Waxaan ka fekereynaa inaan ballaarino awooda Maamulaha Habeynta Xarunta Nidaamka (wax soo saarka lagu maareeyo kaabayaasha IT) marka aan isticmaaleyno PC-yada shabakada isticmaalaya PXE. Waxaan abuurnaa liiska bootka ee ku saleysan PXELinux oo leh shaqeynta Xarunta Nidaamka waxaana ku darnaa iskaanka fayraska, ogaanshaha iyo sawirada soo kabashada. Dhammaadka maqaalka, waxaanu taabanaynaa sifooyinka Maamulaha Habaynta ee Xarunta Nidaamka 2012 oo ay la socdaan Adeegyada Dejinta Windows (WDS) marka la dhex gelinayo PXE.
Waxaan ku fulinaa dhammaan ficilada jawi tijaabo ah oo horey u lahaa nidaamka Xarunta 2012 Maamulaha Habaynta SP1 oo lagu rakibay, koontaroolaha domain, iyo tiro mashiinada tijaabada ah. Waxaa loo malaynayaa in SCCM ay mar horeba ku soo daabulaysay shabakadda iyadoo la isticmaalayo PXE.
entry
Deegaanka imtixaanku waxa uu ka kooban yahay dhowr mashiino dalwad ah. Dhammaan mashiinnada waxay leeyihiin Microsoft Windows Server 2008 R2 (x64) martida OS lagu rakibay, E1000 adabtarada shabakadda, SCSI Controller: LSI Logic SAS
Magaca (doorararka)
Cinwaanka IP / magaca DNS
Waxqabadka
SCCM (Maareeyaha Habaynta Xarunta Nidaamka)
192.168.57.102
sccm2012.tijaabada.maxali ah
Maamulaha Habaynta Xarunta La Rakibay 2012 SP1
DC (AD, DHCP, DNS)
192.168.57.10
dc1.tijaabada.maxali ah
Doorka maamulaha domainka, server DHCP iyo server DNS
TEST (Mashiinka tijaabada)
192.168.57.103
tijaabi.tijaabi.maxali ah
Imtixaan
G.W. (Gateway)
192.168.57.1
Isku xirka shabakadaha. Doorka Gateway
1. Ku dar PXELinux SCCM
Waxaanu ku samaynaa ficilada mishiinka meesha lagu rakibay Maamulaha Habaynta Xarunta Nidaamka
- Aan go'aaminno hagaha halka ay ku yaaliin faylalka WDS si loo soo dejiyo, tan awgeed waxaan u eegeynaa diiwaanka qiimaha halbeegga
RootFolderoo laan ahHKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesWDSServerProvidersWDSTFTP
Qiimaha caadiga ahC:RemoteInstall
Faylasha laga soo dejisan karo barta geynta SCCM waxay ku yaalaan hagahasmsbootx86иsmsbootx64iyadoo ku xiran qaab-dhismeedka.
Marka hore, u samee hagaha naqshadaha 32-bit, sida caadiga ahc:Remoteinstallsmsbootx86 - Soo deji kaydka oo leh kii ugu dambeeyay . Koobi ka soo syslinux-5.01.zip ilaa
c:Remoteinstallsmsbootx86faylasha soo socda:
memdisk, chain.c32, ldlinux.c32, libcom32.c32, libutil.c32, pxechn.c32, vesamenu.c32, pxelinux.0
Faylal dheeri ah ayaa loo baahan yahay si looga fogaado qaladkaas.
- В
c:Remoteinstallsmsbootx86Magacaabidpxelinux.0вpxelinux.com
Gal galc:remoteinstallsmsbootx86koobi ka sameeabortpxe.comoo u magacowdoabortpxe.0
Haddaan dib loogu magacaabin kordhin.0, ka dibna tusaale ahaan tilmaamahaKernel abortpxe.comwaxay ku fashilmi doontaa ciladan soo socota: Booting kernel ayaa guuldareystay: Lambarka faylka xun
PXELINUX, kordhinta faylka soo dejinta waa in loo dejiyaa si waafaqsan saxankanone or other Linux kernel image .0 PXE bootstrap program (NBP) [PXELINUX only] .bin "CD boot sector" [ISOLINUX only] .bs Boot sector [SYSLINUX only] .bss Boot sector, DOS superblock will be patched in [SYSLINUX only] .c32 COM32 image (32-bit COMBOOT) .cbt COMBOOT image (not runnable from DOS) .com COMBOOT image (runnable from DOS) .img Disk image [ISOLINUX only]Source: Qaybta "Kernel File"
- Si aan dhowr jeer loo riixin furaha F12 marka SCCM lagu soo shubayo menu-ka, u magacow pxeboot.com pxeboot.com.f12, ku koobi pxeboot.n12 pxeboot.com
Haddii tan aan la samayn, ka dibna marka la dooranayo, waxaan heli doonaa fariin sida mar kasta
Fiiro gaar ah: Ha ilaawin inaad sidoo kale magacawdo faylashan gal x64. marka ay rartox86wdsnbp.comLaga soo bilaabo gal x86, loader-ku wuxuu go'aamiyaa naqshadaha processor-ka iyo faylka soo socda ayaa laga soo raray galka oo leh qaab-dhismeedka u dhigma. Markaa, x64, faylka xiga ma ahaan doonox86pxeboot.comiyox64pxeboot.com - Soo dejiso/abuur , xallinta 640x480, ku koobi isla gal. Samee gal
ISOhalka aan dhigi doono sawirada ISO. Samee galpxelinux.cfgloogu talagalay configs. - Galka pxelinux.cfg, ku samee fayl caadi ah, oo ku jira codeeyn aan Unicode ahayn, oo ay ku jirto
default (guji si aad u muujiso)# используем графическое меню DEFAULT vesamenu.c32 PROMPT 0 timeout 80 TOTALTIMEOUT 9000 MENU TITLE PXE Boot Menu (x86) MENU INCLUDE pxelinux.cfg/graphics.conf MENU AUTOBOOT Starting Local System in 8 seconds # Boot local HDD (default) LABEL bootlocal menu label Boot Local menu default localboot 0x80 # if it doesn't work #kernel chain.c32 #append hd0 # Вход в меню по паролю Qwerty, алгоритм MD5 label av menu label Antivirus and tools menu PASSWD $1$15opgKTx$dP/IaLNiCbfECiC2KPkDC0 kernel vesamenu.c32 append pxelinux.cfgav.conf label sccm menu label Start to SCCM COM32 pxechn.c32 APPEND sccm2012.test.local::smsbootx86wdsnbp.com -W label pxe64 menu label Start to x64 pxelinux COM32 pxechn.c32 APPEND sccm2012.test.local::smsbootx64pxelinux.com LABEL Abort MENU LABEL Exit KERNEL abortpxe.0Gal gal
pxelinux.cfgabuur faylgraphics.confnuxur leh
graphics.conf (guji si aad u muujiso)MENU MARGIN 10 MENU ROWS 16 MENU TABMSGROW 21 MENU TIMEOUTROW 26 MENU COLOR BORDER 30;44 #00000000 #00000000 none MENU COLOR SCROLLBAR 30;44 #00000000 #00000000 none MENU COLOR TITLE 0 #ffffffff #00000000 none MENU COLOR SEL 30;47 #40000000 #20ffffff MENU BACKGROUND background.png NOESCAPE 0 ALLOWOPTIONS 0Gal gal
pxelinux.cfgabuur faylav.confnuxur leh
av.conf (guji si aad u muujiso)DEFAULT vesamenu.c32 PROMPT 0 MENU TITLE Antivirus and tools MENU INCLUDE pxelinux.cfg/graphics.conf label main menu menu label return to main menu kernel vesamenu.c32 append pxelinux.cfg/default label drweb menu label DrWeb kernel memdisk append iso raw initrd=isodrweb.iso label eset menu label Eset kernel memdisk append iso raw initrd=isoeset_sysrescue.iso label kav menu label KAV Rescue CD KERNEL kav/rescue APPEND initrd=kav/rescue.igz root=live rootfstype=auto vga=791 init=/init kav_lang=ru udev liveimg doscsi nomodeset quiet splash #Загружаем ISO по полному пути, можно загружать с другого TFTP label winpe menu label WinPE from another TFTP kernel sccm2012.test.local::smsbootx86memdisk append iso raw initrd=sccm2012.test.local::smsbootx86isoWinPE_RaSla.iso label clonezilla menu label Clonezilla kernel memdisk append iso raw initrd=isoclonezilla.iso - Natiijo ahaan, buugga c:remoteinstallsmsbootx86 wuxuu ka kooban yahay qaab-dhismeedka
c:remoteinstallsmsbootx86
pxelinux.cfgsilsilad.c32
ldlinux.c32
libcom32.c32
libtil.c32
pxechn.c32
vesamenu.c32
pxelinux.com
asalka.png
pxelinux.cfg
pxelinux.cfg
pxelinux.cfg
ISO
abortpxe.0
wdsnbp.com
bootmgfw.efi
wdsmgfw.efi
bootmgr.exe
pxeboot.n12
pxeboot.com
abortpxe.comDefault
av.conf
graphics.conf
*.iso - Qaab dhismeedka x64, waxaan si la mid ah u koobiyeynaa oo ku abuurnaa qaab isku mid ah galka
c:remoteinstallsmsbootx64
Isku dar
Marka la isticmaalayo amarkamenu PASSWDerayga sirta ah waxaa loo dejin karaa sidiisa, ama isticmaal algorithmamka xashiishka adoo ku daraya saxeexa u dhigma bilowga cabbirkaAlgorithm
SaxeexaMD5
$ 1 $SHA-1
$ 4 $SHA-2-256
$ 5 $SHA-2-512
$ 6 $Markaa furaha sirta ah
Qwertyiyo MD5 algorithmmenu PASSWD $1$15opgKTx$dP/IaLNiCbfECiC2KPkDC0Waxaad samayn kartaa furaha sirta ah, tusaale ahaan, adiga oo isticmaalaya matoor xashiish online ah , xariiqa
MD5(Unix)
2. Samee kabaha PXELinux
Hadda waxaan tilmaami doonaa sida loo shubo pxelinux.com oo aan helno menu-ka.
Ku qeexida pxelinux.com bootloader-ka iyada oo loo marayo shaqeynta WDS kama shaqeyso SCCM. Daawo Amarada
wdsutil /set-server /bootprogram:bootx86pxeboot.com /architecture:x86
looma farsameeyo. Waxaad xaqiijin kartaa in sawirada boot-ka aan la dejin adiga oo socodsiinaya amarka qaabeynta serverka WDS
wdsutil /get-server /show:images
Sidaa darteed, gudaha SCCM 2012, ma cayimi kartid faylkaaga PXE soo dejinta SMSPXE bixiyaha. Sidaa darteed, waxaan u habeyn doonaa aagga firfircoon ee server-ka DHCP.
Xuduudaha aagga firfircoon ee DHCP, u deji cabbirada si waafaqsan saxanka
Doorashada DHCP
Magaca xudunta
qiimaha
066
Boot magaca martida loo yahay serverka
sccm2012.tijaabada.maxali ah
067
Magaca Bootfile
smsbootx86pxelinux.com
006
Server Server
192.168.57.10
015
Magaca Domain DNS
imtixaan.maxali ah
Xulashada 066 waxaan ku qeexeynaa magaca FQDN ee server-ka sccm, xulashada 067 waxaan ku qeexeynaa dariiqa x86 bootloader pxelinux.com oo ka bilaabma xididka TFTP, xulashada 006 waxaan ku qeexeynaa cinwaanka IP-ga ee server-ka DNS. Haddii magaca server gaaban loo isticmaalo doorashada 066, doorashada 015 waxaan ku qeexeynaa DNS-ka daba-galka ah ee domainka.
Isku dar
Si faahfaahsan u sharaxay qaabeynta DHCP . Laakin onDCikhtiyaarka 150, TFTP server IP address, ayaa ka maqan goobaha baaxadda DHCP, iyo xulashada 150 via netsh ma shaqayn.
3. Hubinta shaqada
Dejinta aasaasiga ah waa la dhammaystiray oo waxaad bilaabi kartaa hubinta. Waxaan ku tusinaynaa kumbuyuutarka tijaabada ah ee BIOS-ka inuu ku dul shuban yahay shabakadda oo lagu shubay menu-ka
Xullo shay «Start to SCCM» iyo haddii taxane hawleed lagu meeleeyo kombayutarka, ka dib in muddo ah ka dib waxaa soo bixi doona daaqada "Task Sequence Wizard" oo kugu dhiirigelinaysa inaad geliso furaha sirta ah.
Waxaan dib u kicinay mashiinka, dib ugu noqo liiska, dooro liiska «Antivirus and tools» oo geli furaha sirta ah Qwerty
Waxaan dooranaa shay aan kala sooc lahayn oo aan ilaalino rarka sawirka ISO ee xusuusta
Sugitaanka iyo aragtida natiijada
Xaqiijinta waa la dhameeyay
4. Habayn dheeri ah iyo astaamo
Habaynta habaynta
Haddii macmiilka, server-ka DHCP iyo server ka kooban loader network ay ku jiraan isla qaybta network, looma baahna habayn dheeraad ah. Si kastaba ha ahaatee, haddii macmiilka iyo server-ka DHCP ama server WDS/SCCM ay ku yaalaan qaybo shabakadeed oo kala duwan, waxaa lagugula talinayaa inaad habayso routerkaaga si aad ugu gudbiso xirmooyinka baahinta macmiilka server-ka DHCP ee firfircoon iyo serverka WDS/SCCM ee firfircoon. Suugaanta Ingiriisiga, habkan waxaa loo yaqaannaa "cusboonaysiinta miiska Caawinta IP". Xaaladdan oo kale, macmiilku, ka dib markii uu helo ciwaanka IP-ga, wuxuu si toos ah ula xiriiraa server-ka ka kooban rarka shabkada isagoo si toos ah u sii marinaya baakadaha DHCP si uu u soo dejiyo shabkada.
Sisiciso router, isticmaal amarka
ip helper-address {ip address}
halkaas oo {ip address} Seerarka DHCP ama ciwaanka serverka WDS/SCCM Amarkani waxa kale oo uu soo diraa xidhmooyinka baahinta UDP ee soo socda
Dekada
Protocol
69
TFTP
53
Nidaamka Magaca Domain (DNS)
37
Adeegga waqtiga
137
Serverka Magaca NetBIOS
138
NetBIOS Datagram Server
67
Bootstrap Protocol (BOOTP)
49
TACACS
Habka labaad ee macmiilku si toos ah uga helo xogta ku saabsan rareeyaha shabakadda ee server-ka DHCP waa inuu caddeeyo ikhtiyaarrada 60,66,67 ee serverka DHCP. Isticmaalka DHCP doorashada 60 oo qiimo leh «PXEClient» Dhammaan qaybaha DHCP, kaliya haddii server-ka DHCP lagu martigeliyo isla server-ka sida Adeegyada Dejinta Windows. Xaaladdan oo kale, macmiilku wuxuu si toos ah ula xidhiidhaa adeega Windows Deployment Serfer isagoo isticmaalaya TFTP dekedda UDP 4011 halkii uu isticmaali lahaa DHCP. Habkan kuma talinayso Microsoft sababtoo ah arrimaha ku saabsan isu dheelitirka culeyska, maaraynta khaldan ee ikhtiyaarka DHCP iyo fursadaha jawaab celinta Adeegyada Gelitaanka Windows ee dhinaca macmiilka. Iyo sidoo kale sababtoo ah isticmaalka kaliya laba ikhtiyaar oo DHCP ah 66 iyo 67 waxay kuu ogolaaneysaa inaad dhaafto xuduudaha lagu dejiyay server boot network.
Waxa kale oo aad u baahan tahay inaad furto dekedaha soo socda ee UDP ee server-ka Adeegyada Dejinta Windows
dekedda 67 (DHCP)
dekedda 69 (TFTP)
dekedda 4011 (PXE)
iyo dekedda 68 haddii ogolaanshaha DHCP looga baahan yahay serverka.
Si aad u faahfaahsan, habka qaabaynta iyo nuucyada dib u jahaynta ee u dhexeeya serfarada kala duwan ee WDS ayaa lagu sifeeyay xagga hoose ee ilaha:
Maamulka barnaamijka boot network
Maamulka server-ka
Adeegyada Taageerada Badeecooyinka Microsoft (PSS) waxay taageertaa soohdimaha shabakadda kicinta Microsoft Windows Preinstallation Environment (Windows PE) 2.0
Sida loogu gudbiyo baahinta UDP (BOOTP / DHCP) ee Cisco
Tilmaamaha hawlgalka iyo qaabaynta DHCP ee router-yada Cisco (Qaybta 2)
Ikhtiyaarada dheeraadka ah ee soo dejinta maxaliga ah
On deegaanka imtixaanka, amarka
localboot 0 wuxuu siinayaa qalad noocaas ah
Waxay ku socotaa dukumeentiga syslinux in marka
localboot 0rariddu waxay ka bixi doontaa saxanka deegaanka. Iyo marka la tilmaamayo qiimo gaar ah 0x00 laga soo bilaabo aasaasiga ah (primary) floppy disk, marka la tilmaamayo 0x80 ka aasaasiga ah (primary) Hard disk. Adigoo u beddelaya amarka
localboot 0x80 OS deegaanka ayaa soo raray.
Haddii ay jirto baahi loo qabo in laga bootiyo saxan gaar ah, qayb ama amar localboot ma shaqeeyo, markaas waxaad isticmaali kartaa awoodaha module ah chain.c32. Ka dib marka la soo dejiyo, isticmaal amarka lifaaqa si aad u qeexdo qayb gaar ah oo saxan ama disk ah, nambarka diskku wuxuu ka bilaabmaa 0, nambarada qaybtu waxay ka bilaabataa 1. haddii qaybta 0 la cayimo, MBR waa la raray. Marka la tilmaamayo saxanka, qaybta waa laga saari karaa.
KERNEL chain.c32
APPEND hd0 0ama
KERNEL chain.c32
APPEND hd0
Ilaha:
Dalabka iyo sharraxaadda soo dejinta faylalka PXE
Sida ku xusan bilowga maqaalka, hagaha halka ay ku yaalliin faylalka WDS ee la soo dejin karo waxa uu ku jiraa qiimaha halbeegga RootFolder ee laanta diiwaanka HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesWDSServerProvidersWDSTFTP
Qiimaha caadiga ah C:RemoteInstall
Halkan halbeegga ReadFilter Hagaha waxaa lagu qeexaa halka server-ka TFTP uu ka raadiyo faylasha la soo dejiyo, laga bilaabo xididka. Iyadoo SCCM 2012 SP1 lagu rakibay, goobtani waa
boot*
tmp*
SMSBoot*
SMSTemp*
SMSImages*
Haddii aad u beddesho qiimaha cabbirka * ka dib dhammaan faylasha ku yaal tusaha waa laga baaraandegi doonaa RemoteInstall.
Doorka meesha geynta SCCM 2012 waxaa lagu qeexay qiimaha diiwaanka ProvidersOrderku yaal laanta HKLMSystemCurrentControlSetWDSServerProvidersWDSPXE
Xildhibaan ProvidersOrder waxay qaadan kartaa qiyamka
SMSPXE
Goobta adeega PXE ee SCCM
SMS.PXE.Filter
Maamulaha qoraalka PXE ee ka socda MDT (Qalabka Deployment Microsoft)
BINLSVC
Heerka WDS iyo RIS engine
Iyadoo SCCM lagu rakibay, cabbirka ProvidersOrder arrimaha SMSPXE. Beddelista cabbirka, waxaad bedeli kartaa habka ay bixiyeyaasha u kala horreeyaan.
Buug-yaraha RemoteInstall faylasha caadiga ah ee soo socda ayaa yaal
wdsnbp.com
Barnaamijka boot network ee loogu talagalay Adeegyada Dajinta Windows ee qabta hawlaha soo socda:
1. Ogaanshaha dhismaha.
2. Dayactirka kombayutarada sugitaanka. Marka siyaasadda isku-darka tooska ah la furo, barnaamijkan boot network waxaa loo diraa kombiyuutarada sugaya si ay u joojiyaan boot network oo ay u sheegaan server-ka dhismaha kombiyuutarka macmiilka.
3. Isticmaalka isku xirka kabaha shabakada (oo ay ku jirto adeegsiga ikhtiyaarka DHCP 66 iyo 67)
PXEboot.com
(Default) Waxay u baahan tahay isticmaaluhu inuu taabsiiyo furaha F12 si uu u sii wado kabaha shabakada
PXEboot.n12
Uma baahna adeegsaduhu inuu taabsiiyo furaha F12 oo uu isla markiiba bilaabo xidhidhka shabakada
AbortPXE.com
Kumbuyuutarka ku dhejiya adigoo isticmaalaya shayga boot ee soo socda ee BIOS isagoon sugin
bootmgr.exe
Maamulaha Bootka Windows (Bootmgr.exe ama Bootmgr.efi). Waxa uu ku shubaa bootloader-ka Windows-ka isagoo isticmaalaya firmware-ka qayb saxan gaar ah ama xidhiidh shabakadeed (haddii ay dhacdo boot)
Bootmgfw.efi
Nooca EFI ee PXEboot.com iyo PXEboot.n12 (EFI, doorashada in la bootiyo ama aan la bootin PXE waxay ku jirtaa qolofka EFI, maaha barnaamijka boot network). Bootmgfw.efi waxay isku daraysaa awoodaha PXEboot.com, PXEboot.n12, abortpxe.com, iyo bootmgr.exe. Hadda waxay u jirtaa oo keliya x64 iyo naqshadaha Itanium.
Default.bcd
Bakhaarka Isku-habaynta Boot (BCD), qaabka REGF, waxa lagu shubi karaa REGEDIT, waxa uu beddelaa faylka qoraalka Boot.ini
Soo dejinta waxay u dhacdaa siday u kala horreeyaan sida kor lagu sharaxay
1. Download wdsnbp.com.
2. Marka xigta, pxeboot.com ee naqshadaha ku habboon ayaa la raray
3. PXEboot.com waxay soo dejisanaysaa bootmgr.exe iyo kaydka xogta qaabaynta boot BCD
4. Bootmgr.exe wuxuu akhriyaa xogta qaabeynta boot BCD ee nidaamka hawlgalka wuxuuna ku shubaa faylka Boot.sdi iyo sawirka Windows PE (boot.wim)
5. Bootmgr.exe wuxuu bilaabaa soo dejinta Windows PE isagoo gelaya Winload.exe sawirka Windows PE
Hadday ku jirto RemoteInstall waxaa jira faylal
Boot
Images
Mgmt
Templates
Tmp
WdsClientUnattend Joogitaankooda waxay ka dhigan tahay ka hor inta aan lagu darin kaalinta dhibic qaybinta ee SCCM 2012 (PXE dhibcaha adeegga ee SCCM 2007), waxaa jiray xoogaa ficil qaabayn ah oo ku rakiban Adeegyada Dejinta Windows (WDS) kaas oo si toos ah u abuuray faylalkan.
Doorka dhibic qaybinta (goobta adeegga PXE ee SCCM 2007), kaliya faylalka soo socda ayaa ku filan
SMSBoot
SMSIMAGES
SMSTemp
StoresTani macnaheedu maaha in SCCM si khaldan loo rakibay, laakiin waxay tilmaami kartaa isha suurtagalka ah ee khaladaadka.
Xalka dhibaatooyinka kala duwan ee xirmada WDS, SCCM iyo PXE ayaa si faahfaahsan looga hadlay maqaalka.
Natiijada
Kaabayaasha IT ee uu maareeyo Maamulaha Habaynta Xarunta Nidaamka ayaa ku daray qalab cusub oo loogu talagalay maamulayaasha nidaamka goobta.
Liiska isku xirka sawirada ISO (guji si aad u muujiso)
Qalbadda
Source: www.habr.com