Open Radar

 
Area:
Server (macOS Server)

Summary:
NetBooting a client against an NBI made with SIU against 10.13 beta7 (17A352a) results in a hang on the progress bar during the boot sequence.  A verbose boot shows the following failures on screen:
 - AppleKextExcludeList.kext has invalid signatures: Trust cache is disabled.
 - Kext rejected due to invalid sigatures
 - Can't load /System/Library/Filesystems/AppleShare/asp_tcp.kext - authentication problems
 - /System/Library/Filesystems/AppleShare/asp_tcp.kext failed to load - (lib kern/ketx) authentication failure (file ownership/permisions).
 - Error in security framework, error -67674
 - Kext rejected due to invalid sigatures
 - Can't load /System/Library/Filesystems/AppleShare/afpfs.kext - authentication problems
 - /System/Library/Filesystems/AppleShare/afpfs.kext failed to load - (lib kern/ketx) authentication failure (file ownership/permisions).
 - Error in security framework, error -67674

The boot never completes. I can use the same environment and boot the same client to a 10.11 NBI.

Steps to Reproduce:
Create a NetBoot NBI against 10.13 beta 7 (17A352a) - no custom settings besides the user account.
Setup the NBI on the server to use NFS, no model restrictions, and boot diskless.
Configure a client to boot from the NBI and start the boot process.

Expected Results:
The client would boot up to the NBI.

Observed Results:
The boot process hangs. During a verbose boot the data on screen hints at kext issues.

Version:
10.13 beta 7 (17A352a)

Notes:
10.11 diskless NBIs hosted via NFS from the same server boot without issue.

Configuration:
macOS 10.12.6 - Server.app version 5.3.1
Client is a MacBookPro9,2
NBI created macOS 10.13.0b7 (17A352a)
NBI available over NFS, no model restrictions, Index = 123, "Make this image available for diskless booting" is checked.