Netboot: Difference between revisions
imported>Ichbinjoe m Building this specifies that mingetty -> getty, and then errors out - rename fixes. |
imported>Erikarvstedt update installer system. sshd has been enabled by default since nixpkgs a5872edf2f61d97a4ada2734d543eaaefe25c916 |
||
Line 20: | Line 20: | ||
## Some useful options for setting up a new system | ## Some useful options for setting up a new system | ||
services.getty.autologinUser = mkForce "root"; | services.getty.autologinUser = mkForce "root"; | ||
# users.users.root.openssh.authorizedKeys.keys = [ ... ]; | # users.users.root.openssh.authorizedKeys.keys = [ ... ]; | ||
# console.keyMap = "de"; | # console.keyMap = "de"; |
Revision as of 17:28, 7 June 2022
Building and serving a netboot image
Example
This example uses Pixiecore for hosting, which works in an ordinary network environment with an existing DHCP server.
#!/usr/bin/env bash
set -euo pipefail
nix-build --out-link /tmp/netboot - <<'EOF'
let
bootSystem = import <nixpkgs/nixos> {
# system = ...;
configuration = { config, pkgs, lib, ... }: with lib; {
imports = [
<nixpkgs/nixos/modules/installer/netboot/netboot-minimal.nix>
];
## Some useful options for setting up a new system
services.getty.autologinUser = mkForce "root";
# users.users.root.openssh.authorizedKeys.keys = [ ... ];
# console.keyMap = "de";
};
};
pkgs = import <nixpkgs> {};
in
pkgs.symlinkJoin {
name = "netboot";
paths = with bootSystem.config.system.build; [
netbootRamdisk
kernel
netbootIpxeScript
];
preferLocalBuild = true;
}
EOF
n=$(realpath /tmp/netboot)
init=$(grep -ohP 'init=\S+' $n/netboot.ipxe)
nix build -o /tmp/pixiecore nixpkgs.pixiecore
# Start the PXE server.
# These ports need to be open in your firewall:
# UDP: 67, 69
# TCP: 64172
sudo /tmp/pixiecore/bin/pixiecore \
boot $n/bzImage $n/initrd \
--cmdline "$init loglevel=4" \
--debug --dhcp-no-bind --port 64172 --status-port 64172
See also
NixOS: Pixiecore module.
NixOS manual: PXE booting.
netboot.xyz
There is now official netboot.xyz support. Just select NixOS from Linux installs and you should be ready to go.
Note: Your iPXE must be recent enough to support https:// links