04db6d6605
Everything West Jefferson specific moved out to a separate repo (pxe-site-wj): NTLARS/UDC/heat-treat backups keyed by WJ machine numbers, CMM and Wax/Trace bay lists, WJ OpenText profiles, site-config.json, the WJ preinstall list, and the WJ shopfloor PC types (Collections, NoCollections, Common, Keyence, CMM, Genspect, HeatTreat, Wax/Trace, Display, PartMarker) with GE-Enforce, machine numbers and the desktop layout. The part-marker bench tools moved to their own repo. Dead scripts removed: build-proxmox-iso, deploy-bios, sync_hardware_models, mirror-from-gold, pull-bios, startnet-template.cmd. Shopfloor is one generic type, gea-shopfloor-standard, with today's timing: - PPKG at first logon (unattend Order 10, unchanged). - Install-AppList.ps1 runs C:\PreInstall\preinstall.json during setup. - A new SYSTEM task, GE Shopfloor Post-PPKG, runs postppkg.json once after the post-PPKG reboot. It also clears AutoLogonCount after the ShopFloor handover (the Users-level monitor can be denied that HKLM write) and removes the Intune Sync task when done. - Both lists ship empty. A site adds entries and installers. - WinPE choice 3 goes straight to the PPKG menu. Staging, fetch and heal carry only the generic payload. The webapp's shopfloor sub-menu editor is gone, and the imaging tiles name the new stages. - The playbook deploys the empty lists only if missing. It now deploys the PowerShell 7 MSI the shopfloor unattend installs, which it never did before. Blancco site settings move into the webapp (Updates > Blancco releases): business location, licensing Wi-Fi SSID and password. They are rendered into the served preferences.xml and applied to every staged release, and are seeded from site-vars (site_name, blancco_wifi_ssid, blancco_wifi_password) only while none exist. The repo XML carries no site values; the plaintext Wi-Fi password is gone from it. New site_name and site_timezone settings: report and evidence-pack site name, server clock and webapp time zone. No more West Jefferson defaults in webapp/config.py or the dashboard title. Sync-BPRT.ps1 gets the server address filled in at download instead of WJ's GE address. USB on Windows: - scripts/Build-PxeUsb.ps1 runs the same checks as build-usb.sh. It writes one FAT32 CIDATA partition (ISO files plus patched grub.cfg plus payload) with diskpart and reads every file back by SHA-256. - Tested with Windows PowerShell 5.1 in the win11 VM, and the layout installs and first-boots in the pxetest VM. - scripts/stage-usb-share.sh stages the build folder on a share. - site-content/ is optional for both builders. KB docs/kb/How_To_Deploy_PXE_Server_New_Site.html: new-site deployment, Windows only, with a site-vars.yml guide. Checks: webapp tests pass (5 suites); the unattend lint and playbook syntax checks pass; every .ps1 parses; there are no WJ hosts, IPs, names or PC types in playbook/, webapp/, scripts/ or autoinstall/.
27 lines
1.3 KiB
YAML
27 lines
1.3 KiB
YAML
# Copy to site-vars.yml in this folder (C:\pxe-usb) and keep only the lines you need.
|
|
# Build-PxeUsb.cmd puts site-vars.yml on the stick. Full list of settings:
|
|
# playbook\site-vars.example.yml
|
|
|
|
# Name on Blancco erasure reports and the monthly evidence packs.
|
|
# Not set: "Unnamed site". Letters, digits, spaces and . , - ( ) & / only.
|
|
site_name: "Example Site"
|
|
|
|
# Time zone of the server clock and the web interface (default
|
|
# America/New_York), e.g. America/Chicago, America/Los_Angeles.
|
|
site_timezone: "America/New_York"
|
|
|
|
# Who may reach the web interface (9009) and SSH from the GE network.
|
|
# Not set = all of GE (the setup warns). To restrict it, remove the #
|
|
# and put your admin desks' subnet(s), e.g. ["10.12.34.0/24"]:
|
|
# corp_admin_cidrs: ["<admin subnet>/24"]
|
|
|
|
# Password of the Clonezilla backup share (8-64 characters from
|
|
# A-Z a-z 0-9 . _ ~ -). The PXE boot menu carries it: an imaging-LAN
|
|
# secret, not a real one. Default: clonezilla-backup
|
|
clonezilla_smb_password: "change-me-per-site"
|
|
|
|
# Optional: pin the NICs by MAC instead of picking the imaging port at
|
|
# install (then both cables may be plugged in from the start).
|
|
# pxe_nic_mac: "aa:bb:cc:dd:ee:01" # port to the imaging switch
|
|
# corp_nic_mac: "aa:bb:cc:dd:ee:02" # port to the GE network
|