3 ms·

> Why would you ever trust something like this that will helpfully pull images from the internet? How is that different than pulling an ISO image of your favor

by LeonM 2y ago

> Why would you ever trust something like this that will helpfully pull images from the internet? How is that different than pulling an ISO image of your favorite distro, or using a package manager like apt? Yes, I know that Linux ISOs have checksums and apt uses digital signatures, but so does iPXE. The only difference here would be that for some reason you trust the websites of your Linux distro vendor, but not netboot.xyz?

martinflack 2y ago
> you trust the websites of your Linux distro vendor, but not netboot.xyz Well... yeah... that's not that crazy of a position to take. Not saying there's anything wrong with netboot.xyz, but it's a question of how many cooks to let in the kitchen, and how many public eyes are on each cook.
- deleted 2y ago
  [deleted]
kelnos 2y ago
> The only difference here would be that for some reason you trust the websites of your Linux distro vendor, but not netboot.xyz? "Some" reason? I think I'd have a very good reason to place much more trust in the Debian folks than some guy who runs some random netbooting website.
- fragmede 2y ago
  just because you're one of today's lucky 10,000, that shouldn't impugne the project. It's been around since 2016. if you need verified boot, you'd not be using this in the first place.
akira2501 2y ago
> How is that different than pulling an ISO image of your favorite distro, or using a package manager like apt? "Some iPXE builds do not support HTTPS connections. If you get an "Operation not supported" error message, run this instead: chain --autofree http://boot.netboot.xyz http://boot.netboot.xyz" Which.. think about that advice for a minute.
troad 2y ago
> for some reason you trust the websites of your Linux distro vendor, but not netboot.xyz? I'm not going to lie, this made me laugh out loud. "For some reason, you trust a doctor to perform surgery on you, but not this lovely man that I met on the subway?!"

by LeonM 2y ago

martinflack 2y ago

> you trust the websites of your Linux distro vendor, but not netboot.xyz Well... yeah... that's not that crazy of a position to take. Not saying there's anything wrong with netboot.xyz, but it's a question of how many cooks to let in the kitchen, and how many public eyes are on each cook.

deleted 2y ago
[deleted]

kelnos 2y ago

> The only difference here would be that for some reason you trust the websites of your Linux distro vendor, but not netboot.xyz? "Some" reason? I think I'd have a very good reason to place much more trust in the Debian folks than some guy who runs some random netbooting website.

fragmede 2y ago
just because you're one of today's lucky 10,000, that shouldn't impugne the project. It's been around since 2016. if you need verified boot, you'd not be using this in the first place.

akira2501 2y ago

> How is that different than pulling an ISO image of your favorite distro, or using a package manager like apt? "Some iPXE builds do not support HTTPS connections. If you get an "Operation not supported" error message, run this instead: chain --autofree http://boot.netboot.xyz http://boot.netboot.xyz" Which.. think about that advice for a minute.

troad 2y ago

> for some reason you trust the websites of your Linux distro vendor, but not netboot.xyz? I'm not going to lie, this made me laugh out loud. "For some reason, you trust a doctor to perform surgery on you, but not this lovely man that I met on the subway?!"