Initial commit

templates/boot.ipxe

@@ -0,0 +1,36 @@
+#!ipxe
+
+dhcp
+
+:start
+# Is a known serial is set, execute that
+# If an unknown serial is set, exit
+# If no serial is set, ask the user
+goto node_${serial} || goto manual
+# Default behavior (non install mode) is to exit iPXE script
+
+{{ range (datasource "nodes" | jsonArray) }}
+{{- if .install }}
+# {{ .filename }}
+:node_{{ .serial }}
+{{- $ipArg := printf "ip=%s::%s:%s:%s:%s::%s:%s:%s" .ip .gateway .netmask .hostname .interface .dns0 .dns1 .ntp }}
+{{- $kernelArgs := printf "%s %s" $ipArg .kernelArgs }}
+imgfree
+kernel https://pxe.factory.talos.dev/image/{{ .schematicID }}/{{ .talosVersion }}/kernel-{{ .arch }} {{ $kernelArgs }} {{- if .upgradeIPXE }} || boot {{ .upgradeIPXE }} {{- end }}
+initrd https://pxe.factory.talos.dev/image/{{ .schematicID }}/{{ .talosVersion }}/initramfs-{{ .arch }}.xz
+boot
+{{- end }}
+{{ end }}
+
+:manual
+menu Select node
+{{ range (datasource "nodes" | jsonArray) }}
+item {{ .serial }} {{ .hostname }}
+{{ end }}
+choose selected || goto cancel
+goto node_${selected}
+
+:cancel
+echo Type exit to restart script
+shell
+goto start

templates/dnsmasq.conf

@@ -0,0 +1,40 @@
+{{ $tftpIp := (ds "dhcp").tftpIp -}}
+
+enable-tftp
+tftp-root=/tftproot
+tftp-single-port
+
+dhcp-vendorclass=BIOS,PXEClient:Arch:00000
+dhcp-vendorclass=UEFI,PXEClient:Arch:00007
+dhcp-vendorclass=UEFI64,PXEClient:Arch:00009
+
+# 1st stage: pxe rom boot on ipxe
+dhcp-boot=net:BIOS,ipxe.pxe,{{ $tftpIp }},{{ $tftpIp }}
+dhcp-boot=net:UEFI,ipxe.efi,{{ $tftpIp }},{{ $tftpIp }}
+dhcp-boot=net:UEFI64,ipxe.efi,{{ $tftpIp }},{{ $tftpIp }}
+
+# Based on logic in https://gist.github.com/robinsmidsrod/4008017
+# iPXE sends a 175 option, checking suboptions
+dhcp-match=set:ipxe-http,175,19
+dhcp-match=set:ipxe-https,175,20
+dhcp-match=set:ipxe-menu,175,39
+
+dhcp-match=set:ipxe-pxe,175,33
+dhcp-match=set:ipxe-bzimage,175,24
+dhcp-match=set:ipxe-iscsi,175,17
+
+dhcp-match=set:ipxe-efi,175,36
+
+# set ipxe-ok tag if we have correct combination
+tag-if=set:ipxe-ok,tag:ipxe-http,tag:ipxe-https
+
+# these create option 43 cruft, which is required in proxy mode
+# TFTP IP is required on all dhcp-boot lines (unless dnsmasq itself acts as tftp server?)
+pxe-service=tag:!ipxe-ok,X86PC,PXE,undionly.kpxe,{{ $tftpIp }}
+pxe-service=tag:!ipxe-ok,IA32_EFI,PXE,snponlyx32.efi,{{ $tftpIp }}
+pxe-service=tag:!ipxe-ok,BC_EFI,PXE,snponly.efi,{{ $tftpIp }}
+pxe-service=tag:!ipxe-ok,X86-64_EFI,PXE,snponly.efi,{{ $tftpIp }}
+
+# later match overrides previous, keep ipxe script last
+# server address must be non zero, but can be anything as long as iPXE script is not fetched over TFTP
+dhcp-boot=tag:ipxe-ok,boot.ipxe,,{{ $tftpIp }}