2ac88a6c1b
Two changes in one: 1. grub-blancco.cfg reverts to booting vmlinuz-ubuntu + kexec-initrd.img (the switch_root path from commitdd2fec5).b7cd097had switched back to Blancco's native vmlinuz-bde-linux via TFTP for "hardware compat," but that turned out to regress on modern Dell fleet hardware - Blancco's packaged kernel lacks igc (Intel I225/I226 on Latitude 5330/5440, Pro-series, newer OptiPlex). Symptom was successful TFTP fetch of kernel+initrd, then silence at the Blancco UI ("no network card found") because the rootfs HTTP fetch has no NIC to use. The switch_root initramfs built by the Ansible playbook now carries igc, bnxt_en, r8169, atlantic, and other modern NIC modules, so the Ubuntu kernel path reliably finds a working NIC across the whole fleet before HTTP-fetching airootfs.sfs and kexec'ing into Blancco. Native kernel still runs under Blancco's control after kexec - only the *loader* kernel changes. The grubx64.efi binary (embedding this config via grub-mkstandalone) was rebuilt and pushed to /var/www/html/blancco/ on both PXE servers (.1 and .2). Old binary kept as grubx64.efi.bak-<timestamp> on each. 2. .gitignore: negate boot-tools/blancco/grub-blancco.cfg so this one file is version-controlled. boot-tools/ is otherwise local cache artifacts (kernel/initrd/sfs extracted from Blancco ISO, grubx64.efi built output). grub-blancco.cfg is source-of-truth and must not be re-derived; any new PXE server build needs the exact same content or the Blancco boot chain regresses. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
83 lines
1.5 KiB
Plaintext
83 lines
1.5 KiB
Plaintext
# Large binary files — download/build these, don't commit them
|
|
*.deb
|
|
*.zip
|
|
*.wim
|
|
*.iso
|
|
*.efi
|
|
*.sdi
|
|
|
|
# OneDrive download artifacts
|
|
OneDrive_*/
|
|
|
|
# Error folders from OneDrive download
|
|
__*/
|
|
___*.txt
|
|
|
|
# Original OneDrive folder structure (reorganized into autoinstall/ and playbook/)
|
|
WestJeff*/
|
|
|
|
# Duplicate at root (canonical copy in unattend/)
|
|
/FlatUnattendW10.xml
|
|
|
|
# Offline packages (built by download-packages.sh)
|
|
offline-packages/
|
|
|
|
# Boot tool binaries (built by prepare-boot-tools.sh). Everything
|
|
# under boot-tools/ is local artifact cache - EXCEPT grub-blancco.cfg,
|
|
# which is the source-of-truth config embedded into Blancco's
|
|
# grubx64.efi at build time and must be version-controlled.
|
|
boot-tools/*
|
|
!boot-tools/blancco/
|
|
boot-tools/blancco/*
|
|
!boot-tools/blancco/grub-blancco.cfg
|
|
|
|
# WinPE boot files (wimboot, boot.wim, BCD, ipxe.efi, etc.)
|
|
boot-files/
|
|
|
|
# Python wheels for offline install (built by download-packages.sh)
|
|
pip-wheels/
|
|
|
|
# Deployment images (imported via webapp or USB)
|
|
geastandardpbr/
|
|
|
|
# OS files
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# Python
|
|
__pycache__/
|
|
*.pyc
|
|
*.pyo
|
|
venv/
|
|
|
|
# MOK Secure Boot signing keys (contains private key)
|
|
mok-keys/
|
|
|
|
# Secrets
|
|
secrets.md
|
|
**/eMxInfo*.txt
|
|
*.ppkg
|
|
enrollment/
|
|
drivers-staging/
|
|
bios-staging/
|
|
.claude/
|
|
|
|
# Secrets and credentials (defensive)
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
!.env.*.example
|
|
*.pem
|
|
*.key
|
|
id_rsa
|
|
id_rsa.*
|
|
*.ppk
|
|
*.p12
|
|
*.pfx
|
|
secrets.json
|
|
secrets.yaml
|
|
secrets.yml
|
|
*_secret
|
|
*_secrets
|
|
credentials.json
|