FOG on a MAC - Revision history

SebastianRoth: /* Culprits */

2016-08-08T18:17:28Z

‎Culprits

Wayne-workman.28155: Added notes and reference

2016-06-11T18:04:28Z

Added notes and reference

SebastianRoth at 17:48, 11 March 2016

2016-03-11T17:48:11Z

Wayne-workman.28155 at 17:19, 24 February 2016

2016-02-24T17:19:15Z

SebastianRoth: /* DNSmasq */

2015-10-01T14:01:11Z

‎DNSmasq

SebastianRoth: /* DNSmasq */

2015-09-28T20:33:12Z

‎DNSmasq

SebastianRoth: /* Netbooting Apple Mac */

2015-09-25T16:20:41Z

‎Netbooting Apple Mac

SebastianRoth: /* DNSmasq */

2015-09-23T21:54:40Z

‎DNSmasq

SebastianRoth: /* Startup Disk */

2015-09-23T21:53:32Z

‎Startup Disk

SebastianRoth: /* ISC DHCP Server */

2015-09-23T21:37:17Z

‎ISC DHCP Server

@@ Line 132: / Line 132: @@
 ==== Culprits ====
-On some Macmini clients the bless-setting doesn't do the job. Up till now (Sept. 2015) it's still unclear why. Possibly a newer Boot-ROM Firmware version is the issue.
+Newer Mac OS X releases do not allow blessing as is. You need to allow using the address with a tool called csrutil. See here for more details: https://support.apple.com/en-us/HT205054
 ==iPXE for Macintosh ==

@@ Line 149: / Line 149: @@
 Macmini6,2 (C07LR0UQDY3H), Broadcom NetXtreme BCM57766 (PCI ID 14e4:1686)  - http://www.everymac.com/systems/apple/mac_mini/specs/mac-mini-core-i7-2.6-late-2012-specs.html
 == Related articles ==
 {{:Related to ISC-DHCP}}

@@ Line 1: / Line 1: @@
-==Server Install==
+== Netbooting Apple Mac ==
 Intel Macintoshs all use (U)EFI  - where common PCs have a  BIOS - to bootstrap and to some extent talk to hardware. Several different ways exist to make those Macs boot from network. Depending on your preference and setup choose whichever suites you.
 '''Untested hint: Verbose Mac OS boot: sudo /usr/sbin/nvram boot-args="-v"''' (https://groups.google.com/forum/#!topic/macenterprise/y1RnrjpvSr4)
-==== Using stones (aka startup keys) ====
+=== Using stones (aka startup keys) ===
 On startup (when you hear the sound, before Apple sign comes up) you can hold down different keys to make the Mac boot from network. Apple uses a kind of special protocol called BSDP which is partly similar to the well known DHCP protocol. But there is more to it. Find a detailed explanation [https://static.afp548.com/mactips/bootpd.html here] if you want to dig into it. This method is called 'Using stones' as people use stones or other similar objects to boot a whole lab of Mac clients by putting a stone on the keyboard to hold down the 'n' key - but there are other ways to achieve this too!
-===== ISC DHCP Server =====
+==== ISC DHCP Server ====
 To make a Mac client boot from network you need to extend your DHCP server configuration. Add the following option to your subnet section:
   subnet ... {
@@ Line 39: / Line 30: @@
 Restart the DHCP server after saving the configuration. Then booting up your Mac client hold down the 'n' key and you will see a globe spinning instead of the usual apple sign. The Mac requests an IP from the DHCP server which advises it to load iPXE via TFTP and boot that up.
-====== architecture ======
+===== architecture =====
 That was easy. So now we can go into the details of delivering different iPXE binaries for varying Mac platforms:
   class "Apple-Intel-Netboot" {
@@ Line 71: / Line 62: @@
 To lookup Mac models and their architecture/CPU [http://www.everymac.com/systems/by_processor/ this website] comes in very handy!
-====== fancy ======
+===== fancy =====
 Newer Macs also have a fancy version of network booting. Hold down the 'alt' key and you will see different disks and network images to boot from. To make this work you need to modify the class definition:
   class "Apple-Intel-Netboot" {
@@ Line 95: / Line 86: @@
 For more information about the rows of hex numbers see this excellent [http://brandon.penglase.net/index.php?title=Getting_*nix_to_Netboot_Macs example]. And [https://github.com/jamf/NetSUS/blob/master/NetBoot/var/appliance/conf/dhcpd.conf here] you can find a even more advanced example configuration.
-====== Startup Disk ======
+===== Startup Disk =====
 When using a proper Mac OS X server one can configure a NetBoot device/server in System Preferences -> Startup Disk. See here:
@@ Line 102: / Line 93: @@
 Unfortunatelly our previously configured NetBoot ISC DHCP server is not showing up in that dialog. It's just one simple thing preventing that. Mac OS sends a DHCPINFORM broadcast message to enumerate NetBoot images on the network. Usually DHCP messages are sent from UDP source port 68. But not in this case - Startup Disk enumeration sends DHCPINFORM with a random source port smaller 1024 (don't ask me why!). [https://github.com/jamf/NetSUS/blob/master/NetBoot/usr/local/sbin/dhcp-4.2.4-P1_dhcp.c.patch Here] you can find a patch to make ICS DHCP server answer those messages properly.
-===== DNSmasq =====
+==== DNSmasq ====
 As well as ISC DHCP also dnsmasq can be configured to serve as netboot server for Mac clients:
   dhcp-vendorclass=apple-boot,"AAPLBSDPC/i386"
@@ Line 129: / Line 120: @@
 This still does not address the issue of selecting the correct iPXE binary for 32 or 64 bit.
-====Using bless====
+=== Using bless ===
 An Apple Mac can be 'blessed' to boot from whichever source you want via commandline. This setting is saved in NVRAM and not changed by cloning your Macs via FOG. I'd suggest activating SSH on your Macs and use clusterssh to bless all of them without having walk to and login to each and every client.
@@ Line 140: / Line 131: @@
 No special DHCP configuration is needed for this! BUT if your server ip changes for example you'd have to run this command on all your clients again.
-=====Culprits=====
+==== Culprits ====
 On some Macmini clients the bless-setting doesn't do the job. Up till now (Sept. 2015) it's still unclear why. Possibly a newer Boot-ROM Firmware version is the issue.
-===iPXE for Macintosh===
+==iPXE for Macintosh ==
 As noted earlier there is a fundamental difference between Mac-EFI and PC-BIOS. Not just with configuring network boot but also when it comes to the binary being loaded via TFTP and executed on the client. To make iPXE work on Macs a lot of work has been done in 2014. Check out this thread if you are interested in the details: http://forum.ipxe.org/showthread.php?tid=7323
@@ Line 150: / Line 141: @@
 Depending on the hardware you have this might work for you straight away. If not, please get in contact with us on the forums so we can work on it to find a solution!!
-====Working====
+== Working devices ==
 Macbook1,1 ...

← Older revision		Revision as of 17:19, 24 February 2016
Line 158:		Line 158:

	Macmini6,2 (C07LR0UQDY3H), Broadcom NetXtreme BCM57766 (PCI ID 14e4:1686) - http://www.everymac.com/systems/apple/mac_mini/specs/mac-mini-core-i7-2.6-late-2012-specs.html		Macmini6,2 (C07LR0UQDY3H), Broadcom NetXtreme BCM57766 (PCI ID 14e4:1686) - http://www.everymac.com/systems/apple/mac_mini/specs/mac-mini-core-i7-2.6-late-2012-specs.html
		+
		+	== Related articles ==
		+
		+	{{:Related to ISC-DHCP}}

← Older revision		Revision as of 14:01, 1 October 2015
Line 128:		Line 128:

	This still does not address the issue of selecting the correct iPXE binary for 32 or 64 bit.		This still does not address the issue of selecting the correct iPXE binary for 32 or 64 bit.
−
−	~~====== Links ======~~
−	~~[http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2010q1/003638.html http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2010q1/003638.html]~~

	====Using bless====		====Using bless====

← Older revision		Revision as of 20:33, 28 September 2015
Line 113:		Line 113:

	Add those five lines to your configuration, save and restart the service. Try booting one of your Macintoshs holding down the 'n' key while it comes up. You should see a globe - instead of the apple - on the screen!		Add those five lines to your configuration, save and restart the service. Try booting one of your Macintoshs holding down the 'n' key while it comes up. You should see a globe - instead of the apple - on the screen!
		+
		+	The more advanced config for dnsmasq looks like this:
		+	dhcp-match=set:intel-macos,60,AAPLBSDPC/i386
		+
		+	dhcp-match=set:bsdp-list,43,01:01:01:02:02:01
		+	dhcp-option-force=tag:intel-macos,tag:bsdp-list,60,AAPLBSDPC/i386
		+	dhcp-option-force=tag:intel-macos,tag:bsdp-list,43,01:01:01:04:02:80:00:07:04:01:00:02:0e:08:04:01:00:02:0e:09:0d:01:00:02:0e:08:69:50:58:45:2d:46:4f:47
		+
		+	dhcp-match=set:bsdp-select,43,01:01:02:02:02:01
		+	dhcp-option-force=tag:intel-macos,tag:bsdp-select,60,AAPLBSDPC/i386
		+	dhcp-option-force=tag:intel-macos,tag:bsdp-select,43,01:01:02:08:04:81:00:05:2a:82:0a:4e:65:74:42:6f:6f:74:30:30:31
		+	dhcp-option-force=tag:intel-macos,tag:bsdp-select,66,x.x.x.x # TFTP server IP
		+	dhcp-option-force=tag:intel-macos,tag:bsdp-select,67,"ipxe.efi" # bootfile
		+
		+	This still does not address the issue of selecting the correct iPXE binary for 32 or 64 bit.

	====== Links ======		====== Links ======

@@ Line 107: / Line 107: @@
   dhcp-option-force=apple-boot,67,"ipxe32.efi"
   dhcp-authoritative
 Add those five lines to your configuration, save and restart the service. Try booting one of your Macintoshs holding down the 'n' key while it comes up. You should see a globe - instead of the apple - on the screen!

← Older revision		Revision as of 21:37, 23 September 2015
Line 92:		Line 92:

	For more information about the rows of hex numbers see this excellent [http://brandon.penglase.net/index.php?title=Getting_*nix_to_Netboot_Macs example]. And [https://github.com/jamf/NetSUS/blob/master/NetBoot/var/appliance/conf/dhcpd.conf here] you can find a even more advanced example configuration.		For more information about the rows of hex numbers see this excellent [http://brandon.penglase.net/index.php?title=Getting_*nix_to_Netboot_Macs example]. And [https://github.com/jamf/NetSUS/blob/master/NetBoot/var/appliance/conf/dhcpd.conf here] you can find a even more advanced example configuration.
		+
		+	====== Startup Disk ======
		+
		+	When using a proper Mac OS X server one can configure a netboot device/server in System Preferences -> Startup Disk.

	===== DNSmasq =====		===== DNSmasq =====