What's New
Secure Boot Support
- Bundled Microsoft-signed shim bootloader (
bootimus-shimx64.efi,bootimus-shimaa64.efi) from iPXE v2.0.0 for UEFI Secure Boot environments. - No custom signing required — uses iPXE's official Secure Boot CA chain.
USB Boot Images
- Built-in USB boot images embedded in the binary for machines without PXE support.
- Downloadable directly from the admin UI under Settings > USB Boot Images.
- Standard BIOS/UEFI and Secure Boot variants included.
- Write to USB with
ddand boot — iPXE uses DHCP to find bootimus automatically.
ISO Organisation
- Folder-based groups: Drop ISOs into subdirectories and they automatically become groups/submenus in the boot menu. Nested folders create nested submenus.
- Groups can also be managed manually via the admin UI.
Admin UI
- Settings tab: Configure the boot menu title displayed to PXE clients.
- USB Boot Images section: Download bootable USB images directly from the admin panel.
Client Management
- Per-client menus: Clients with assigned images now see only those images. Unregistered clients or clients with no assignments see all public images.
ISO Compatibility
- TrueNAS SCALE: Kernel extraction now supported (root-level vmlinuz/initrd.img layout).
- Proxmox VE: Kernel extraction now supported (boot/linux26 layout).
- Manual extraction: Place
vmlinuzandinitrdindata/isos/<iso-name>/and bootimus detects them automatically on next scan. - Spaces in filenames: ISOs with spaces in their names are now properly URL-encoded in boot menus.
Docker / Build
- Makefile refactor: Clean targets —
make build,make run,make docker-build,make docker-up,make docker-push,make release,make binaries. - Unified buildx pipeline:
make binariesbuilds all platform binaries via docker buildx in one pass. - Configurable platforms:
make docker-push PLATFORMS=linux/amd64to skip slow arm64 cross-compilation. - Dockerfile fix: Fixed Debian Trixie compatibility — wimtools dependencies (libicu, libxml2) installed via apt-get instead of fragile manual .so copying. Fixes issues on Synology and other platforms. Thanks to @TheWorstTech for reporting.
- Single Dockerfile: Consolidated into a single multi-stage Dockerfile.
- iPXE pinned to v2.0.0: Bootloader builds pinned to known-good iPXE commit to avoid upstream regressions.
Bug Fixes
- Fixed ImageGroup unique index to allow same folder name under different parents.
- Fixed client menu not filtering to assigned images only.