NetSUS Server 3.0.2 is now available

[eric_krause]

We have put out a new version of the NetSUS Server. The source has been updated on GitHub and it is also available as both an OVA and an installer.

Added features:

• Broadcast the Actual Image Name, Image ID & Image Type, drawn from the NBImageInfo.plist for the NBI.
• IP enhancements to assist with subnet validation and network configuration.
• POODLE - disabled the use of SSLv3 for webadmin
• Added support for Cent OS 7 and RedHat 7
• Other general cleanups & tunes.

https://github.com/jamf/NetSUS/blob/master/README.md

[bentoms]

From IRC:

19:31:57 <bruienne> macmule: tell them to fix that hyperlink, I had to copy paste it, LIKE ANIMAL

:)

[bentoms]

Thanks & good work!

[donmontalvo]

I had to copy paste it, LIKE ANIMAL

Bwahaha ^^^^

[calumhunter]

Ah! finally merged the PR from Duncan

[frozenarse]

I'm assuming that support for 10.10 updates are 'baked in' with this version?

[calumhunter]

https://github.com/jamf/NetSUS/blob/master/SUS/var/lib/reposado/reposadolib/reposadocommon.py#L85-L8...

i would say yes

[Araneta]

Anyone having issues with Netboot not able to start on this version?
Looks like the /etc/dhcpd.conf file is doing weird things on this version.
(On a fresh install Ubuntu 14).

[mpienpakdee]

Araneta-

I had issues as well. I ended up copying my dhcpd.conf from my previous 3.01 and it worked fine. I think it has to do with the hexadecimal portion of the file, as there was an extra colon at the end of the first "option vendor-encapsulated-options" line. Removing it allowed the netboot to enable (but would show the netboot name as blank) but I could never get it to actually boot until I replaced the file and had it just say Faux Netboot.

Disabling and attempting to reenable Netboot stops it from working again, I believe because its trying to pull the .nbi name and rewriting the hex portion again.

This is on the appliance version, btw.

[Araneta]

Thanks @mpienpakdee. I was doing my troubleshooting as well and I found out that the configurefornetboot script can't pull out the imagid properly hence giving us this issue.

[jkuo]

@eric.krause How do you update an existing NetSUS box? Just run the installer again?

[Araneta]

@jkuo Login to your NetSUS box or use ssh. Run sudo wget http://content.jamfcloud.com/NetSUS_3.0.2.run and then do sudo sh NetSUS_3.0.2.

Hope this helps.

[jkuo]

@Araneta - thanks! Looks like it worked. I think. :)

[mbracco]

I tried on RedHat EL7, but dhcp cannot be activated here. Is the netboot dhcp patch included here somehow ?
Anyone else having trouble to make netboot work under CENTOS 7 or RHEL7 ?

[Ethan_Mondy]

Does this version give us the ability to select a specific nbi? If I have multiple nbi's, can I select which one to use from a list like we were able to with NetBoot being hosted on an OSX server? I think they called it having more than one image enabled.

[calumhunter]

@Araneta do you have spaces in the name of your NBI?

[Araneta]

@calum_carey No I don't. I also tried removing numbers on the NBI name to no avail.

[ocla__09]

Is this the first release with centos support? Or has it been there all along?

Wondering if this will run on centos 6.5

[calumhunter]

CentOS support has been around for a while.
from the release notes for 3.0
http://jamfsoftware-content.s3.amazonaws.com/downloads/NetBootSUSServerUserGuide_v3.0.pdf
external image link

[andyinindy]

FYI, the NetSUS installer fails it's preinstallation checks on our RHEL 6.4 VM's until we perform the following steps:

cd /etc
touch centos-release
ln -sf centos-release system-release

After installation, we can restore the original symlink and remove "centos-release":

ln -sf redhat-release system-release
rm centos-release

Since RHEL 6.4 is a supported platform, I don't understand why this is necessary. Can we get this fixed?

--Andy

[andyinindy]

Another issue; the script that NetSUS 3.0.2 uses to obtain the IP address that is used to configure the NetBoot service has an issue in our environment. Basically, our NetSUSes have two IP addresses; one that is the primary IP and a second private IP that is used by VMware as a management interface.

The "/var/appliance/configurefornetboot" script contains the code that is used to gather the IP address:

ip addr show to 0.0.0.0/0 scope global | awk '/[[:space:]]inet / { print gensub("/.*","","g",$2) }'

On our server, this returns two results. For whatever reason, the NetBoot service ends up selecting the private IP, which results in a non-functional imaging environment.

I ended up hard coding our server's IP into the 'configurefornetboot' script, and this resolved the issue. But it seems that some further logic is needed in order to deal with systems that have multiple interfaces/IP addresses.

Incidentally, I was told that the NetSUS project had been forked and that someone other than JAMF was taking over development. Is this true?

--Andy

[sprattp]

So i can get the Macs to Netboot okay, but as soon as i try to image a computer it fails on the first task i.e. to partition/format the hard disk. I have also noticed that Disk Utility can not format the Hard Disk either as it fails to unmount the disk. Tried both on Ubuntu 12.04 and 14.04.

Netboot imaging work okay with version 3.0.1 on both versions of Ubuntu

Phil

[ocla__09]

I have replaced the /etc/dhcpd.conf file with one from a 3.01 machine and the netboot portion is still refusing to enable.
This is what I am seeing in the log:

Nov 18 14:20:02 hofpdsiitscasp01 dhcpd: /etc/dhcpd.conf line 13: expecting hexadecimal number. Nov 18 14:20:02 hofpdsiitscasp01 dhcpd: #011 option vendor-encapsulated-options 01:01:01:04:02:FF:FF:07:04:0:00:00:00:08:0 Nov 18 14:20:02 hofpdsiitscasp01 dhcpd: /etc/dhcpd.conf line 16: right brace expected. Nov 18 14:20:02 hofpdsiitscasp01 dhcpd: if Nov 18 14:20:02 hofpdsiitscasp01 dhcpd: ^ Nov 18 14:20:02 hofpdsiitscasp01 dhcpd: Configuration file errors encountered -- exiting Nov 18 14:20:02 hofpdsiitscasp01 dhcpd:

Is there something I should be looking for specifically in the file? I removed the extra colon at the end of the hex number at line 13. from:

:00:0A:;

to

:00:0A;

and the Netboot service still does not start and in addition it puts the colon back every time. Is there something I am missing? Same goes for any changes related to the right brace.

[ocla__09]

Interestingly enough, creating a new NBI and uploading to the server has allowed the netboot service to enable again.

[nzmacgeek]

You guys may like to check whether your NetBoot image contains an NBImageInfo.plist that is binary or XML format.

The 3.0.2 script that replaces the NetBoot name with your NBI's name doesn't read binary XML well.

Here's the trick:

plutil -convert xml1 <path to nbi>/NBImageInfo.plist

Re-upload to your NetSUS NetBoot share and re-select it in NetBoot options ('disable netboot', 'enable netboot').

[mvught]

If your ip address is not showing in the login screen (off the server). And the Netboot shows: SMB://awk.....

Fix @mike.paul: Just add: sudo apt-get install gawk and reboot the machine.

[geoffreykobrien]

I have the same netboot starting issue, created a new NBI and uploading didn't fix the issue. Both work fine in 3.0.1.

[geoffreykobrien]

I built a new, vanilla ubuntu 14.04lts and then used the 3.0.2 .run file, and cannot get netboot to turn on, thoughts?

[nzmacgeek]

Chances are you're experiencing this bug. Have you converted your NetBoot NBI's NBImageInfo.plist to ASCII-xml and re-uploaded like I suggested above?

[nzmacgeek]

BTW: macmule's AutoCasperNBI tool will do this for you if you have the very latest version...

[geoffreykobrien]

I ended downloading the OVA and I got netboot to turn on, testing the process now.

[geoffreykobrien]

Does anyone have a copy of the 3.0.1 ova and run file, I need to go back as that worked.

[mvught]

There you go:

Installer: http://jamfsoftware-content.s3.amazonaws.com/downloads/NetSUS_3.0.1.run
OVA: http://jamfsoftware-content.s3.amazonaws.com/downloads/NetSUS_3.0.1.ova

Installer: http://jamfsoftware-content.s3.amazonaws.com/downloads/NetSUS_3.0.run
OVA: http://jamfsoftware-content.s3.amazonaws.com/downloads/NetSUS3.0.ova

[TimT]

Hey All,

I have spun up a couple of 3.0.2 version and mostly seems all good. Especially like not having to edit the dhcpd.conf file, picked up our NBI name straight off the bat. Have setting up imaging and the SUS parts which are working well enough.

I have tried to log into the web UI on the weekend but cannot get in. The login page appears which tells me it can establish the connection however the default webadmin credentials (using default, haven't changed them) don't appear to be recognised. The blue url bar loads up and completes but doesn't allow me to get in.

Have had no problems with my v3.0.1 variants.

Any ideas?

Cheers
T

[elislider]

I cannot get this NetSUS installer to work on a Ubuntu 12.0.4 VM (same one running the JSS)
It hangs at "Starting NetBoot Installation".

Any advice?

[mvught]

Clean install Ubuntu? cane you post the log off the terminal

[mvught]

@eric.krause Will there be a update 3.0.3 with 10.11 in the release?

[Snickasaurus]

@mvught

Check this out. Basically you just need to update the correct file on your server. Let me know if you need any help.

[plawrence]

@mvught This older post helped me edit the right files on the NetSUS to get 10.11 updates working.

I edited both /var/lib/reposado/preferences.plist and /etc/apache2/sites-enabled/000-default

[mvught]

Hello all,

Thanks for the reply's so far ;)
We have CentOS and:
/var/lib/reposado/preferences.plist i like this:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
        <key>CurlPath</key>
        <string>/usr/bin/curl</string>
        <key>LocalCatalogURLBase</key>
        <string></string>
        <key>UpdatesMetadataDir</key>
        <string>/srv/SUS/metadata/</string>
        <key>UpdatesRootDir</key>
        <string>/srv/SUS/html/</string>
</dict>
</plist>

vi (long file)
/etc/httpd/conf/httpd.conf
i have add:

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} Darwin/9
RewriteRule ^/index.sucatalog$ http://%{HTTP_HOST}/index-leopard.merged-1.sucatalog
RewriteCond %{HTTP_USER_AGENT} Darwin/10
RewriteRule ^/index.sucatalog$ http://%{HTTP_HOST}/index-leopard-snowleopard.merged-1.sucatalog
RewriteCond %{HTTP_USER_AGENT} Darwin/11
RewriteRule ^/index.sucatalog$ http://%{HTTP_HOST}/index-lion-snowleopard-leopard.merged-1.sucatalog
RewriteCond %{HTTP_USER_AGENT} Darwin/12
RewriteRule ^/index.sucatalog$ http://%{HTTP_HOST}/index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog
RewriteCond %{HTTP_USER_AGENT} Darwin/13
RewriteRule ^/index.sucatalog$ http://%{HTTP_HOST}/index-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog
RewriteCond %{HTTP_USER_AGENT} Darwin/14
RewriteRule ^/index.sucatalog$ http://%{HTTP_HOST}/index-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog
RewriteCond %{HTTP_USER_AGENT} Darwin/15
RewriteRule ^/index.sucatalog$ http://%{HTTP_HOST}/index-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog
</IfModule>

but is not working at all, i have restarted the service but no luck at all.
any suggestions left?