Miles WardandClaude Opus 4.8
4f193cac05
Mirrors the worthwhile device-support wins from iVentoy 1.0.24→1.0.35 onto our
(very different) proxy-DHCP + iPXE-chainload architecture. iVentoy's other
changes are inapplicable (arm64-server / distro-display fixes live in its
injected Linux, which we don't have), niche (iSCSI), or closed-source
(Matrix Boot).
iPXE refreshed (mirrors 1.0.35 "Update iPXE")
- Pin the from-source build to ipxe/ipxe master @ 2026-06-09
(95ffbf4745553e8a207922389929e1943c0237c0) — newer NIC drivers + EFI fixes.
The pin also busts the cached ipxe-build Docker layer so the release
actually recompiles iPXE; build-ipxe.sh now shallow-fetches an exact SHA.
Automatic NIC driver fallback (mirrors 1.0.34 "driver/boot-file mode" — but
no operator toggle, per request)
- New DriverMode {Firmware, Builtin} in core; ClientArch::ipxe_bootfile_mode
maps each arch to either the firmware-net build (snponly/undionly, default)
or the all-drivers build (ipxe.efi/ipxe.pxe/ipxe-i386.efi/ipxe-arm64.efi).
- The DHCP proxy serves Firmware by default — byte-for-byte unchanged, so
hardware that boots today never regresses. A new DriverEscalation state
machine watches for the tell-tale failure: a MAC re-PXE-boots (fresh
firmware DISCOVER) without ever completing the iPXE-user-class handoff that
proves the firmware NIC stack worked. That MAC is automatically escalated to
iPXE's own NIC drivers, and the choice is sticky after a confirmed handoff
(debounced for the :67/:4011 same-boot pair, TTL-pruned, capped). It just
works — no settings, no UI.
- All-drivers binaries fetched per arch (ipxe.pxe + i386/arm64 native EFI;
x86_64 ipxe.efi already built from source with PNG); ipxe-assets embeds
*.pxe and logs availability per (arch, mode).
Core principles intact: DHCP-proxy-only, container-first, Rust-focused (the
logic is all Rust; only the iPXE fetch/build stays shell), Windows hard-rules
untouched (this never goes near Windows boot).
Validation: clippy clean; full workspace test suite green (core 99 incl. new
DriverMode tests, dhcp-proxy +4 escalation tests, http-api 31+68, iso-store
61, tftp 6, bin 2); fmt-clean.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
91 lines
4.0 KiB
Bash
Executable File
91 lines
4.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Build PNG-enabled iPXE binaries from source.
|
|
#
|
|
# Why from source: the official boot.ipxe.org binaries (and the
|
|
# Debian-packaged ones) are NOT built with CONSOLE_FRAMEBUFFER +
|
|
# IMAGE_PNG + CONSOLE_CMD, so `console --picture` is a no-op on them —
|
|
# you can't paint a graphical boot-menu background. iVentoy solves this
|
|
# by shipping its own iPXE build with exactly those three flags; we do
|
|
# the same, from upstream iPXE, with a thin auditable config delta
|
|
# (deploy/ipxe/local/{general,console}.h).
|
|
#
|
|
# Why a real cross-compiler instead of QEMU: building amd64 iPXE by
|
|
# emulating an amd64 gcc under QEMU on an arm64 host intermittently
|
|
# segfaults cc1 (the reason this was stuck for ~8 releases). Running a
|
|
# NATIVE arm64 gcc that cross-targets x86_64 (CROSS_COMPILE=
|
|
# x86_64-linux-gnu-) sidesteps emulation entirely — the compiler is a
|
|
# native binary, it just emits x86_64 objects. This stage is meant to
|
|
# run on $BUILDPLATFORM (the native builder arch), NOT the emulated
|
|
# target platform.
|
|
#
|
|
# Outputs (into $DEST), using the filenames OpenPXE's arch mapping
|
|
# expects:
|
|
# snponly.efi x86_64 UEFI, PNG-enabled
|
|
# ipxe.efi x86_64 UEFI, PNG-enabled (bundled drivers)
|
|
#
|
|
# We build ONLY x86_64 UEFI, always via the x86_64 cross toolchain
|
|
# (`x86_64-linux-gnu-gcc`). That's deliberately host-arch-agnostic: it
|
|
# works whether this stage runs on an arm64 Mac builder or an amd64 CI
|
|
# runner, because the cross compiler runs native and emits x86_64
|
|
# either way. Building arm64-efi or BIOS here would re-introduce a
|
|
# dependency on the host arch (native arm64 build) or a 32-bit multilib
|
|
# toolchain — so those arches keep their upstream-fetched (no-PNG)
|
|
# binaries and fall back to the menu's clean `|| console` text screen.
|
|
# Modern PXE clients are overwhelmingly x86_64 UEFI, which get the full
|
|
# graphical background.
|
|
|
|
set -euo pipefail
|
|
|
|
ROOT="$(cd "$(dirname "$0")/.." && pwd)"
|
|
DEST="${1:-$ROOT/assets/ipxe}"
|
|
WORK="$(mktemp -d)"
|
|
trap 'rm -rf "$WORK"' EXIT
|
|
|
|
# Pinned upstream iPXE. Rolling master is fine functionally, but a pin keeps
|
|
# builds reproducible, protects against a transient master breakage, and —
|
|
# crucially for the Docker image — busting this value invalidates the cached
|
|
# ipxe-build layer so an "update iPXE" release actually recompiles from the
|
|
# new upstream. Bump deliberately to a recent master commit.
|
|
#
|
|
# v0.6.1: ipxe/ipxe master @ 2026-06-09 (newer NIC drivers + EFI fixes;
|
|
# mirrors iVentoy 1.0.35 "Update iPXE").
|
|
IPXE_REPO="https://github.com/ipxe/ipxe.git"
|
|
IPXE_REF="${IPXE_REF:-95ffbf4745553e8a207922389929e1943c0237c0}"
|
|
|
|
echo ">> fetching iPXE ($IPXE_REF)"
|
|
# Shallow-fetch the exact ref: works for a full commit SHA (GitHub allows
|
|
# reachable-SHA1-in-want) and for branch/tag names. Fall back to a full
|
|
# clone + checkout if the server refuses a direct fetch of this ref.
|
|
git init -q "$WORK/ipxe"
|
|
git -C "$WORK/ipxe" remote add origin "$IPXE_REPO"
|
|
if git -C "$WORK/ipxe" fetch -q --depth 1 origin "$IPXE_REF"; then
|
|
git -C "$WORK/ipxe" checkout -q FETCH_HEAD
|
|
else
|
|
echo " direct fetch failed; falling back to full clone + checkout"
|
|
rm -rf "$WORK/ipxe"
|
|
git clone -q "$IPXE_REPO" "$WORK/ipxe"
|
|
git -C "$WORK/ipxe" checkout -q "$IPXE_REF"
|
|
fi
|
|
SRC="$WORK/ipxe/src"
|
|
|
|
echo ">> applying OpenPXE config overrides (PNG + framebuffer + console cmd)"
|
|
mkdir -p "$SRC/config/local"
|
|
cp "$ROOT/deploy/ipxe/local/general.h" "$SRC/config/local/general.h"
|
|
cp "$ROOT/deploy/ipxe/local/console.h" "$SRC/config/local/console.h"
|
|
|
|
mkdir -p "$DEST"
|
|
|
|
# x86_64 UEFI — cross-compiled with the native arm64 gcc targeting
|
|
# x86_64. HOST_CC stays the native cc for iPXE's build-time utilities
|
|
# (elf2efi, zbin, …); only the target objects use the cross compiler.
|
|
echo ">> building x86_64 UEFI (snponly.efi, ipxe.efi)"
|
|
make -C "$SRC" -j"$(nproc)" \
|
|
CROSS_COMPILE=x86_64-linux-gnu- \
|
|
bin-x86_64-efi/snponly.efi \
|
|
bin-x86_64-efi/ipxe.efi
|
|
cp "$SRC/bin-x86_64-efi/snponly.efi" "$DEST/snponly.efi"
|
|
cp "$SRC/bin-x86_64-efi/ipxe.efi" "$DEST/ipxe.efi"
|
|
|
|
echo ">> iPXE build complete:"
|
|
ls -l "$DEST"/snponly.efi "$DEST"/ipxe.efi
|