netbootxyz

Mon, 08 Dec 2025 00:00:00 +0000

 graph LR
 A1 -- tftp --> A2[client]
 subgraph agq3mbw2
 B[netbootxyz] -- tftp --> A1[dhcp]
 subgraph sj9n7air
 B <-- proxy --> C[nginx]
 end
 end
 C <-- https --> D[client]

host 구성

포트 개방

tftp: 69번 포트
dhcp: 67번 포트(server, relay agent), 68번 포트(client) ¹

cat /usr/lib/firewalld/services/dhcp.xml | grep port && \
cat /usr/lib/firewalld/services/tftp.xml | grep port
 <port protocol="udp" port="67"/>
 <port protocol="udp" port="69"/>

sudo firewall-cmd --permanent --add-port=69/udp && \
sudo firewall-cmd --permanent --add-port=8080/tcp && \
sudo firewall-cmd --permanent --remove-port=16000/tcp && \
sudo firewall-cmd --permanent --remove-port=10809/tcp && \
sudo firewall-cmd --permanent --remove-port=67/udp && \
sudo firewall-cmd --reload && \
sudo firewall-cmd --list-all

selinux

sudo setsebool -P tftp_anon_write 1 && \
sudo setsebool -P tftp_home_dir 1 && \
getsebool -a | grep tftp

container 구성

docker-compose.yml

vi /opt/netbootxyz/docker-compose.yml

services:
 netbootxyz:
 image: lscr.io/linuxserver/netbootxyz:latest
 container_name: netbootxyz
 networks:
 - dev
 ports:
 - 69:69/udp
 - 3000:3000/tcp
 - 8080:80/tcp
 user: 0:0
 environment:
 - PUID=1000
 - PGID=1000
 - TZ=Asia/Seoul
 - PORT_RANGE=30000:30010
 - NGINX_PORT=80
 - WEB_APP_PORT=3000
 volumes:
 - /opt/netbootxyz/config:/config:rw
 - /opt/netbootxyz/assets:/assets:rw
 restart: unless-stopped
networks:
 dev:
 external: true

boot.cfg

vi /opt/netbootxyz/config/menus/local/boot.cfg

...
# set location of custom netboot.xyz live assets
#set live_endpoint https://github.com/netbootxyz
set live_endpoint http://sj9n7air:8080

######################################
# Media Locations for Licensed Distros
######################################
set rhel_base_url
set win_base_url ${live_endpoint}/custom/releases/download/windows11
set github_user dntco43u
...

menu.ipxe

멀티 부팅 ²

pxeboot on 대충어쩌고저쩌고샬라샬라

netbootxyz

host 구성

포트 개방

selinux

container 구성

docker-compose.yml

boot.cfg

menu.ipxe