Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ipxe does not load - operation not permitted. #2

Open
Kamilcuk opened this issue Dec 18, 2021 · 4 comments
Open

Ipxe does not load - operation not permitted. #2

Kamilcuk opened this issue Dec 18, 2021 · 4 comments

Comments

@Kamilcuk
Copy link

I downloaded image from https://boot.alpinelinux.org/

I'm getting: Operation not permitted (http://ipxe.org/410de13c) , both on PC and in qemu.

image

@Kamilcuk Kamilcuk changed the title Update ipxe Ipxe does not load - operation not permitted. Dec 18, 2021
@Wyk72
Copy link

Wyk72 commented Feb 12, 2022

I have same the problem, both PC/UEFI & QEMU/lkrnl. It seems this project is dead.

@pide2000
Copy link

Its about the cipher suites. You try to load from https, most servers don't support the (old) cipher suites of ipxe because of security issues.
For a full list see: https://ipxe.org/crypto

@clandmeter
Copy link
Member

@pide2000 you are correct, this is what i debugged last month but didnt find time to work out a solution.
The problem is that most of our front facing http proxies all have sane defaults, so i need to see if i can fix it differently.

@pide2000
Copy link

pide2000 commented Mar 17, 2022

Using this mirror works for us.
http://dl-cdn.alpinelinux.org/alpine
Because of imgverify it shouldn't be a problem to use plain http.
Perfect solution would be to implement modern cipher suites in ipxe but I think this wouldn't happen in the near future.

Sry, this is simply not true. The mirror above redirects to https, we use these mirrors in a later stage of the boot process where https ist provided by the OS. For now we provide the kernel and initrd from a local http server.
For testing purposes one might download the netboot version of alpine and start a http server in the folder where alpine kernel and initrd is located with python -m http.server 80

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants