Coblyn User Manual v1.16.0 "Surgery"

⏱ 45 minNivel · All rolesv1.16.0

Welcome to the official Coblyn user manual, the unified ecosystem for image deployment, device management (MDM), and remote support. This guide is designed for IT Technicians and Administrators managing device fleets across Windows and Linux from a centralized console.

Coblyn operates under the "Clone. Manage. Secure." philosophy, providing tools from the first network boot (PXE) to daily device lifecycle maintenance.

---

Index

1. Fundamental Concepts
2. Identity Management and Auditing (RBAC)
3. Inventory and Lifecycle
4. Storage Hub (NFS/SMB)
5. Device Management (MDM)
6. Remote Support (RustDesk)
7. Deployments and Disaster Recovery
8. Multisite Architecture
9. Troubleshooting (FAQ)

---

1. Fundamental Concepts

Coblyn is not just a PXE server; it is an orchestration suite.

The Vanguard Flow

1. Detection: A machine boots via network and enters Quarantine (isolated IP).
2. Approval: A technician validates the MAC, and the machine enters Production inventory.
3. Deployment: A corporate image (WIM/Clonezilla) is injected.
4. MDM: The Go agent is automatically installed and applies Policies (Registry, Software).
5. Support: In case of issues, an encrypted Remote Control session is initiated.

---

2. Identity Management and Auditing (RBAC)

Access is protected by JWT (JSON Web Tokens) stored in HTTP-only Cookies for maximum security.

Roles and Permissions

• Admin: Full control. Management of network, users, and encryption keys.
• Technician: Management of images, storage, and inventory. Cannot delete logs or users.
• Operator: Can only launch pre-configured deployments on approved machines.
• Auditor: Read-only access to the Audit Log and statistics.

---

3. Inventory and Lifecycle

The Inventory view is the operational heart of Coblyn.

Device States

• Pending (Quarantine): Device detected but not authorized. Prohibited from accessing the internal network.
• Approved: Registered in DHCP Kea. Ready to receive images.
• Banned: MAC address permanently blocked. Will not even receive a quarantine IP.
• Deprecated: Historical equipment no longer in use, but inventory data is preserved.

---

4. Storage Hub (NFS/SMB)

Vanguard allows you to centralize your images on external NAS.

Pool Configuration

1. Go to Settings > Storage.
2. NFS: Only requires the IP and export Path (e.g., /volume1/images).
3. SMB/CIFS: Requires credentials. Coblyn encrypts these passwords with AES-256 using a unique key generated for your installation (STORAGE_ENCRYPTION_KEY).

---

5. Device Management (MDM)

The Coblyn agent (written in Go) allows you to manage Windows and Linux machines after deployment.

Agent Deployment

• Automatic: Included in images deployed by Coblyn.
• Manual: Download the binary from the Download Center and run it as Administrator/Root.

---

6. Remote Support (RustDesk Integration)

Coblyn integrates a signaling server for RustDesk, allowing remote support without relying on external clouds.

Starting a session

1. In Inventory, select a device with an active agent.
2. Click the Remote Support icon.
3. Coblyn will generate a temporary ID and Password and launch the viewer in your browser or local client.

---

7. Deployments and Disaster Recovery

Deployment Modes

1. Full Image (Clonezilla): Bit-by-bit restoration of a complete partition or disk. Ideal for labs.
2. Lite Deployment (WIM + .ppkg): Injection of install.wim files via DISM. Much faster and bandwidth-efficient.

---

---

8. Multisite Architecture

Designed for organizations with multiple buildings or delegations.

• Site ID: Each Coblyn server can manage multiple "Sites".
• Subnets: Each Site can have its own IP range and gateway.

---

9. Troubleshooting (FAQ)

Why is my machine not booting via PXE?

• Verify that ports 67/UDP (DHCP) and 69/UDP (TFTP) are open on the server firewall.
• Ensure there is no other DHCP server on the same VLAN competing.

---

Coblyn finds the way. v1.16.0 Surgery "Knowledge is the best defense."