ce604adcda
Single-site bay-stuck issue at WJ: GE Intune Report IP script filters
Get-NetIPAddress on StartsWith("10.") and posts everything matching
to the GE Tines webhook. Bays at WJ get the PXE LAN 10.9.100.x IP
captured and reported -> GE backend tags bays as on a non-corp 10.x
subnet -> dynamic group eligibility for SFLD policy never matches.
Other GE sites work because their PXE LANs aren't on 10.x at all.
Renumber PXE LAN to RFC1918 172.16.9.0/24 so the GE filter naturally
skips wired PXE addresses without any disable-NIC dance.
Server-side already in flight (netplan dual-bound, dnsmasq scope +
boot URL repointed, blancco preferences + grub.cfg + iPXE GetPxeScript
all sed'd to 172.16.9.1). This commit is the playbook / scripts /
docs side: 109 hits across 35 files sed'd in one shot.
After this lands + boot.wim is rebuilt + bays renumber off DHCP,
the 10.9.100.1 binding will be dropped from netplan as the final
cleanup step.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
22 lines
643 B
Bash
Executable File
22 lines
643 B
Bash
Executable File
#!/bin/bash
|
|
# pull-bios.sh - Pull BIOS update binaries from prod PXE server to bios-staging/
|
|
# Run this with the USB NIC plugged in, before building the USB.
|
|
|
|
set -e
|
|
|
|
REPO_ROOT="$(cd "$(dirname "$0")"/.. && pwd)"
|
|
DEST="$REPO_ROOT/bios-staging"
|
|
PXE_SERVER="172.16.9.1"
|
|
PXE_USER="pxe"
|
|
PXE_PASS="pxe"
|
|
|
|
mkdir -p "$DEST"
|
|
|
|
echo "Pulling BIOS binaries from $PXE_SERVER..."
|
|
sshpass -p "$PXE_PASS" scp -o StrictHostKeyChecking=no -o ConnectTimeout=10 \
|
|
"$PXE_USER@$PXE_SERVER:/srv/samba/enrollment/BIOS/*.exe" "$DEST/"
|
|
|
|
COUNT=$(find "$DEST" -name '*.exe' | wc -l)
|
|
SIZE=$(du -sh "$DEST" | cut -f1)
|
|
echo "Done: $COUNT files ($SIZE) in bios-staging/"
|