mifananidzo. Gadzira folda pxelinux.cfg zve configs.

Mune pxelinux.cfg forodha, gadzira faira rekutanga, mune isiri-unicode encoding, ine zvirimo.
default (Dzvanya kuratidza)

# используем графическое меню
DEFAULT vesamenu.c32
PROMPT 0
timeout 80
TOTALTIMEOUT 9000

MENU TITLE PXE Boot Menu (x86)
MENU INCLUDE pxelinux.cfg/graphics.conf
MENU AUTOBOOT Starting Local System in 8 seconds

# Boot local HDD (default)
LABEL bootlocal
menu label Boot Local
menu default
localboot 0x80
# if it doesn't work 
#kernel chain.c32
#append hd0

# Вход в меню по паролю Qwerty, алгоритм MD5
label av
menu label Antivirus and tools
menu PASSWD $1$15opgKTx$dP/IaLNiCbfECiC2KPkDC0
kernel vesamenu.c32
append pxelinux.cfgav.conf 

label sccm
menu label Start to SCCM
COM32 pxechn.c32
APPEND sccm2012.test.local::smsbootx86wdsnbp.com -W

label pxe64
menu label Start to x64 pxelinux
COM32 pxechn.c32
APPEND sccm2012.test.local::smsbootx64pxelinux.com

LABEL Abort
MENU LABEL Exit
KERNEL abortpxe.0

Mune folda pxelinux.cfg kugadzira faira graphics.conf nezvirimo
graphics.conf (Tinya kuratidza)

MENU MARGIN 10
MENU ROWS 16
MENU TABMSGROW 21
MENU TIMEOUTROW 26
MENU COLOR BORDER 30;44 #00000000 #00000000 none
MENU COLOR SCROLLBAR 30;44 #00000000 #00000000 none
MENU COLOR TITLE 0 #ffffffff #00000000 none
MENU COLOR SEL 30;47 #40000000 #20ffffff
MENU BACKGROUND background.png
NOESCAPE 0
ALLOWOPTIONS 0

Mune folda pxelinux.cfg kugadzira faira av.conf nezvirimo
av.conf (Tinya kuratidza)

DEFAULT vesamenu.c32
PROMPT 0
MENU TITLE Antivirus and tools
MENU INCLUDE pxelinux.cfg/graphics.conf

label main menu
menu label return to main menu
kernel vesamenu.c32
append pxelinux.cfg/default

label drweb
menu label DrWeb
kernel memdisk
append iso raw initrd=isodrweb.iso

label eset
menu label Eset
kernel memdisk
append iso raw initrd=isoeset_sysrescue.iso

label kav
menu label KAV Rescue CD
KERNEL kav/rescue
APPEND initrd=kav/rescue.igz root=live rootfstype=auto vga=791 init=/init kav_lang=ru udev liveimg doscsi nomodeset quiet splash

#Загружаем ISO по полному пути, можно загружать с другого TFTP
label winpe
menu label WinPE  from another TFTP
kernel sccm2012.test.local::smsbootx86memdisk
append iso raw initrd=sccm2012.test.local::smsbootx86isoWinPE_RaSla.iso

label clonezilla
menu label Clonezilla
kernel memdisk
append iso raw initrd=isoclonezilla.iso

Nekuda kweizvozvo, iyo c:remoteinstallsmsbootx86 dhairekitori ine chimiro
c:remoteinstallsmsbootx86
pxelinux.cfg

chain.c32
ldlinux.c32
libcom32.c32
libutil.c32
pxechn.c32
vesemenu.c32
pxelinux.com
background.png
pxelinux.cfg
pxelinux.cfg
pxelinux.cfg
ISO
abortpxe.0
wdsnbp.com
bootmgfw.efi
wdsmgfw.efi
bootmgr.exe
webhokisi.n12
pxeboot.com
abortpxe.com

Default
av.conf
graphics.conf
*.iso
Kune iyo x64 dhizaini, isu tinotevedzera zvakafanana uye tinogadzira yakafanana chimiro mufolda c:remoteinstallsmsbootx64

Kuwedzera
Paunenge uchishandisa murairo menu PASSWD iyo password inogona kusetwa sezviri, kana kushandisa hashing algorithm nekuwedzera siginecha inoenderana pakutanga kweparameter.

Algorithm
Siginecha

MD5
$ 1 $

SHA-1
$ 4 $

SHA-2-256
$ 5 $

SHA-2-512
$ 6 $

Saka kune password Qwerty uye MD5 algorithm
menu PASSWD $1$15opgKTx$dP/IaLNiCbfECiC2KPkDC0
Iwe unogona kugadzira password, semuenzaniso, kuburikidza neinternet hashi jenareta www.insidepro.com/hashes.php?lang=rus, mutsetse MD5(Unix)

2. Seta PXELinux boot

Iye zvino ticharatidza maitiro ekurodha pxelinux.com uye kuwana menyu.
Kutsanangura pxelinux.com bootloader kuburikidza neWDS kushanda hakushande muSCCM. View Commands

wdsutil /set-server /bootprogram:bootx86pxeboot.com /architecture:x86

hadzina kugadziriswa. Iwe unogona kuona kuti bhutsu mifananidzo haina kusetwa nekumhanyisa yakabuda WDS server configuration command

wdsutil /get-server /show:images

Naizvozvo, muSCCM 2012, haugone kutsanangura faira rako rePXE kurodha kune SMSPXE mupi. Naizvozvo, isu tichagadzirisa iyo inoshanda nzvimbo yeDHCP server.
Mumiganhu yeDHCP inoshanda nzvimbo, isa zvigadziro maererano neplate

DHCP sarudzo
Parameter zita
ukoshi

066
Boot server host zita
sccm2012.test.local

067
Bootfile zita
smsbootx86pxelinux.com

006
DNS Servers
192.168.57.10

015
DNS Domain Name
test.local

Muchisarudzo 066 tinotsanangura iyo FQDN zita re sccm server, mune sarudzo 067 isu tinotsanangudza nzira inoenda kune x86 bootloader pxelinux.com kutanga kubva pamudzi weTFTP, mune sarudzo 006 tinotsanangura IP kero yeDNS server. Kana zita revhavha pfupi richishandiswa mune sarudzo 066, mune sarudzo 015 isu tinotsanangudza iyo DNS suffix yedura.

Kuwedzera
Yakatsanangura magadzirirwo eDHCP mune zvakadzama mvgolubev pano. Asi mberi DC sarudzo 150, TFTP server IP kero, yanga isipo kubva kuDHCP scope marongero, uye kutsanangura sarudzo 150 kuburikidza netsh hakuna kushanda.

3. Kuongorora basa

Iwo magadzirirwo ekutanga anopedzwa uye unogona kutanga kutarisa. Isu tinoratidza pakombuta yekuyedza muBIOS inotakurwa pamusoro petiweki uye inotakurwa mumenyu

Sarudza chinhu «Start to SCCM» uye kana kutevedzana kwebasa kukapihwa komputa, ipapo mushure mechinguva hwindo re "Task Sequence Wizard" richaonekwa richikukurudzira kuti uise password.

Reboot muchina, dzokera kumenyu, sarudza mumenyu «Antivirus and tools» uye isa password Qwerty

Isu tinosarudza chinhu chinopokana uye tinocherekedza kurodha kweiyo ISO mufananidzo mundangariro

Kumirira nekuona mhedzisiro

Kuongorora kwapera

4. Zvimwe zvirongwa uye maitiro

Routing setup

Kana mutengi, DHCP sevha uye sevha ine network loader iri mune imwechete network segment, hapana imwe gadziriso inodiwa. Nekudaro, kana mutengi uye sevha yeDHCP kana WDS/SCCM sevha iri pazvikamu zvakasiyana zvetiweki, zvinokurudzirwa kuti ugadzirise ma routers ako ekufambisa nhepfenyuro kubva kumutengi kuenda kune inoshanda DHCP server uye inoshanda WDS/SCCM server. Muzvinyorwa zveChirungu, maitiro aya anozivikanwa se "IP Helper table updates". Muchiitiko ichi, mutengi, mushure mekuwana IP kero, anobata sevha ine network loader zvakananga kuburikidza neDHCP mapakeji kuitira kuti utore network loader.
Kune Cisco routers, shandisa murairo

ip helper-address {ip address}

apo {ip address} DHCP server kana WDS/SCCM server kero. Uyu murairo unotumirawo zvinotevera UDP nhepfenyuro mapaketi

Port
Protocol

69
TFTP

53
Domain Name System (DNS)

37
Nguva sevhisi

137
NetBIOS Zita Server

138
NetBIOS Datagram Server

67
Bootstrap Protocol (BOOTP)

49
TACACS

Nzira yechipiri yekuti mutengi awane ruzivo nezve network loader zvakananga kubva kuDHCP server ndeyekudoma sarudzo 60,66,67 pane DHCP server. Uchishandisa DHCP sarudzo 60 ine kukosha «PXEClient» kune ese DHCP scopes, chete kana sevha yeDHCP inobatwa pane imwechete sevha seWindows Deployment Services. Muchiitiko ichi, mutengi anotaurirana zvakananga neWindows Deployment Services server achishandisa TFTP paUDP port 4011 pane kushandisa DHCP. Iyi nzira haikurudzirwe neMicrosoft nekuda kwenyaya dzekutakura mitoro, kubata zvisirizvo kweDHCP sarudzo uye Windows Deployment Services mhinduro sarudzo kudivi revatengi. Uye zvakare nekuti kushandisa maviri chete DHCP sarudzo 66 uye 67 inobvumidza iwe kunzvenga maparamita akaiswa pane network boot server.
Iwe zvakare unofanirwa kuvhura inotevera UDP ports paWindows Deployment Services server
port 67 (DHCP)
port 69 (TFTP)
port 4011 (PXE)
uye port 68 kana mvumo yeDHCP ichidikanwa pane sevha.

Mune zvimwe zvakadzama, iyo yekumisikidza maitiro uye nuances yekudzokorodza pakati pemaseva eWDS akasiyana anotsanangurwa pazasi mune masosi:
Network boot chirongwa manejimendi http://technet.microsoft.com/ru-ru/library/cc732351(v=ws.10).aspx
Server management http://technet.microsoft.com/ru-ru/library/cc770637(v=ws.10).aspx
Microsoft Product Support Services (PSS) inotsigira miganhu yetiweki booting Microsoft Windows Preinstallation Environment (Windows PE) 2.0 http://support.microsoft.com/kb/926172/en-us
Maitiro ekutumira UDP kutepfenyura (BOOTP / DHCP) paCisco http://www.cisco-faq.com/163/forward_udp_broadcas.html
Zvimiro zvekushanda uye kumisikidzwa kweDHCP paCisco routers (Chikamu 2) http://habrahabr.ru/post/89997/

Zvimwe zvingasarudzwa zvekudhaunirodha munharaunda

Panzvimbo yekuedza, murairo

localboot 0

inopa kukanganisa kwakadaro

Izvo zvinotevera kubva kune syslinux zvinyorwa kuti riini

localboot 0

kurodha kuchaenda kubva kudhisiki renzvimbo. Uye kana uchitsanangura kukosha kwakakosha 0x00 kubva kune yekutanga (primary) floppy disk, paunotsanangura 0x80 kubva kune yekutanga (yekutanga) hard disk. Nekuchinja murairo kuti

localboot 0x80

iyo OS yemuno yakatakura.
Kana pane chinodiwa kubhutsu kubva kune chaiyo dhisiki, kupatsanura kana kuraira localboot haishande, saka unogona kushandisa kugona kweiyo module chain.c32. Mushure mekuitakura, shandisa iyo append kuraira kutsanangura chaiyo dhisiki kana disk partition, disk manhamba anotanga kubva 0, partition manhamba inotanga kubva 1. kana chikamu 0 chatsanangurwa, iyo MBR inotakurwa. Kana uchitsanangura dhisiki, chikamu chinogona kusiiwa.

KERNEL chain.c32
APPEND hd0 0

kana

KERNEL chain.c32
APPEND hd0

Sources: http://www.syslinux.org/wiki/index.php/SYSLINUX#LOCALBOOT_type_.5BISOLINUX.2C_PXELINUX.5D
http://www.gossamer-threads.com/lists/syslinux/users/7127

Order uye tsananguro yekurodha mafaera kuburikidza nePXE

Sezvambotaurwa pakutanga kwechinyorwa, dhairekitori panowanikwa mafaera eWDS kurodha inowanikwa mukukosha kweparameter. RootFolder mubazi rekunyoresa HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesWDSServerProvidersWDSTFTP
Default value C:RemoteInstall
Pano pane parameter ReadFilter madhairekitori anotsanangurwa uko TFTP server inotsvaga mafaera ekurodha, kutanga kubva pamudzi. Iine SCCM 2012 SP1 yakaiswa, kuseta uku

boot*
tmp*
SMSBoot*
SMSTemp*
SMSImages*

Kana ukashandura kukosha kweparameter kuti * ipapo mafaera ese ari mudhairekitori anozogadziriswa RemoteInstall.

Iyo SCCM 2012 deployment point basa inotsanangurwa mune registry kukosha ProvidersOrderiri mubazi HKLMSystemCurrentControlSetWDSServerProvidersWDSPXE
Parameter ProvidersOrder inogona kutora hunhu

SMSPXE
PXE sevhisi nzvimbo muSCCM

SMS.PXE.Sefa
PXE script handler kubva kuMDT (Microsoft Deployment Toolkit)

BINLSVC
Standard WDS uye RIS injini

Iine SCCM yakaiswa, iyo parameter ProvidersOrder nyaya SMSPXE. Nekuchinja parameter, unogona kushandura kurongeka uko vanopa vanotakurwa.

Mutsamba RemoteInstall mafaera anotevera anowanikwa

wdsnbp.com

A network boot program yakagadzirirwa Windows Deployment Services inoita mabasa anotevera:
1. Kuonekwa kwezvivakwa.
2. Kugadziriswa kwemakombiyuta akamirira. Kana iyo auto-add policy ikagoneswa, iyi network boot program inotumirwa kumakomputa akamirira kuti amise network boot uye kuzivisa server nezvemagadzirirwo ekombuta yemutengi.
3. Kushandisa network boot links (kusanganisira kushandisa DHCP sarudzo 66 uye 67)

PXEboot.com

(Default) Inoda mushandisi kudzvanya F12 kuti uenderere mberi netiweki boot

PXEboot.n12

Hazvidi kuti mushandisi adzvanye kiyi yeF12 uye anotanga kubhowa network nekukurumidza

AbortPXE.com

Boots komputa uchishandisa inotevera bhutsu chinhu muBIOS pasina kumirira

bootmgr.exe

Windows Boot Manager (Bootmgr.exe kana Bootmgr.efi). Inotakura iyo Windows bootloader uchishandisa firmware kubva kune yakatarwa disk partition kana pamusoro petiweki yekubatanidza (munyaya yetiweki boot)

Bootmgfw.efi

Iyo EFI vhezheni yePXEboot.com uye PXEboot.n12 (muEFI, sarudzo yekutanga kana kusabhutsu PXE iri muEFI shell, kwete network boot chirongwa). Bootmgfw.efi inosanganisa kugona kwePXEboot.com, PXEboot.n12, abortpxe.com, uye bootmgr.exe. Parizvino inongowanikwa yex64 uye Itanium architecture.

Default.bcd

Boot Configuration Data Store (BCD), REGF fomati, inogona kuiswa muREGEDIT, inotsiva iyo Boot.ini text file.

Kurodha kunoitika nenzira inotevera sezvatsanangurwa pamusoro
1. Dhawunirodha wdsnbp.com.
2. Zvadaro, pxeboot.com yezvivakwa zvakakodzera inotakurwa
3. PXEBoot.com inodhawunirodha bootmgr.exe uye BCD bhutsu yekumisikidza data chitoro
4. Bootmgr.exe inoverenga BCD boot configuration data operating system zvinyorwa uye inotakura Boot.sdi faira uye Windows PE mufananidzo (boot.wim)
5. Bootmgr.exe inotanga kurodha Windows PE nekupinda Winload.exe muWindows PE mufananidzo.

Kana mukati RemoteInstall pane mapepa

Boot
Images
Mgmt
Templates
Tmp
WdsClientUnattend

kuvapo kwavo kunoreva kuti vasati vawedzera chikamu chekugovera muSCCM 2012 (PXE sevhisi mapoinzi muSCCM 2007), pakanga paine chimwe chiitiko chekugadzirisa pane yakaiswa Windows Deployment Services (WDS) iyo yakangogadzira maforodha aya.
Kune chikamu chekugovera (PXE sevhisi nzvimbo muSCCM 2007), chete anotevera mafolda anokwana

SMSBoot
SMSIMAGES
SMSTemp
Stores

Izvi hazvireve kuti SCCM yakaiswa zvisizvo, asi inogona kunongedza kune inogona bviro yekukanganisa.
Mhinduro yematambudziko akasiyana eWDS, SCCM uye PXE bundle inokurukurwa zvakadzama muchinyorwa. Kugadzirisa dambudziko rePXE Service Point uye WDS mune Configuration Manager 2007

Mugumisiro

IT zvivakwa zvinotungamirwa neSystem Center Configuration Manager yakawedzera chishandiso chitsva chevatariri veminda system.

Rondedzero yezvinongedzo kune ISO mifananidzo (Dzvanya kuti uratidze)download.f-secure.com/estore/rescue-cd-3.16-52606.iso
git.ipxe.org/releases/wimboot/wimboot-latest.zip
download.geo.drweb.com/pub/drweb/livecd/drweb-livecd-602.iso
rescuedisk.kaspersky-labs.com/rescuedisk/updatable/kav_rescue_10.iso
esetsupport.com/eset_sysrescue.iso
boot.ipxe.org/ipxe.iso
citylan.dl.sourceforge.net/project/clonezilla/clonezilla_live_alternative/20130226-quantal/clonezilla-live-20130226-quantal-i386.iso
ftp.rasla.ru/_Distr_/WinPE/RaSla/WinPE_RaSla.iso
www.kernel.org/pub/linux/utils/boot/syslinux/syslinux-5.01.zip

Спасибо за внимание!

Source: www.habr.com

PXE boot menu neSystem Center Configuration Manager