Combo Labkit Project Update We recently learned about another bootloader program called Bootpicker. It seems to be a much better choice for our dual boot lab deployment because it addresses all of the security concerns we had about rEFIt.

1. It locks down external device booting through OS X's firmware password, so it is no longer possible to insert an external hard drive, CD or DVD and select it as a bootable volume. You must know the machine's firmware password to boot to anything other than the Mac or Windows Volume.
2. Bootpicker boots into an OS X shell instead of through EFI, thereby enabling remote commands to be sent to all machine's via Apple Remote Desktop. This makes management of the labs much easier.
3. It is now possible to combine Bootpicker and NetRestore to image the labs (both Mac and Windows OS's) from one central location.

We have deployed our Mac Mini beta machine with Bootpicker and are continuing to test it.
Posted by jmjenki3 ( May 29 2007, 02:03:45 PM EDT ) Permalink

XGrid and Windows Rendering I've been researching XGrid for OS X as a possible replacement for the College of Design Render Farm. Bascially, XGrid using a server to got out and use other computers to render jobs, just like the Render Farm did. My only problem - find a solution for the Windows users. I've found nothing as yet, but I'm starting to wonder what the feasibility would be of exporting jobs from programs like StudioTools and 3D Studio Max to Maya, which runs on OS X.

As I'm not an avid user of any of these programs, I intend to seek out faculty and students who are everyday users to test my idea. Of course, this all assumes that Maya will render under XGrid...another test to run.
Posted by jmjenki3 ( May 08 2007, 11:28:48 PM EDT ) Permalink

Render Farm End of Life As most of you may or may not know, the Render Farm will be shutting down on May 14, 2007. The machines that comprise the Render Farm are well over seven years in age and many are beginning to show their age. As such, we will be discontinuing rendering service over the summer as we investigate other possibilities.

One such possibility is XGrid, a service offered through Mac OS X. Basically, it collects unused processing cycles from available machines and creates one big rendering node. We will investigate this as a possibility over summer break and keep you posted.
Posted by jmjenki3 ( May 07 2007, 09:05:52 AM EDT ) Permalink

Combo Lab Kit Project We are investigating the possibility of deploying dual boot Macintosh machines running Mac OS X and Windows XP. Currently, we are using a 1.83 mHz Dual Core Mac Mini as our test machine.

Setting up the machine

I used Apple's bootcamp to partition the machine under the factory install OS and then installed Windows XP. The Windows partition cannot be Wolfprepped (for more information on Wolfprep, see http://microsys.unity.ncsu.edu/wolfprep/) because part of the Wolfprep process includes creating a backup partition to reimage machines in the case of disaster recovery. This process corrupts the bootcamp setup and renders the Windows partition unusable.

Instead, I installed a base install of Windows XP and made sure all software updates were run. Next, I downloaded the Novell client and logged into the network as Wolfprep (to obtain the password for the Wolfprep user and gain access to the Wolfprep server, you must contact the ITD Help Desk).

The Imaging Process

I chose to set up the Windows lab kit first because the Mac Lab Kit has a Firmware password enabled that you have to enter every time when you choose which partition to boot at startup. Once I installed Windows through Bootcamp, I downloaded the Novell client and logged in with the Wolfprep user. This performs a modified Wolfprep install - the Application Launcher is installed and access to all applications associated with that computer is granted.

After the Windows lab kit was installed, I imaged the Mac partition with the Mac lab kit. Once the lab kit was installed, I had to find a way to deal with the Windows partion mounting on login. Although the partion mounted as read-only, there was still a security risk. Any file on the Windows partition could be read and copied, including a file conatining sensitive information about system administrative access.

After talking with Apple, I was told of a login hook that would unmount the Windows partition at login. Once the login hook was tested, I had to find a way to select which OS to boot without having to input the administrative password. After some research, we learned of a bootloader program called rEFIt (homepage: http://refit.sourceforge.net/). rEFIt bypasses the firmware password when OS X boots up and allows a user to choose an Operating System.

Deployment and Security Concerns

I placed the Mac Mini in the IT Lab Checkout office for student workers to use as a private beta test. The reason we have not moved forward with a full rollout in the labs is because of a security concern with rEFIt. It is possible to boot external devices and CDs with rEFIt and there is currently no way to lock down that capability (i.e. with a password or complete disabling of external booting). Until such time as we find another solution, or the makers of rEFIt fix this problem, we will not be moving forward with a full lab deployment.

Looking Forward

We recently received the shipment of new Intel Macs for the Mac Lab updates. Joe and I are discussing designating one machine to be the public beta dual boot machine. More on this as time progresses.
Posted by jmjenki3 ( May 07 2007, 08:48:27 AM EDT ) Permalink

Hello World In the coming days, I intend for this to be a resource where I report IT issues relating to the College of Design. Here will be a centralized resource for Design faculty, staff and students to keep track of projects, lab and server updates, etc. Posted by jmjenki3 ( May 05 2007, 02:00:43 AM EDT ) Permalink