Okay, I think I have this figured out.  Where I went wrong was trying to use 
discovery without being able to use the integrated DHCP/PXE stuff.  There are 
ways to integrate this with existing infrastructure but those didn't work well 
in my situation.

It seems that I should have been going straight to the boot disk plugin.  There 
are multiple options there as well, but the one that seems to work best for my 
situation is to pre-create the host in TFM (via web UI or, even better, API 
call) then boot the host off the "generic" image.  The generic image requires 
DHCP to be able to get on the network and talk to Foreman, but that's pretty 
much exactly what I want.

Regards,

j


----- Original Message -----
From: "'Jason B. Nance' via Foreman users" <[email protected]>
To: [email protected]
Sent: Saturday, October 8, 2016 4:51:38 PM
Subject: Re: [foreman-users] how to tell discovery ISO to use DHCP automatically

>>"Unattended provisioning failed: unable to upload facts.  Check your
>> network credentials."

> That means your network configuration is perhaps incorrect. Check logs.

It seems that the problem is in my process.  I noticed that when I do 
everything with PXE that first the host boots with the default PXE 
configuration, which is loading the discovery image.  From there I can go into 
the UI/API, look at my discovered hosts, and say "provision".  That is creating 
a host-specific (well, MAC-specific) PXE configuration that includes a one-time 
use authentication key.  So when the kexec happens and the host reboots and 
does the PXE the second time it gets a different configuration (one that 
includes the authentication key that was just created) and the installation 
happens.

When booting from the ISO and doing the discovery, upon reboot (from the ISO 
again) the host doesn't have the authentication key, so it can't upload the 
facts.  :-\

Is it possible to do some sort of time-based whitelist by MAC or IP or just 
temporarily disable the auth?  Or is there another process I should be 
following?

Regards,

j

-- 
You received this message because you are subscribed to the Google Groups 
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

Reply via email to