+- iPXE discussion forum (https://forum.ipxe.org)
+-- Forum: iPXE user forums (/forumdisplay.php?fid=1)
+--- Forum: General (/forumdisplay.php?fid=2)
+--- Thread: Heuristic to break DHCP infinite loop (/showthread.php?tid=21808)
Heuristic to break DHCP infinite loop - alkisg - 2020-04-03 10:24
I would like to propose a small heuristic to make it easier to break the DHCP infinite loop.
Currently, users that have microtik routers or pfsense servers are advised to build ipxe on their own, while embedding a script to break the loop.
My proposed heuristic is that ipxe would automatically prefer a special "ipxe-override-filename" DHCP option to the stock DHCP filename. That way, if users define both options in their DHCP, then the first request will use "filename" (e.g. ipxe.pxe), while the ipxe request will use "ipxe-override-filename" (e.g. menu.ipxe).
Avoiding custom iPXE builds has the following benefits:
- Less work, no need to setup a development environment
- Allows automatic updates from distribution packages
- Allows ipxe.efi to be signed
RE: Heuristic to break DHCP infinite loop - alkisg - 2020-04-05 12:34
I just noticed the almost undocumented scriptlet option. This is even better than the heuristic that I suggested.
So now I just want to suggest that scriptlet gets documented in https://ipxe.org/cfg/scriptlet and in https://ipxe.org/howto/chainloading.
For dnsmasq, an example syntax is:
Code:
dhcp-option-force=encap:175,81,"ifopen && chain ltsp/ltsp.ipxe || shell"P.S. keep in mind that scriptlet won't work if iPXE is booted locally, from ipxe.iso etc; it will only work if ipxe.pxe, undionly.kpxe etc are loaded over the network, so that scriptlet is there even before the "dhcp" command is run.