Direct boot eXR ISO by iPXE
1 4 月, 2020,由 frank撰写
The article should applies to all eXR platform, include ASR9k, Cisco8000, NCS5500, NCS6k. The output information maybe different by diff platform, but the iPXE method should same. Btw in eXR, if you want to recovery password, will require iPXE.
Enable HTTP Service at linux
[root@nso exr]# python -m SimpleHTTPServer Serving HTTP on 0.0.0.0 port 8000 ...
Reload NCS5500
RP/0/RP0/CPU0:CORE-NCS5516-B#show ins ac
Mon Sep 23 16:41:53.682 CST
Node 0/RP0/CPU0 [RP]
Boot Partition: xr_lv0
Active Packages: 1
ncs5500-xr-6.1.4 version=6.1.4 [Boot image]
Node 0/0/CPU0 [LC]
Boot Partition: xr_lv0
Active Packages: 1
ncs5500-xr-6.1.4 version=6.1.4 [Boot image]
Node 0/2/CPU0 [LC]
Boot Partition: xr_lv0
Active Packages: 1
ncs5500-xr-6.1.4 version=6.1.4 [Boot image]
RP/0/RP0/CPU0:CORE-NCS5516-B#show inst inac
Mon Sep 23 16:42:04.346 CST
No inactive package(s) in software repository
RP/0/RP0/CPU0:CORE-NCS5516-B#admin
Mon Sep 23 16:42:09.029 CST
cisco connected from 127.0.0.1 using console on xr-vm_node0_RP0_CPU0
sysadmin-vm:0_RP0#
sysadmin-vm:0_RP0# hw-module location all reload
Mon Sep 23 08:42:20.454 UTC
Reload hardware module ? [no,yes] yes
0/RP0/ADMIN0:Sep 23 16:42:22.542 : shelf_mgr[3129]: %INFRA-SHELF_MGR-6-USER_ACTION : User cisco(127.0.0.1) requested CLI action 'graceful card reload' for location all
result Card graceful reload request on all succeeded.
0/RP0/ADMIN0:Sep 23 16:42:22.544 : fsdbagg[4038]: %FABRIC-FSDB_AGG-5-PLANE_UPDOWN : [4038] : Plane 0 state changed to DOWN
0/RP0/ADMIN0:Sep 23 16:42:22.545 : fsdbagg[4038]: %FABRIC-FSDB_AGG-5-PLANE_UPDOWN : [4038] : Plane 2 state changed to DOWN
0/RP0/ADMIN0:Sep 23 16:42:22.546 : fsdbagg[4038]: %FABRIC-FSDB_AGG-5-PLANE_UPDOWN : [4038] : Plane 1 state changed to DOWN
0/RP0/ADMIN0:Sep 23 16:42:22.546 : shelf_mgr[3129]: %INFRA-SHELF_MGR-4-CARD_RELOAD_FAILED : Reload failed on location 0/1, reason 'Graceful reload not allowed in current HW/SW state of card, Try using force option'
0/RP0/ADMIN0:Sep 23 16:42:22.547 : fsdbagg[4038]: %FABRIC-FSDB_AGG-5-PLANE_UPDOWN : [4038] : Plane 4 state changed to DOWN
0/FC4/ADMIN0:Sep 23 16:42:22.372 : cm[2113]: %ROUTING-TOPO-5-PROCESS_UPDATE : Got process update: Card shutdown.
0/RP0/ADMIN0:Sep 23 16:42:22.549 : fsdbagg[4038]: %FABRIC-FSDB_AGG-5-PLANE_UPDOWN : [4038] : Plane 3 state changed to DOWN
0/FC1/ADMIN0:Sep 23 16:42:22.363 : cm[2102]: %ROUTING-TOPO-5-PROCESS_UPDATE : Got process update: Card shutdown.
0/2/ADMIN0:Sep 23 16:42:22.550 : cm[2998]: %ROUTING-TOPO-5-PROCESS_UPDATE : Got process update: Card shutdown.
0/RP0/ADMIN0:Sep 23 16:42:22.550 : fsdbagg[4038]: %FABRIC-FSDB_AGG-5-PLANE_UPDOWN : [4038] : Plane 5 state changed to DOWN
0/FC5/ADMIN0:Sep 23 16:42:22.363 : cm[2092]: %ROUTING-TOPO-5-PROCESS_UPDATE : Got process update: Card shutdown.
0/0/ADMIN0:Sep 23 16:42:22.551 : cm[2998]: %ROUTING-TOPO-5-PROCESS_UPDATE : Got process update: Card shutdown.
0/FC0/ADMIN0:Sep 23 16:42:22.378 : cm[2106]: %ROUTING-TOPO-5-PROCESS_UPDATE : Got process update: Card shutdown.
0/FC3/ADMIN0:Sep 23 16:42:22.370 : cm[2095]: %ROUTING-TOPO-5-PROCESS_UPDATE : Got process update: Card shutdown.
0/SC0/ADMIN0:Sep 23 16:42:22.366 : cm[2090]: %ROUTING-TOPO-5-PROCESS_UPDATE : Got process update: Card shutdown.
0/FC2/ADMIN0:Sep 23 16:42:22.377 : cm[2117]: %ROUTING-TOPO-5-PROCESS_UPDATE : Got process update: Card shutdown.
0/SC1/ADMIN0:Sep 23 16:42:22.401 : cm[2113]: %ROUTING-TOPO-5-PROCESS_UPDATE : Got process update: Card shutdown.
0/2/ADMIN0:Sep 23 16:42:29.258 : esd[3015]: %INFRA-ESD-6-PORT_STATE_CHANGE_LINK_DOWN : The physical link state of the control ethernet switch port 8 has changed. New Link state DOWN, Admin state: UP
0/0/ADMIN0:Sep 23 16:42:29.895 : esd[3012]: %INFRA-ESD-6-PORT_STATE_CHANGE_LINK_DOWN : The physical link state of the control ethernet switch port 9 has changed. New Link state DOWN, Admin state: UP
0/2/ADMIN0:Sep 23 16:42:33.036 : vm_manager[3082]: %INFRA-VM_MANAGER-4-INFO : Info: vm_manager brought down VM default-sdr--1
0/RP0/ADMIN0:Sep 23 16:42:34.547 : cm[2980]: %ROUTING-TOPO-5-PROCESS_UPDATE : Got process update: Card shutdown.
0/RP0/ADMIN0:Sep 23 16:42:35.554 : shelf_mgr[3129]: %INFRA-SHELF_MGR-6-CARD_SW_OPERATIONAL : Card: 0/0 software state going to Operational
0/RP0/ADMIN0:Sep 23 16:42:35.559 : shelf_mgr[3129]: %INFRA-SHELF_MGR-6-CARD_SW_OPERATIONAL : Card: 0/2 software state going to Operational
0/RP0/ADMIN0:Sep 23 16:42:35.573 : shelf_mgr[3129]: %INFRA-SHELF_MGR-6-CARD_SW_OPERATIONAL : Card: 0/SC1 software state going to Operational
0/RP0/ADMIN0:Sep 23 16:42:35.573 : shelf_mgr[3129]: %INFRA-SHELF_MGR-6-CARD_SW_OPERATIONAL : Card: 0/SC0 software state going to Operational
0/RP0/ADMIN0:Sep 23 16:42:35.574 : shelf_mgr[3129]: %INFRA-SHELF_MGR-6-CARD_SW_OPERATIONAL : Card: 0/FC2 software state going to Operational
0/RP0/ADMIN0:Sep 23 16:42:35.575 : shelf_mgr[3129]: %INFRA-SHELF_MGR-6-CARD_SW_OPERATIONAL : Card: 0/FC3 software state going to Operational
0/RP0/ADMIN0:Sep 23 16:42:35.575 : shelf_mgr[3129]: %INFRA-SHELF_MGR-6-CARD_SW_OPERATIONAL : Card: 0/FC5 software state going to Operational
0/RP0/ADMIN0:Sep 23 16:42:35.575 : shelf_mgr[3129]: %INFRA-SHELF_MGR-6-CARD_SW_OPERATIONAL : Card: 0/FC0 software state going to Operational
0/RP0/ADMIN0:Sep 23 16:42:35.576 : shelf_mgr[3129]: %INFRA-SHELF_MGR-6-CARD_SW_OPERATIONAL : Card: 0/FC1 software state going to Operational
0/RP0/ADMIN0:Sep 23 16:42:35.576 : shelf_mgr[3129]: %INFRA-SHELF_MGR-6-CARD_SW_OPERATIONAL : Card: 0/FC4 software state going to Operational
0/RP0/ADMIN0:Sep 23 16:42:35.895 : esdma[4043]: %PKT_INFRA-FM-4-FAULT_MINOR : ALARM_MINOR :ESDMA lost connectivity with ESD :DECLARE :0/SC1/EPC_SW:
0/0/ADMIN0:Sep 23 16:42:36.714 : vm_manager[3077]: %INFRA-VM_MANAGER-4-INFO : Info: vm_manager brought down VM default-sdr--1
Preparing system for backup. This may take a few minutes especially for large configurations.
Status report: node0_RP0_CPU0: START TO BACKUP
0/RP0/ADMIN0:Sep 23 16:42:42.551 : shelf_mgr[3129]: %INFRA-SHELF_MGR-4-CARD_RELOAD : Reloading card 0/0
0/RP0/ADMIN0:Sep 23 16:42:42.552 : shelf_mgr[3129]: %INFRA-SHELF_MGR-4-CARD_RELOAD : Reloading card 0/1
0/RP0/ADMIN0:Sep 23 16:42:42.552 : shelf_mgr[3129]: %INFRA-SHELF_MGR-4-CARD_RELOAD : Reloading card 0/2
0/RP0/ADMIN0:Sep 23 16:42:42.552 : shelf_mgr[3129]: %INFRA-SHELF_MGR-4-CARD_RELOAD : Reloading card 0/FC0
0/RP0/ADMIN0:Sep 23 16:42:42.552 : shelf_mgr[3129]: %INFRA-SHELF_MGR-4-CARD_RELOAD : Reloading card 0/FC1
0/RP0/ADMIN0:Sep 23 16:42:42.553 : shelf_mgr[3129]: %INFRA-SHELF_MGR-4-CARD_RELOAD : Reloading card 0/FC2
0/RP0/ADMIN0:Sep 23 16:42:42.553 : shelf_mgr[3129]: %INFRA-SHELF_MGR-4-CARD_RELOAD : Reloading card 0/FC3
Login to Boot manager
BIOS Ver: 09.23 Date: 04/17/2016 16:45:46
Press <DEL> or <ESC> to enter boot manager.
Entering Cisco boot manager...
Rebooting... [ 3157.647833] obfl_rb_notify_cb: reboot notifier called
[ 3157.708863] writing reset reason 1, (null)
[ 3159.204568] Requesting remote cold reset on 0/0 ...
[ 3159.264338] Requesting remote cold reset on 0/1 ...Requesting remote cold reset on 0/2 ...
[ 3159.374220] Requesting remote cold reset on 0/FC0 ...
[ 3159.437491] Requesting remote cold reset on 0/FC1 ...[ 3159.504091] Requesting remote cold reset on 0/FC2 ...
[ 3159.567363] Requesting remote cold reset on 0/FC3 ...Requesting remote cold reset on 0/FC4 ...
[ 3159.680585] Requesting remote cold reset on 0/FC5 ...Requesting remote cold reset on 0/SC0 ...
[ 3159.793808] Requesting remote cold reset on 0/SC1 ...[ 3159.860409] Requesting local cold reset on 0/RP0 ...
[ 3162.762049] Succesfully wrote mtdoops at 393216 size 32768
[ 3162.828494] pstore: Successfully logged oops info. Size 32740
?
Booting CISCO Supervisor/RP Module
Memory Initialization completed
Relocated to memory
Booting from Primary BIOS
BIOS secure boot verification results: PASS
IOFPGA Information
Booted from : Primary FPGA
Revison : 0x9
ID : 0x1423741 A9
Date : 0x20160406
Reset Cause Register: 0x80000000
Boot Ctrl Register : 0x60ff
EventLog Register1 : 0x2000000
EventLog Register2 : 0xfbc37fff
Cisco Boot Options
??????????????????????????????????????????????????????????????????????????????Ŀ
? Boot Override ? ?
? UEFI: Micron_M600_MTFDDAT256MBF ? ?
? UEFI: Built-in EFI IPXE iPXE initialising devices...ok ?
? UEFI: Built-in EFI Grub ? ?
? UEFI: Built-in EFI Shell ? ?
? ? ?
iPXE 1.0.0+ (136d) -- Open Source Network Boot Firmware -- http://ipxe.org ?
Features: DNS HTTP TFTP VLAN EFI ISO9660 NBI Menu ? ?
BootMode : 0 ? ?
Default Boot options, internal first and then to external network?????????????ij
Trying first ethernet channel for image download... ?><: Select Screen ?
net0: 00:00:01:1b:00:00 using i350-b on PCI01:00.0 (open)elect Item ?
[Link:up, TX:0 TXE:0 RX:0 RXE:0] ?Enter: Select ?
Configuring (net0 00:00:01:1b:00:00).................. Error 0x040ee186 (http://ipxe.org/040ee186)
Failed to talk to master RP over first ethernet channel1: General Help ?
Trying second ethernet channel for image download... ?ESC: Exit ?
net1: 00:00:01:1b:00:00 using i350-b on PCI01:00.1 (open) ?
[Link:up, TX:0 TXE:0 RX:0 RXE:0] ? ?
Configuring (net1 00:00:01:1b:00:00).................. Error 0x040ee186 (http://ipxe.org/040ee186)
Failed to talk to master RP over second ethernet channel????????????????????????
net6: 08:96:ad:9b:17:f2 using dh8900cc on PCI02:00.3 (open)
[Link:up, TX:0 TXE:0 RX:0 RXE:0] AB
Configuring (net6 08:96:ad:9b:17:f2).................. ok
net0: fe80::2a0:c9ff:fe00:0/64 (inaccessible)
net1: fe80::2a0:c9ff:fe00:1/64 (inaccessible)
net2: fe80::2a0:c9ff:fe00:2/64 (inaccessible)
net3: fe80::2a0:c9ff:fe00:3/64 (inaccessible)
net4: fe80::200:ff:fe00:4/64 (inaccessible)
net5: fe80::200:ff:fe00:5/64 (inaccessible)
net6: 10.75.49.17/255.255.255.0 gw 10.75.49.1 <<<
net6: fe80::a96:adff:fe9b:17f2/64
Filename: http://10.75.49.254/IOX614/ncs5500-mini-x-6.1.4.iso
http://10.75.49.254/IOX614/ncs5500-mini-x-6.1.4.iso... Operation canceled (http://ipxe.org/0b072095)
BootMode : 0
iPXE>
Config IPXE in boot manager
As follow information, int6 should mgmt port.
Check Port Info
iPXE> ifstat net0: 00:00:01:1b:00:00 using i350-b on PCI01:00.0 (closed) [Link:up, TX:9 TXE:0 RX:23 RXE:21] [RXE: 5 x "Operation not supported (http://ipxe.org/3c046083)"] [RXE: 16 x "The socket is not connected (http://ipxe.org/380f6093)"] net1: 00:00:01:1b:00:00 using i350-b on PCI01:00.1 (closed) [Link:up, TX:9 TXE:0 RX:35 RXE:32] [RXE: 16 x "The socket is not connected (http://ipxe.org/380f6093)"] [RXE: 16 x "Operation not supported (http://ipxe.org/3c046083)"] net2: 00:a0:c9:00:00:02 using i350-b on PCI01:00.2 (closed) [Link:down, TX:0 TXE:0 RX:0 RXE:0] [Link status: Down (http://ipxe.org/38086193)] net3: 00:a0:c9:00:00:03 using i350-b on PCI01:00.3 (closed) [Link:down, TX:0 TXE:0 RX:0 RXE:0] [Link status: Down (http://ipxe.org/38086193)] net4: 00:00:00:00:00:04 using dh8900cc on PCI02:00.1 (closed) [Link:down, TX:0 TXE:0 RX:0 RXE:0] [Link status: Down (http://ipxe.org/38086193)] net5: 00:00:00:00:00:05 using dh8900cc on PCI02:00.2 (closed) [Link:down, TX:0 TXE:0 RX:0 RXE:0] [Link status: Down (http://ipxe.org/38086193)] net6: 08:96:ad:9b:17:f2 using dh8900cc on PCI02:00.3 (open) <<< [Link:up, TX:235940 TXE:0 RX:748185 RXE:26] <<< [RXE: 7 x "Error 0x440e6083 (http://ipxe.org/440e6083)"] [RXE: 19 x "Operation not supported (http://ipxe.org/3c086083)"] iPXE>
Follow is ifstat output info from Cisco 8000：
iPXE> ifstat net0: 10:b3:d6:ff:fc:68 using i210-b on PCIO2:00.0 (closed) <<< this is mgmt port, require to open, as follow part [Link:up, TX:50 TXE:0 RX: RXE:4] [RXE: 4 x "The socket is not connected (http: //ipxe. org/380f6093)”] net1: 00:a0:c9:00:00:00 using x552 on PCI04:00.0 (closed) [Link:up, TX:20 TXE RX:22 RXE:22] [RXE: 22 x "operation not supported (http: //ipxe. org/3c086083)"] net2: 34: 12: 78: 56: 01: 00 using x552 on PCI04: 00. 1 (open) [Link:up, TX:20 TXE:0 RX:0 RXE:0] iPXE>
Manual Set Port
If you not config MGMT port in XR LXC, there are no config in ipxe, so you must manual set data, by follow step:
iPXE> set net6/ip 10.75.49.17 iPXE> set net6/netmask 255.255.255.0 iPXE> set net6/gateway 10.75.49.1 iPXE> ifopen net6 <<< default port maybe down or closed, so require to manual open the port iPXE> ping 10.75.49.1 0 bytes from : seq=1: Connection timed out (http://ipxe.org/4c1b2092) 64 bytes from 10.75.49.1: seq=2 64 bytes from 10.75.49.1: seq=3 64 bytes from 10.75.49.1: seq=4 64 bytes from 10.75.49.1: seq=5 64 bytes from 10.75.49.1: seq=6 Finished: Operation canceled (http://ipxe.org/0b072095)
Boot ISO Image by iPXE
Certainly, you can boot from any service/media
iPXE> boot http://10.75.37.87:8000/ncs5500-goldenk9-x-7.0.2.09I-v1.iso
http://10.75.37.87:8000/ncs5500-goldenk9-x-7.0.2.09I-v1.iso... ok
Image verified sucessfully. Booting...
Booting iso-image@0x5d7a2b000(1750945792), bzImage@0x5d7a73800(6276542)
**** PASS: secure boot verification of iamge: bzImage****
[ 0.663490] Allocating netns hash table
Expanding ISO image
3770455 blocks
Skip labeling of root when start with root on non-persistent storage
Starting udev
/sbin/restorecon: lstat(/etc/resolv.conf) failed: No such file or directory
/sbin/restorecon: lstat(/etc/adjtime) failed: No such file or directory
Running postinst /etc/rpm-postinsts/100-dnsmasq...
Running postinst /etc/rpm-postinsts/101-nfs-utils-client...
Running postinst /etc/rpm-postinsts/102-nfs-utils...
update-rc.d: /etc/init.d/run-postinsts exists during rc.d purge (continuing)
Removing any system startup links for run-postinsts ...
/etc/rcS.d/S99run-postinsts
Configuring network interfaces... done.
Starting system message bus: dbus.
Starting OpenBSD Secure Shell server: sshd
generating ssh RSA key...
generating ssh ECDSA key...
generating ssh DSA key...
generating ssh ED25519 key...
sshd start/running, process 1229
Starting rpcbind daemon...done.
Starting random number generator daemonUnable to open file: /dev/tpm0
.
Starting system log daemon...0
Starting kernel log daemon...0
tftpd-hpa disabled in /etc/default/tftpd-hpa
Starting internet superserver: xinetd.
Starting S.M.A.R.T. daemon: smartd.
Mon Sep 23 12:36:58 UTC 2019: Detected /iso/host.iso
mount: /dev/loop0 is write-protected, mounting read-only
Mon Sep 23 12:36:58 UTC 2019: Mounted /iso/host.iso to /tmp/isomnt.6L5Gad
Mon Sep 23 12:36:58 UTC 2019: Found /tmp/isomnt.6L5Gad/rpm/ncs5500-sysadmin-hostos-7.0.2.09I-r70209I.host.x86_64.rpm in host.iso
Mon Sep 23 12:36:58 UTC 2019: Installing /tmp/isomnt.6L5Gad/rpm/ncs5500-sysadmin-hostos-7.0.2.09I-r70209I.host.x86_64.rpm
warning: /tmp/isomnt.6L5Gad/rpm/ncs5500-sysadmin-hostos-7.0.2.09I-r70209I.host.x86_64.rpm: Header V4 RSA/SHA256 signature: NOKEY, key ID 5746bd08
Preparing packages for installation...
ncs5500-sysadmin-hostos-7.0.2.09I-r70209I.host.x86_64
ls: cannot access /etc/init/cisco-instance/fretta: No such file or directory
Mon Sep 23 12:36:59 UTC 2019: Passing control to /etc/rc.d/init.d/pxe_install.sh start
Logging started at Mon Sep 23 12:36:59 UTC 2019...
Mon Sep 23 12:37:00 UTC 2019: Sourcing /etc/init.d/pi_grub_and_menu_lst_update.sh PI script
Mon Sep 23 12:37:00 UTC 2019: Sourcing /etc/init.d/mount_pd_fs.sh PI script
cmdline = bzImage root=/dev/ram install=/dev/sda console=ttyS0,9600 prod=1 crashkernel=192M@0 bigphysarea=10M quiet pci=assign-busses noissu aer=off pci=hpmemsize=0M,hpiosize=0M giso_boot initrd=initrd.img
Mon Sep 23 12:37:00 UTC 2019: Preparing disk for PLATFORM=fretta:
Mon Sep 23 12:37:00 UTC 2019: In collect_archive_interrupted_bake_logs function....
Mon Sep 23 12:37:00 UTC 2019: Debug partition exist and is getting mounted..
Mon Sep 23 12:37:00 UTC 2019: Failed to mount /dev/loop0 debug partition
Mon Sep 23 12:37:00 UTC 2019: Secondary disk is not present
pd_punch_watchdog
Punching IOFPGA watchdog
pd_notify_img_install_started
Sending Image Install Started event
Mon Sep 23 12:37:00 UTC 2019: Installer will install image on sda
Mon Sep 23 12:37:00 UTC 2019: Checking disks: sda
Mon Sep 23 12:37:01 UTC 2019: Removing old boot partition
Mon Sep 23 12:37:01 UTC 2019: Preparing debug partition fretta
Logging started at Mon Sep 23 12:37:01 UTC 2019...
Mon Sep 23 12:37:01 UTC 2019: Removing old volumes
Mon Sep 23 12:37:01 UTC 2019: Inside Volume-Cleaning Function
Mon Sep 23 12:37:02 UTC 2019: Removed PV
Mon Sep 23 12:37:02 UTC 2019: Exiting from the Volume Cleaning Section
Mon Sep 23 12:37:02 UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): Golden ISO type = 1.1 and PKG_VER = 1.0
Mon Sep 23 12:37:02 UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): Proceeding to download system_image.iso from primary RP
Mon Sep 23 12:37:02 UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): SLOT is 0x0000001B
Mon Sep 23 12:37:02 UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): card_value is 0x01423741
Mon Sep 23 12:37:07 UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): Starting on interface eth0
Mon Sep 23 12:37:29 UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): Starting on interface eth1
Mon Sep 23 12:37:51 UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): Starting on interface eth6
http://10.75.49.254/IOX614/ncs5500-mini-x-6.1.4.iso
Mon Sep 23 12:38:01 UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): dhclient successful for eth6
Mon Sep 23 12:38:01 UTC 2019: Going to copy GISO files...
Mon Sep 23 12:38:01 UTC 2019: Starting of copy_giso_files function
Mon Sep 23 12:38:05 UTC 2019: Ending of copy_giso_files function
Mon Sep 23 12:38:05 UTC 2019: Copied Golden ISO files...
Mon Sep 23 12:38:05 UTC 2019: Starting of copy_giso_files function
Mon Sep 23 12:38:08 UTC 2019: Ending of copy_giso_files function
Mon Sep 23 12:38:09 UTC 2019: Md5sum verification succeeded
Mon Sep 23 12:38:09 UTC 2019: ---Starting to prepare mb_disk---
Mon Sep 23 12:38:09 UTC 2019:
Mon Sep 23 12:38:09 UTC 2019: ---Starting to prepare sda---
Mon Sep 23 12:38:09 UTC 2019: /dev/sda disk size is 256060MB
Mon Sep 23 12:38:09 UTC 2019: Using remaining disk space 214842 MB for secondary disk functions
Mon Sep 23 12:38:09 UTC 2019: LVM size (28000 MB) DEBUG part size (10 MB)
Mon Sep 23 12:38:09 UTC 2019: Creating partitions, BOOT=900MB, LVM=28000MB, EFI=20MB
Mon Sep 23 12:38:10 UTC 2019: Created partition of size 214842 for use as secondary disk
Mon Sep 23 12:38:10 UTC 2019: Created Partition of size 4096 for use of App-Volume
Mon Sep 23 12:38:10 UTC 2019: Partition creation on /dev/sda took 1 seconds
Mon Sep 23 12:38:10 UTC 2019: File system creation on /dev/sda1 took 0 seconds
Mon Sep 23 12:38:10 UTC 2019: Partitioning PCI block device /dev/sda5
Mon Sep 23 12:38:11 UTC 2019: Final return val 0 ....
Mon Sep 23 12:38:11 UTC 2019: Retaining Volume Group pci_disk1
Mon Sep 23 12:38:22 UTC 2019: tftpboot system_image.iso md5sum verfication succeeded
Mon Sep 23 12:38:22 UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): Image already downloaded from external source
Mon Sep 23 12:38:23 UTC 2019: Copying Pxeboot files from Golden ISO took 12 seconds
Mon Sep 23 12:38:28 UTC 2019: Install boot image on /dev/sda1
Mon Sep 23 12:38:42 UTC 2019: Starting Calvados patch for lxc for hostos
Mon Sep 23 12:38:42 UTC 2019: Uninstalling rpm task-nxos-core
Mon Sep 23 12:38:42 UTC 2019: Uninstalling rpm gdb
Mon Sep 23 12:38:42 UTC 2019 (/etc/init.d/calvados_patch_lxc_iso.sh): NCS5500: Patch host
Mon Sep 23 12:38:43 UTC 2019 (/etc/init.d/calvados_patch_lxc_iso.sh): NCS5500: Patch host done
Enable selinux to relabel filesystem from initramfs
Checking SELinux security contexts:
* First booting, filesystem will be relabeled...
Mon Sep 23 12:38:48 UTC 2019: Finished Calvados patch for lxc
Mon Sep 23 12:38:49 UTC 2019: Installing host image size of 412M took 21 seconds
Mon Sep 23 12:38:49 UTC 2019:
Mon Sep 23 12:38:49 UTC 2019: ---Starting to prepare host logical volume---
Mon Sep 23 12:38:49 UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): Create app volume on sda
Physical volume "/dev/sda6" successfully created
Mon Sep 23 12:39:03 UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): lcard_value_f is 0x01423741
Mon Sep 23 12:39:03 UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): FRETTA: card_inst=FRETTA-RP,FRETTA-NON-SYNC-RP card_type=RP
Mon Sep 23 12:39:05 UTC 2019: Starting Calvados patch for lxc for hostos
Mon Sep 23 12:39:05 UTC 2019: Uninstalling rpm task-nxos-core
Mon Sep 23 12:39:05 UTC 2019: Uninstalling rpm gdb
Mon Sep 23 12:39:05 UTC 2019 (/etc/init.d/calvados_patch_lxc_iso.sh): NCS5500: Patch host
Mon Sep 23 12:39:06 UTC 2019 (/etc/init.d/calvados_patch_lxc_iso.sh): NCS5500: Patch host done
Enable selinux to relabel filesystem from initramfs
Checking SELinux security contexts:
* First booting, filesystem will be relabeled...
Mon Sep 23 12:39:11 UTC 2019: Finished Calvados patch for lxc
Mon Sep 23 12:39:13 UTC 2019:
Mon Sep 23 12:39:13 UTC 2019: ---Starting to prepare calvados logical volume---
Mon Sep 23 12:39:13 UTC 2019: Create sub partition on /dev/panini_vol_grp/calvados_lv0
Mon Sep 23 12:39:14 UTC 2019: Create data sub partition on /dev/panini_vol_grp/calvados_data_lv0
Mon Sep 23 12:39:26 UTC 2019: File system creation on /dev/panini_vol_grp/calvados_lv0 took 13 seconds
Mon Sep 23 12:39:26 UTC 2019: Install sysadmin-vm image on /dev/panini_vol_grp/calvados_lv0
Mon Sep 23 12:39:37 UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): lcard_value_f is 0x01423741
Mon Sep 23 12:39:37 UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): FRETTA: card_inst=FRETTA-RP,FRETTA-NON-SYNC-RP card_type=RP
Mon Sep 23 12:39:37 UTC 2019: sysadmin-vm: RP based installation
Mon Sep 23 12:40:27 UTC 2019: Starting Calvados patch for lxc for sysadmin-vm
Mon Sep 23 12:40:27 UTC 2019: Uninstalling rpm task-nxos-core
Mon Sep 23 12:40:27 UTC 2019: Uninstalling rpm gdb
Mon Sep 23 12:40:27 UTC 2019: Uninstalling rpm smartmontools
Mon Sep 23 12:40:27 UTC 2019 (/etc/init.d/calvados_patch_lxc_iso.sh): NCS5500: Patch calvados
Mon Sep 23 12:40:28 UTC 2019 (/etc/init.d/calvados_patch_lxc_iso.sh): Cleaning up LXC
Mon Sep 23 12:40:28 UTC 2019 (/etc/init.d/calvados_patch_lxc_iso.sh): NCS5500: Patch calvados done
Enable selinux to relabel filesystem from initramfs
Checking SELinux security contexts:
* First booting, filesystem will be relabeled...
Mon Sep 23 12:40:34 UTC 2019: Finished Calvados patch for lxc
Mon Sep 23 12:40:37 UTC 2019: Installing sysadmin-vm image size of 1.2G took 71 seconds
BIOS Ver: 09.23 Date: 04/17/2016 16:45:46
Press <DEL> or <ESC> to enter boot manager. GRUB Secure Boot Validation Result: PASSEDn Sep 23 12:40:51 UTC 2019: Copying /iso/ncs5500-sysadmin.iso to repository /iso directory
Mon Sep 23 12:40:54 UTC 2019: Copying /iso/ncs5500-xr.iso to repository /iso directory
Mon Sep 23 12:41:04 UTC 2019: Copying all ISOs to repository took 14 seconds
GNU GRUB version 2.00TC 2019: Install EFI on /dev/sda4
Press F2 to goto grub Menu.. (/etc/rc.d/init.d/pxe_install.sh): card_value is 0x01423741
Booting from Disk.. UTC 2019 (/etc/rc.d/init.d/pxe_install.sh): NCS5500: Patch grub. card_index=21014
Loading Kernel..stall_done
Kernel Secure Boot Validation Result: PASSED
Loading initrd..:05 UTC 2019: Install finished on sda
Initrd Secure Boot Validation Result: PASSEDvent
[ 0.234005] Allocating netns hash table
Enable selinux to relabel filesystem from initramfsation ...
/usr/bin/chcon: cannot access '/dev/console': No such file or directory
[*] Load IMA appraise policy: OKle
Switching to new root and running init.
Sourcing /etc/sysconfig/udev
Starting udev: [ OK ]OS
/sbin/restorecon: lstat(/etc/resolv.conf) failed: No such file or directory
/sbin/restorecon: lstat(/etc/adjtime) failed: No such file or directory
Running postinst /etc/rpm-postinsts/100-dnsmasq...
Running postinst /etc/rpm-postinsts/101-nfs-utils-client...
Running postinst /etc/rpm-postinsts/102-nfs-utils...
update-rc.d: /etc/init.d/run-postinsts exists during rc.d purge (continuing)
Removing any system startup links for run-postinsts ...
/etc/rcS.d/S99run-postinsts0ff
pd_notify_host_started1 : 0x2000000
Sending Host OS Started eventbc77fff
Last Reset Reason = 0x80000001
Watchdog Register = 0x000000FE
SPI Boot Timer Register = 0x000060FF
Configuring network interfaces... done.
Starting system message bus: dbus.
Mon Sep 23 12:41:49 UTC 2019: in hostos !!!!!!!!!
UBI device number 3, total 144 LEBs (18855936 bytes, 18.0 MiB), available 0 LEBs (0 bytes), LEB size 130944 bytes (127.9 KiB)
Punching IOFPGA watchdog
Starting OpenBSD Secure Shell server: sshd
generating ssh RSA key...
generating ssh ECDSA key...
generating ssh DSA key...
generating ssh ED25519 key...
sshd start/running, process 3516
Starting rpcbind daemon...done.
Starting kdump:[ OK ]
Starting random number generator daemonUnable to open file: /dev/tpm0
.
Starting system log daemon...0
Starting kernel log daemon...0
Starting HPA's tftpd: in.tftpd-hpa
.
Starting internet superserver: xinetd.
Starting S.M.A.R.T. daemon: smartd.
Starting Lighttpd Web Server: lighttpd.
Starting libvirtd daemon: [ OK ]
Starting crond: OK
Starting cgroup-init
Network ieobc_br defined from /etc/init/ieobc_br_network.xml
Network local_br defined from /etc/init/local_br_network.xml
Network xr_local_br defined from /etc/init/xr_local_br_network.xml
Network ieobc_br started
Network local_br started
Network xr_local_br started
[*] ima_policy have loaded, or IMA policy file does not exist
mcelog start/running, process 6157
diskmon start/running, process 6169
Creating default host password file
initctl: Unknown
Connecting to 'default-sdr--1' console
????????bootlogd: ioctl(/dev/pts/2, TIOCCONS): Device or resource busy
/sbin/restorecon: lstat(/etc/adjtime) failed: No such file or directory
Running postinst /etc/rpm-postinsts/100-dnsmasq...
Running postinst /etc/rpm-postinsts/101-nfs-utils-client...
Running postinst /etc/rpm-postinsts/102-nfs-utils...
update-rc.d: /etc/init.d/run-postinsts exists during rc.d purge (continuing)
Removing any system startup links for run-postinsts ...
/etc/rcS.d/S99run-postinsts
Configuring network interfaces... done.
Starting system message bus: dbus.
Starting OpenBSD Secure Shell server: sshd
generating ssh RSA key...
generating ssh ECDSA key...
generating ssh DSA key...
generating ssh ED25519 key...
sshd start/running, process 2147
Starting rpcbind daemon...done.
Starting random number generator daemonUnable to open file: /dev/tpm0
.
Starting system log daemon...0
Starting kernel log daemon...0
Starting internet superserver: xinetd.
Libvirt not initialized for container instance
Starting crond: OK
SIOCADDRT: File exists
[*] ima_policy have loaded, or IMA policy file does not exist
Start serial incoming on , Clearing ..
DBG_MSG: platform type is 0
ios con0/RP0/CPU0 is now available
Press RETURN to get started.
RP/0/RP0/CPU0:Sep 23 12:45:36.688 UTC: rmf_svr[177]: %PKT_INFRA-FM-2-FAULT_CRITICAL : ALARM_CRITICAL :RP-RED-LOST-PNP :DECLARE :0/RP0/CPU0:
RP/0/RP0/CPU0:Sep 23 12:45:36.688 UTC: rmf_svr[177]: %PKT_INFRA-FM-3-FAULT_MAJOR : ALARM_MAJOR :RP-RED-LOST-NNR :DECLARE :0/RP0/CPU0:
RP/0/RP0/CPU0:Sep 23 12:45:36.705 UTC: fpd-serv[381]: %PKT_INFRA-FM-3-FAULT_MAJOR : ALARM_MAJOR :FPD-NEED-UPGRADE :DECLARE :0/RP0:
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply third-party
authority to import, export, distribute or use encryption. Importers,
exporters, distributors and users are responsible for compliance with
U.S. and local country laws. By using this product you agree to comply
with applicable laws and regulations. If you are unable to comply with
U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be
found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
recovery configuration by ZTP
RP/0/RP0/CPU0:Sep 23 12:49:45.490 UTC: config[65673]: %MGBL-CONFIGCLI-3-TARGET_CFG_LOCKERR : main:Failed to obtain exclusive lock for this session:'CfgMgr' detected the 'fatal' condition 'The Configuration Namespace is locked by another agent.'
ZTP: ZTP config lock fail. Please do not configure until ZTP completes. Try 1.
ZTP: ZTP config lock fail. Please do not configure until ZTP completes. Try 2.
ZTP: Forcing unlock of configuration.
ZTP: Configuration was successfully unlocked.
ifmgr[411]: %PKT_INFRA-LINK-3-UPDOWN : Interface MgmtEth0/RP0/CPU0/0, changed state to Down
ifmgr[411]: %PKT_INFRA-LINK-3-UPDOWN : Interface MgmtEth0/RP0/CPU0/0, changed state to Up
0/RP0/ADMIN0:Sep 23 12:51:40.780 UTC: shelf_mgr[3369]: %INFRA-SHELF_MGR-4-CARD_RELOAD : Reloading card 0/0
0/RP0/ADMIN0:Sep 23 20:51:46.455 CST: confd_helper[3292]: %MGBL-CONFD_HELPER-5-SYSADMIN_COMMIT : A sysadmin configuration change has been committed. Use 'show configuration commit list' in admin mode for more details
RP/0/RP0/CPU0:Sep 23 20:51:46.482 CST: config[66243]: %MGBL-CONFIG-6-INT_UNRESOLVED : Some of the interface configuration was moved to pre configuration automatically as these interfaces do not exist or could not be mapped to any nodes
RP/0/RP0/CPU0:Sep 23 20:51:47.722 CST: config[66243]: %MGBL-CONFIG-6-DB_COMMIT : Configuration committed by user 'ZTP'. Use 'show configuration commit changes 1000000005' to view the changes.
0/RP0/ADMIN0:Sep 23 20:51:50.093 CST: shelf_mgr[3369]: %INFRA-SHELF_MGR-6-HW_EVENT : Rcvd HW event HW_EVENT_OK, event_reason_str 'remote card ok' for card 0/2
0/RP0/ADMIN0:Sep 23 20:51:50.093 CST: shelf_mgr[3369]: %INFRA-SHELF_MGR-6-CARD_HW_OPERATIONAL : Card: 0/2 hardware state going to Operational
0/RP0/ADMIN0:Sep 23 20:51:53.197 CST: shelf_mgr[3369]: %INFRA-SHELF_MGR-6-HW_EVENT : Rcvd HW event HW_EVENT_POWERED_ON, event_reason_str 'card powered-on' for card 0/0
RP/0/RP0/CPU0:Sep 23 20:51:59.604 CST: ZTP[66938]: %OS-SYSLOG-6-LOG_INFO : ZTP exited