Deprecation warning

THIS REPOSITORY HAS BEEN DEPRECATED IN FAVOR FOR ORIGINAL wimaging

Provision Windows hosts with Foreman

Introduction

wimaging-ng a set of scripts to prepare WIM images and templates for Foreman to provision Windows hosts. Except for the boot process official Microsoft deployment tools are used; most notably dism.exe.

All relevant configuration files like unattend.xml are rendered by Foreman and downloaded at build time.

Features

• Linux style installation using http:// or ftp:// installation media
• No extra servers like WDS needed - all relevant settings can be configured in Foreman directly
• Official Mircosoft utilities are used for all relevant setup stages making it easy to add (future) operating systems
• Driver installation during build time
• Support for localization settings (like time zone, locale, UI language)
• Optional domain join including target OU
• Optional local user creation
• Support for Foreman's root password using Base64 encoding
• Optional software installation and user tasks at the end of the build (like installing puppet ect)

Prerequisites

Requirements for using wimaging-ng, they are not covered in this guide.

• A working Foreman version 1.8+ installation (obviously), capable of net booting clients along with a working DNS / DHCP infrastructure
• Currently, Safe Mode Render must be disabled in foreman
• A utility Windows VM or physical host to prepare the WIM images (Microsoft likes the term Technician Computer)
• A file server serving http and/or ftp protocols; fast machine recommended for production
• Installation media for each Windows version
• Driver files (.inf) you want to inject
• A VM / bare metal machine to test your setup (start with VMs ;)

Getting started with wimaging

The tasks can be broken down in two steps:

1. Configure wimaging and create WIM images

2. Configuring Foreman

---

A. Script Reference

Provision work flow

An outline of the process to better understand the tasks witch need to be done. Basically, there are three phases:

Phase I

1. Create a new host in Foreman.

Simple as that. For Bare Metal hosts Foreman discovery is recommended.

Phase II

1. PXE / wimboot boots customized boot.wim (winpe)
2. Winpe downloads the script foreman_url('script'); executes it:
3. Drive 0 is cleaned, partitioned and mounted using foreman partition table (simple diskpart script)
4. install.wim is downloaded via http/ftp and applied using dism.exe
5. unattend.xml (foreman_url('provision')) is download and applied using dism.exe
6. Drivers are download and added using dism.exe
7. Required tools are added to the new host (most prominently wget)
8. Optionally, download extra software (like puppet)
9. Optionally, domain join script (foreman_url('user_data'))
10. The finish script (foreman_url('finish')) is download and 'armed'
11. reboot to new OS

Phase III

1. Windows native finish tasks are done ('starting devices...')
2. The finish script gets called by SetupComplete.cmd
3. Set the time server; sync time
4. Optionally, the local administrator account is activated
5. Optionally, join domain
6. Optionally, execute extra scripts (eg, install puppet)
7. Securely cleanup (sensitive) scripts using SDelete.exe
8. Reboot the host; ready for further configuration by Puppet, SCCM ect.

Acknowledgments

wimaging-ng is a fork of wimaging. Many thanks to Dmitry Kireev, the original author. SDelete and other PStools by SysInternals are the work of Mark Russinovich.

License

wimaging-ng license

Other licenses:

• Original wimaging Dmitry Kireev
• SysInternals
• Gnu General Public License v3 for GNU wget and other utilities