Add multi-boot PXE menu, Clonezilla backup management, and GE Aerospace branding

- iPXE boot menu with WinPE, Clonezilla, Blancco Drive Eraser, Memtest86+
- prepare-boot-tools.sh to download/extract boot tool binaries
- Clonezilla backup management in webapp (upload, download, delete)
- Clonezilla Samba share for network backup/restore
- GE Aerospace logo and favicon in webapp
- Updated playbook with boot tool directories and webapp env vars

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

webapp/app.py

@@ -14,34 +14,40 @@ from flask import (
     redirect,
     render_template,
     request,
+    send_file,
     url_for,
 )
 from lxml import etree
+from werkzeug.utils import secure_filename
 
 app = Flask(__name__)
 app.secret_key = os.environ.get("FLASK_SECRET_KEY", "pxe-manager-dev-key-change-in-prod")
+app.config["MAX_CONTENT_LENGTH"] = 16 * 1024 * 1024 * 1024  # 16 GB max upload
 
 # ---------------------------------------------------------------------------
 # Configuration
 # ---------------------------------------------------------------------------
 SAMBA_SHARE = os.environ.get("SAMBA_SHARE", "/srv/samba/winpeapps")
+CLONEZILLA_SHARE = os.environ.get("CLONEZILLA_SHARE", "/srv/samba/clonezilla")
 
 IMAGE_TYPES = [
-    "geastandardpbr",
-    "geaengineerpbr",
-    "geashopfloorpbr",
-    "gestandardlegacy",
-    "geengineerlegacy",
-    "geshopfloorlegacy",
+    "gea-standard",
+    "gea-engineer",
+    "gea-shopfloor",
+    "ge-standard",
+    "ge-engineer",
+    "ge-shopfloor-lockdown",
+    "ge-shopfloor-mce",
 ]
 
 FRIENDLY_NAMES = {
-    "geastandardpbr": "GEA Standard PBR",
-    "geaengineerpbr": "GEA Engineer PBR",
-    "geashopfloorpbr": "GEA Shop Floor PBR",
-    "gestandardlegacy": "GE Standard Legacy",
-    "geengineerlegacy": "GE Engineer Legacy",
-    "geshopfloorlegacy": "GE Shop Floor Legacy",
+    "gea-standard": "GE Aerospace Standard",
+    "gea-engineer": "GE Aerospace Engineer",
+    "gea-shopfloor": "GE Aerospace Shop Floor",
+    "ge-standard": "GE Legacy Standard",
+    "ge-engineer": "GE Legacy Engineer",
+    "ge-shopfloor-lockdown": "GE Legacy Shop Floor Lockdown",
+    "ge-shopfloor-mce": "GE Legacy Shop Floor MCE",
 }
 
 NS = "urn:schemas-microsoft-com:unattend"
@@ -561,6 +567,77 @@ def unattend_editor(image_type):
     )
 
 
+# ---------------------------------------------------------------------------
+# Routes — Clonezilla Backups
+# ---------------------------------------------------------------------------
+
+@app.route("/backups")
+def clonezilla_backups():
+    backups = []
+    if os.path.isdir(CLONEZILLA_SHARE):
+        for f in sorted(os.listdir(CLONEZILLA_SHARE)):
+            fpath = os.path.join(CLONEZILLA_SHARE, f)
+            if os.path.isfile(fpath) and f.lower().endswith(".zip"):
+                stat = os.stat(fpath)
+                backups.append({
+                    "filename": f,
+                    "machine": os.path.splitext(f)[0],
+                    "size": stat.st_size,
+                    "modified": stat.st_mtime,
+                })
+    return render_template(
+        "backups.html",
+        backups=backups,
+        image_types=IMAGE_TYPES,
+        friendly_names=FRIENDLY_NAMES,
+    )
+
+
+@app.route("/backups/upload", methods=["POST"])
+def clonezilla_upload():
+    if "backup_file" not in request.files:
+        flash("No file selected.", "danger")
+        return redirect(url_for("clonezilla_backups"))
+
+    f = request.files["backup_file"]
+    if not f.filename:
+        flash("No file selected.", "danger")
+        return redirect(url_for("clonezilla_backups"))
+
+    filename = secure_filename(f.filename)
+    if not filename.lower().endswith(".zip"):
+        flash("Only .zip files are accepted.", "danger")
+        return redirect(url_for("clonezilla_backups"))
+
+    os.makedirs(CLONEZILLA_SHARE, exist_ok=True)
+    dest = os.path.join(CLONEZILLA_SHARE, filename)
+    f.save(dest)
+    flash(f"Uploaded {filename} successfully.", "success")
+    return redirect(url_for("clonezilla_backups"))
+
+
+@app.route("/backups/download/<filename>")
+def clonezilla_download(filename):
+    filename = secure_filename(filename)
+    fpath = os.path.join(CLONEZILLA_SHARE, filename)
+    if not os.path.isfile(fpath):
+        flash(f"Backup not found: {filename}", "danger")
+        return redirect(url_for("clonezilla_backups"))
+    return send_file(fpath, as_attachment=True)
+
+
+@app.route("/backups/delete/<filename>", methods=["POST"])
+def clonezilla_delete(filename):
+    filename = secure_filename(filename)
+    fpath = os.path.join(CLONEZILLA_SHARE, filename)
+    if os.path.isfile(fpath):
+        os.remove(fpath)
+        flash(f"Deleted {filename}.", "success")
+    else:
+        flash(f"Backup not found: {filename}", "danger")
+    return redirect(url_for("clonezilla_backups"))
+
+
 # ---------------------------------------------------------------------------
 # Routes — API
 # ---------------------------------------------------------------------------
@@ -611,6 +688,17 @@ def api_save_unattend(image_type):
     return jsonify({"status": "ok", "path": xml_file})
 
 
+# ---------------------------------------------------------------------------
+# Template filters
+# ---------------------------------------------------------------------------
+
+@app.template_filter("timestamp_fmt")
+def timestamp_fmt(ts):
+    """Format a Unix timestamp to a human-readable date string."""
+    from datetime import datetime
+    return datetime.fromtimestamp(ts).strftime("%Y-%m-%d %H:%M")
+
+
 # ---------------------------------------------------------------------------
 # Context processor — make data available to all templates
 # ---------------------------------------------------------------------------