How to create a simple PXE server to serve a single version of ShredOS (UEFI mode and legacy boot) #148
Replies: 17 comments 18 replies
-
|
[DONE] |
Beta Was this translation helpful? Give feedback.
-
|
Booting ShredOS with secure boot enabled |
Beta Was this translation helpful? Give feedback.
-
|
I've added legacy support on my server using pxelinux.0, I've changed the ShredOS configuration in etc/dhcp/dhcpd.conf, added the file /srv/tftp/pxelinux.0, the folder /srv/tftp/isolinux/(containing 60 files) and the folder /srv/tftp/pxelinux.cfg and the file /srv/tftp/pxelinux.cfg. I need to update the notes above! and show the contents of the 'default' config file. In addition the importance of the relative position of the files and folders in relation to pxelinux.0 otherwise it won't find it's configuration, not to mention ownership and permissions. Ideally I should write an install script that would make the whole thing a lot easier to install. I would have thought somebody had already written such a script. |
Beta Was this translation helpful? Give feedback.
-
|
Regarding PXE booting using tftp-hsa on Debian/Ubuntu. Here's a thread that discussesTFTP Windowsize Option RFC 7440 with links to the patches and a discussion about updating tftp-hsa in Debian/Ubuntu. If anybody wants to apply the RFC 7440 patch to tftp-hsa, I'd be interested in seeing what the speed improvement would be. I'm sort of expecting a five fold increase in speed on a gigabit network. So instead of 4 Mbyes/sec you would see 20 Mbytes/sec so in terms of ShredOS booting over the network you would see it takes 6 seconds to boot rather than 33 seconds. I need to stay focused on completing the nwipe features so if anybody else who has a interest in PXE booting and has some time to try this out, please feel free, and update us with how much of a speed improvement it is. |
Beta Was this translation helpful? Give feedback.
-
|
Patches for tftp c7 https://git.centos.org/rpms/tftp/blob/c7/f/SOURCES |
Beta Was this translation helpful? Give feedback.
-
|
I've created a tftp repository tftp-pv applied most of the patches, just need to apply the last three. |
Beta Was this translation helpful? Give feedback.
-
|
Just a thought, but in theory it would be relatively easy to add a feature to ShredOS where you can turn it into a PXE server, serving up just ShredOS. So on a network of 100 PC's and assuming they are already networked together, all you would need is one USB stick with ShredOS, then you just PXE boot each PC in turn from a single PC that has the ShredOS USB flash drive. I would need to pull in the tftpd server software that I'm currently building based on the centos patches with RFC 7440 support as the boot time would need to be brought down as much as possible. A PXE server can be a pain to setup sometimes, so if all it took was adding the option "pxe_server=enable" to grub.cfg to turn ShredOS into an instant PXE server, that would pretty useful for some people I guess? it would add next to nothing in terms of increase in size to the ShredOS .img/.iso, so I can't really see any downsides. Does that sound like a useful feature to add to ShredOS at some point? |
Beta Was this translation helpful? Give feedback.
-
|
Seems like a niche feature that I really need right now for my cluster of old computers, I thought of using iventoy but this guide seems way better, i feel like a pxe switch would be a godsend when you really need it. Thanks btw you may have saved me many many USBs!!! |
Beta Was this translation helpful? Give feedback.
-
|
Many USB's ? I may have misunderstood, but you know you don't need to leave the USB stick plugged into the computer after the nwipe application has appeared. You only need one USB stick no matter how many PCs you have. So, for instance, say you have 10 PCs to wipe. Just create one ShredOS USB stick. Boot the first PC with ShredOS, as soon as nwipe appears, unplug the USB stick and plug into the second PC, boot it with the ShredOS stick, when nwipe appears, unplug the stick and move to the third PC. ShredOS isn't like a live Linux DVD , the entire system is loaded into memory. So once booted it doesn't need the USB stick until the wipe has finished. When you press return once all wipes have finished on a given PC that's when it will mount the USB stick to copy the Wipe certificates & logs onto the stick. Each wipe certificate has a unique name made up from the model & serial number of the drive being written. So you never really need more than one ShredOS USB stick. |
Beta Was this translation helpful? Give feedback.
-
|
No no you're spot-on!! Took me a while but I noticed my usb isn't actively getting used :P |
Beta Was this translation helpful? Give feedback.
-
|
Hello, I just followed your procedure to install shredos in PXE. The problem, a recent update this month (Windows) has modified the secure boot in the BIOS (I could not tell you what exactly, Microsoft indicates that the update has done something with the SBAT shim). When booting in PXE I have the following messages:
Server IP address is 192.168.1.85 Following the messages, the screen goes black while the PC button is on. After 5 minutes, the PC restarts under Windows. When I reset the secure boot in the BIOS, the PC boots on SHREDOS correctly (annoying to go to all the PCs to reset the secure boot). Do you have a solution? In addition, I would like to ask you if there is a way for the workstations to directly execute the formatting in DOD Short 3 passes without going through the interface (time saving). Thank you in advance for your help and advice. I don't speak Shakespeare's language well. |
Beta Was this translation helpful? Give feedback.
-
I don't see secure boot happening anytime soon unless I move ShredOS to a Ubuntu based OS. Secure boot could be added but it would mean you had to load the keys into the bios rather than it just seamlessly working like Ubuntu.
Yes, by editing the grub.cfg files as described in the readme.md by appending nwipe_options=" --method=dodshort" to the kernel command line.
Nor me, and I'm English. I've heard Jean Luc Picard can be quite good at it though. |
Beta Was this translation helpful? Give feedback.
-
|
Hello, |
Beta Was this translation helpful? Give feedback.
-
|
Hello, |
Beta Was this translation helpful? Give feedback.
-
|
Glad to hear it works well for you. Regarding nvme-cli. You would need to edit or replace the file nwipe_launcher depending on how much of the functionality you wanted to change. https://github.com/PartialVolume/shredos.x86_64?tab=readme-ov-file#boardshredosfsoverlayusrbinnwipe_launcher and then build ShredOS from source. There are no plans to add that sort of change to ShredOS as it was always meant to simply show case nwipe. However it does seem to have become more popular than I was expecting, so you never know. There's no easy way for a non programmer to do what you want, but if you are ok editing and writing bash then it should be possible. Don't forget though that nwipe generates the pdf reports if you remove it you won't get reports. |
Beta Was this translation helpful? Give feedback.
-
|
Thank you for your responsiveness, I will look into this. Have a good evening. |
Beta Was this translation helpful? Give feedback.
-
|
Putting this into record. Today I integrated ShredOS very simply into my existing iPXE menu system. I downloaded the latest .img file from the github releases in my use here ( The below worked for me where "shredos" is the "shredos" file found within the I took the kernel options directly from the grub.cfg file which shows up inside the same img file. ShredOS is very easy to boot with iPXE - it's just one big kernel file which presumably has everything it needs without the need for a separate initrd or any other resources. For all I know there's other parameters you could slip into the cmdline to influence the options and reports and who knows what all else. I had a basic need. |
Beta Was this translation helpful? Give feedback.
-
|
Hello, i'm actually work to do an solution for erase and get certificat of hundred and hundred disk. This is a project for end of school too, so i don't want to use the finish version, i have to create it! I have juste a question about the file EFI in /srv/tftp i don't get it so i have to create it? Or my configuration wasn't good? Thanks for taking the time to read! |
Beta Was this translation helpful? Give feedback.
-
|
Please continue the discussion of @titielgozo 's specific issue at #326 Thanks. |
Beta Was this translation helpful? Give feedback.
-
|
Netboot also has ShredOS integrated for a while now, so that might forfeit the need to set it all up from scratch for you. See https://github.com/netbootxyz/netboot.xyz |
Beta Was this translation helpful? Give feedback.
-
|
thanks for these instructions we have now manged to get ShredOS up and running on our PXE server and its working well. Are there any instructions on how we could have a central config file on our server containing the customer information that we can select when running shredos and the ability to pass the destruction certificates back to the server too once wiping has finished? |
Beta Was this translation helpful? Give feedback.
-
|
I think you want this: https://github.com/PartialVolume/shredos.x86_64?tab=readme-ov-file#transferring-nwipe-log-files-to-a-ftp-server-using-lftp I reckon you should just be able to set everything as the kernel options. |
Beta Was this translation helpful? Give feedback.
-
|
Good stuff we have managed to get this up and running well on our proxy PXE server so we can serve it to older machines and 32/64bit EFI machines. We have run into a small issue though. on older machines ShredOS will start, autonuke and then exit upon completion and upload the PDF certificates onto a location on our server without us having to provide any input. The problem we have is on the EFI machines. It will start, then autonuke but when its finished its asking us to press enter to generate the PDFs which it will then upload to our server. Is there a way to automate the generation of PDFs without having to press enter upon completion? Heres the configuration were using on IPXE for EFI: kernel /kernels/shredos console=tty3 loglevel=3 shredos_output="tftp:ipaddress:/kernels/osshred/pdfs::no password:d" nwipe_options="--autonuke --method=zero --verify=off --noblank --nousb " |
Beta Was this translation helpful? Give feedback.
-
|
I'd recommend submitting a new issue with your repro steps, that sounds like a possible bug. I'm not even a casual ShredOS user, only really paying attention to this issue wrt PXE so can't speak to much more than that. If you're using the exact same kernel cmdline and the only difference is EFI vs BIOS boot, sounds like a defect. |
Beta Was this translation helpful? Give feedback.
-
|
@paddymccdrc Try adding --nowait to the nwipe options, e.g. |
Beta Was this translation helpful? Give feedback.
-
|
I'm using The message I'm seeing is: Is this because I should use I'll appreciate any advice. |
Beta Was this translation helpful? Give feedback.
-
|
Are you sure your symptoms are specific to PXE booting, or is it a more general issue? |
Beta Was this translation helpful? Give feedback.
-
|
Have you turned RAID off in the bios for the drives?
…On Thu, 16 Oct 2025, 12:13 obol89, ***@***.***> wrote:
I'm using shredos file to boot it up with iPXE UEFI operated with Foreman.
I'm able to run ShredOS, it is loading, but it doesn't detect any drives
(Dell Precision 5820).
My iPXE menu command looks like that:
:shredos
kernel http://${next-server}:8000/httpboot/boot/shredos console=tty3 loglevel=3 nomodeset nwipe_options="--autonuke --method=zero --verify=off --noblank --nousb --autopoweroff"
sleep 2
boot || goto failed
goto start
The message I'm seeing is:
info: Storage devices not found. Nwipe should be run as root or sudo/su, i.e. sudo nwipe etc
Is this because I should use hdparm or nvme-cli instead?
I wasn't able to run ShredOS with GUI mode anyway. It always starts
automatically, even when using just:
:shredos
kernel http://${next-server}:8000/httpboot/boot/shredos console=tty3 loglevel=3
I'll appreciate any advice.
Thanks!
—
Reply to this email directly, view it on GitHub
<#148 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/BPTORYYIANS2BLSEDCKWVHL3X54V3AVCNFSM6AAAAAAZR4NX36VHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTINRZG43DSOA>
.
You are receiving this because you were mentioned.Message ID:
<PartialVolume/shredos.x86_64/repo-discussions/148/comments/14697698@
github.com>
|
Beta Was this translation helpful? Give feedback.
-
|
Yeah, I've double checked. We have AHCI turned on. RAID is off. |
Beta Was this translation helpful? Give feedback.
-
|
From within ShredOS can you ALT F2 to a terminal and type How many drives on the system, what make and model? I assume if a single drive it been verified as functional by some other means? I.e no hardware faults? While you are in the command line, does 'fdisk -l` report any drives? I'm guessing probably not but it's worth doing, just to confirm the problem is low level bios, driver or hardware faults and not nwipe specifically. |
Beta Was this translation helpful? Give feedback.
-
|
Hey, Sure, thank you for the questions. |
Beta Was this translation helpful? Give feedback.
-
|
To prevent noise on this issue which is specific to PXE booting I recommend moving the driver discussion/hardware troubleshooting to a separate issue. |
Beta Was this translation helpful? Give feedback.
-
|
Discussion regarding the Dell Precision 5820 moved to #379, please continue comments regarding this systems possible driver issue over at #379 |
Beta Was this translation helpful? Give feedback.
-
|
Is there a way to automate the erasure of SSDs similar to how you can use nwipe_options="--autonuke --method=dod --verify=off --noblank --nousb" to automate the erasure of HDDs or is that still being worked on? thanks |
Beta Was this translation helpful? Give feedback.
-
|
SSD erasure in nwipe is currently being worked on and will be available in the next nwipe release. Once that's released you will be able to automate/autonuke SSD wipes, pretty much in a similar way you do for current wipes. However, I think you may possibly mean can you use hdparm or nvme in an autonuke way with the current setup. The quick answer is no. However, it could be yes, depending on how much work you want to put into editing the nwipe launcher bash script. In theory you could make a custom build where you remove nwipe from the launcher and call your own script that runs hdparm etc. |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
Prerequisite
Overview
The purpose of this procedure is to setup a very simple PXE server that allows client hosts on the network to boot ShredOS in UEFI mode and legacy boot modes.
For those not familiar with PXE that means ShredOS is hosted on the PXE server and the client PCs on the network pull ShredOS across the network and load it when PXE booting is selected on the client PCs. tftp-hpa as provided on Ubuntu tends to be slow, especially the non patched version so don't expect the bzImage file to load faster than about 1MByte/s
Redhat have applied a patch to their version of tftpd to improve the speed, but unfortunately I don't think it has been applied upstream. So if you are using Ubuntu you may find your boot speed is limited to 4MB/s or less. The only alternative is to either rebuild tftpd yourself applying redhats patches or just use redhat as your PXE server. I assume Fedora applies these patches too, but I don't know that for certain. Here's a thread that discussesTFTP Windowsize Option RFC 7440 with links to the patches and a discussion about updating tftp-hsa in Debian/Ubuntu.
The following configuration does not provide a boot menu where you can select different distros or multiple different versions of ShredOS. It boots straight into ShredOS.
I will create a separate discussion showing a similar procedure that uses syslinux or more likely grub2, as I prefer to retain the progress info during the kernel being loaded. Which ever method I go for it will provide a menu system and allows the user to select different distros or versions of ShredOS and boot in both UEFI & legacy.
Software Installation
Locate a suitable server PC, preferably with a Gigabit network connection to maximise boot speed. A raspberry PI4 would meet this spec.
Install ubuntu or a debian based OS.
First, setup the OS with a static IP address, it's assumed that once you have installed ubuntu, you disconnect the internet routers running DHCP servers on the network. This is done just to keep things as simple as possible for the purposes of this procedure.
Then, install the tftp and dhcpd software as follows:
/srv/tftpexists. It should do as it would have been created when you installed tftpd-hpa, however, if it doesn't exist, then create it as follows:Configure the tftp-hpa server software
Examine the contents of /etc/default/tftpd-hpa using
moreand make alterations so the file looks as follows:, note, the TFTP_DIRECTORY="/srv/tftp" path is the root where the contents of the ShredOS USB stick will get copied to later in the procedure. Make sure that path is as shown below. TFTP_ADDRESS=":69" is the network port address, if you have a firewall, port 69 needs to be open.Open port 69 in the firewall
Start the tftpd server
Setup configuration of the dhcp server
Comment out the following options:
hardware ethernet b8:ca:3a:84:eo:b9;Bind the dhcp server to a network port
alternatively use the command ip -a to view the network interfaces.
Copy the entire contents of a ShredOS USB stick into /src/tftp/, change /dev/sdx to whatever the correct drive name is for the USB stick. Alternatively use the desktop to mount and copy the USB stick.
Restart the tftp server
Start the dhcp server
That's it, check your client PC bios supports PXE booting and that PXE booting is enabled. Power cycle the PC you want to network boot, press whatever the shortcut keys is to bring up the boot menu. Select PXE V4 boot and you should see some text appear and a couple of seconds later the ShredOS progress info as the ShredOS kernel is loaded across the network. Then nwipe should appear. In the video below the text mentions NBP, just in case you were were wondering, it's stands for Network Boot Program which is EFI/BOOT/bootx64.efi in our case.
VID_20230623_195216.2.1.mp4
/etc/dhcp/dhcpd.conf in full
Contents of /srv/tftp/..
Contents of /srv/tftp/pxelinux.cfg/default
Beta Was this translation helpful? Give feedback.
All reactions