Hi Jan,
Jan Setje-Eilers wrote: > > What you're proposing won't do anything for the customer. They are > putting up with the pain that is wanboot in order to get end-to-end > authentication and encryption. Putting PXE with tftp in front of it > invalidates the entire exercise and only adds pain and expense. the another consumer which is being considered is network hands-off OpenSolaris installer (Automated Installer project). The problem we are trying to solve in that area (scope limited to Automated Installer only) is * minimize need for configuring things using DHCP server (as customers complain they often don't have access to it and need to ask IT admins for any change in that area) * allow implementation of more flexible algorithms with respect to which microroot is picked up for particular client. In current implementation, set of criteria DHCP server can use for making decision about which GRUB menu (with information about which microroot will be loaded) will be provided to pxeGRUB are limited. * consolidate Sparc and x86 boot process as much as possible These are the reasons why we were considering to introduce another level of network boot process - pxeGRUB would chainload wanboot-like variant for x86 which would then negotiate with install server which microroot should be picked up and loaded during following boot stage. Then * DHCP setup would be simple for common scenario - only one NBP+menu.lst for x86 - need to setup things on DHCP server only once * Automated installer can implement different mechanisms for determining which microroot should be picked up based on set of information client would collect and send to server * the same approach might be used for both x86 and Sparc Thank you, Jan > > What they need is boot integrity services (BIS) on top of PXE. It's > TPM'ish but basically allows a signature of the downloaded NBP and > payload (in our case the microroot) to be computed and validated. > > I suppose if you wanted to build on the reputation that wanboot has > earned, you could call and implementation of BIS for Solaris PXE boot > wanboot on x86, but I'm going to suggest that that is counter productive. > > -jan > > Sundar Yamunachari wrote: >> Jan, >> >> We were talking about wan boot support for X86. One of the >> suggestion was to load wanboot binary after loading pxegrub in X86. >> You and I had similar conversation last week. We would like to know >> what are the issues with loading something like wanboot binary on to >> the X86 system and make it work very similar to SPARC wan boot? Can >> we meet and talk about this topic? >> >> Thanks, >> Sundar >> >> -------- Original Message -------- >> Subject: [Fwd: wanboot of x86 clinet] >> Date: Fri, 05 Jun 2009 09:02:15 +0200 >> From: Jan Damborsky <Jan.Damborsky at Sun.COM> >> To: Sarah Jelinek <Sarah.Jelinek at Sun.COM>, Susan.Sohn at Sun.COM, >> Ethan Quach <Ethan.Quach at Sun.COM>, Sundar Yamunachari >> <sundar.yamunachari at Sun.COM> >> >> >> >> It is interesting that that we touched that topic >> yesterday :-) It seems there might be customers >> interested in x86 wanboot support. >> >> Jan >> >> >> >> >> ------------------------------------------------------------------------ >> >> Subject: >> wanboot of x86 clinet >> From: >> Peter ?str?m <Peter.Astrom at Sun.COM> >> Date: >> Thu, 04 Jun 2009 16:16:16 +0200 >> To: >> wanboot-interest at sun.com, jet-interest at sun.com >> >> To: >> wanboot-interest at sun.com, jet-interest at sun.com >> CC: >> Peter ?str?m <Peter.Astrom at Sun.COM> >> >> >> Hi >> A Bank Customer is using JET wanboot on SPARC and want to use the >> same installation routine for x86. For security reasons they are not >> allowing nfs in the network. >> I know that pxe boot don't support wanboot. >> But is it possible to do a wanboot installation of an x86 system??? >> With help of grub?? >> If not, are there any plan to fix this?? >> >> Best Regards >> Peter ?str?m >> Sun Sweden >
