ce604adcda
Single-site bay-stuck issue at WJ: GE Intune Report IP script filters
Get-NetIPAddress on StartsWith("10.") and posts everything matching
to the GE Tines webhook. Bays at WJ get the PXE LAN 10.9.100.x IP
captured and reported -> GE backend tags bays as on a non-corp 10.x
subnet -> dynamic group eligibility for SFLD policy never matches.
Other GE sites work because their PXE LANs aren't on 10.x at all.
Renumber PXE LAN to RFC1918 172.16.9.0/24 so the GE filter naturally
skips wired PXE addresses without any disable-NIC dance.
Server-side already in flight (netplan dual-bound, dnsmasq scope +
boot URL repointed, blancco preferences + grub.cfg + iPXE GetPxeScript
all sed'd to 172.16.9.1). This commit is the playbook / scripts /
docs side: 109 hits across 35 files sed'd in one shot.
After this lands + boot.wim is rebuilt + bays renumber off DHCP,
the 10.9.100.1 binding will be dropped from netplan as the final
cleanup step.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
39 lines
1.0 KiB
Bash
Executable File
39 lines
1.0 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# pxe-dhcp-hook.sh - dnsmasq dhcp-script hook.
|
|
#
|
|
# Runs every time a PXE client gets/changes/releases a DHCP lease on
|
|
# 172.16.9.0/24. Flushes conntrack entries and drops any lingering
|
|
# TCP sockets for that client IP. Prevents stale server-side state from
|
|
# causing "System error 53 - network path not found" when a WinPE client
|
|
# re-images the same machine without a clean SMB session teardown.
|
|
#
|
|
# dnsmasq calls this with argv:
|
|
# $1 = action (add | old | del)
|
|
# $2 = mac address
|
|
# $3 = client IP
|
|
# $4 = hostname (may be empty)
|
|
#
|
|
# Must exit quickly; dnsmasq waits for it. Logs to syslog via logger.
|
|
|
|
set +e
|
|
|
|
action="$1"
|
|
mac="$2"
|
|
ip="$3"
|
|
host="${4:-}"
|
|
|
|
[ -z "$ip" ] && exit 0
|
|
|
|
case "$action" in
|
|
add|del)
|
|
/usr/sbin/conntrack -D -s "$ip" >/dev/null 2>&1
|
|
/usr/sbin/conntrack -D -d "$ip" >/dev/null 2>&1
|
|
/usr/bin/ss -K "dst = $ip" >/dev/null 2>&1
|
|
/usr/bin/ss -K "src = $ip" >/dev/null 2>&1
|
|
logger -t pxe-dhcp-hook "cleared stale state for $action $ip ($mac${host:+ $host})"
|
|
;;
|
|
esac
|
|
|
|
exit 0
|