Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 20 Feb 2013 21:31:48 +0100
From:      Paul Schenkeveld <freebsd@psconsult.nl>
To:        "Daniel O'Connor" <doconnor@gsoft.com.au>
Cc:        hackers@freebsd.org
Subject:   IPMI console [Re: Chicken and egg, encrypted root FS on remote server]
Message-ID:  <20130220203148.GA1803@psconsult.nl>
In-Reply-To: <8C2980B2-3B2C-4081-9287-39EFB47ABC3D@gsoft.com.au>
References:  <20130220065810.GA25027@psconsult.nl> <C69A03DB-D861-4400-96B4-2DF5925CB4FC@DataIX.net> <20130220074655.GA59952@psconsult.nl> <BB9AA8EB-442E-4041-9CF2-92B16B8C9D2D@my.gd> <20130220111339.GA65661@psconsult.nl> <8C2980B2-3B2C-4081-9287-39EFB47ABC3D@gsoft.com.au>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi Daniel,

On Wed, Feb 20, 2013 at 10:55:47PM +1030, Daniel O'Connor wrote:
> 
> On 20/02/2013, at 21:43, Paul Schenkeveld <freebsd@psconsult.nl> wrote:
> >> What about getting a remote console like HP's ILO or Dell's DRAC ?
> >> 
> >> You get to login remotely, you can use some degree of access control... you can even remote boot.
> > 
> > For new hardware I could indeed use this, the current hardware does not
> > support remote console.
> > 
> > I don't have experience with ILO nor DRAC but I do have experience with
> > SuperMicro's KVM over LAN which does need a java client to run.  If I can
> > enter the passphrase over ssh that would be better as I can use any device
> > including a smartphone to dial in and enter the passphrase.
> 
> 
> If you setup a serial console you don't need Java if you use ipmitool, eg
> ipmitool -H remoteip -U ADMIN -I lanplus sol activate

Tried that with some Supermicro servers, the serial console allows me to
get into BIOS config and shows boot messages up to starting the kernel,
once the kernel starts output stops.

In the BIOS setup, console redirect defaults to com2 port which explains
why output stops after the loader passes control to the kernel.

BTW, ipmitool always gives me "Info: cannot activate SOL payload with
encryption" but ipmi-console (sysutils/freeipmi) works.

If I change the console redirect to com1, my screen stays blank.  Would
you perhaps know how to use com1 for redirect and connect to it using
ipmi-console (or ipmi-tool)?

Thanks,

Paul Schenkeveld



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20130220203148.GA1803>