Modernized Netboot

With the September 2025 release we are delivering major improvements in Netboot.
The result: easier operation, higher security, and the foundation for many exciting innovations in upcoming versions.

What’s new?

1. Simpler configuration

Configuring up Netboot used to be complex and spread across several configuration files. It is now clearly handled via host parameters that are grouped in the opsi-configed under a new netboot menu.

• Values set on depots automatically apply as defaults for all clients.
• Individual clients can override parameters when needed.

2. New opsi-linux-bootimage

The heart of opsi Netboot has been modernized:

• Now based on Ubuntu 25.04 and the current Linux kernel 6.16
• Support for ARM64 hardware – a first step towards operating system installations on ARM64 hardware
• Faster startup and redesigned splash screen
• Significantly improved support for languages, keyboard layouts and time zones

In short: more modern, faster and more flexible than ever.

3. Higher security

Security features have also been extended:

• Password protection for the GRUB boot menu
• Automatically generated secure root passwords in the boot image
• SSH server disabled by default
• Support for host one-time passwords for additional security

4. Improved directory structure

We completely revised the structure of the boot directory:

• Unified naming scheme for all boot files
• Clear assignment of architecture and BIOS type
• Backwards compatibility via symlinks

This makes storage clearer and simplifies extension for future platforms.

5. More flexibility for Netboot products

Most Netboot products continue to run via the opsi-linux-bootimage.
If desired you can now integrate custom boot images – for tools like MemTest86 or Desinfec’t.
Integration is simpler and the new Jinja-based configuration templates open up brand new possibilities.

if [ "$grub_platform" = "efi" ]; then
    menuentry 'Starting MemTest86+ EFI' --class firmware --unrestricted {
        linux (${bootsrc})/opsi/memtest86/memtest64.efi {{ product_property_states.cmdline() }}
    }
else
    menuentry 'Starting MemTest86+ BIOS' --class firmware --unrestricted {
        linux (${bootsrc})/opsi/memtest86/memtest64.bin {{ product_property_states.cmdline() }}
    }
fi

6. Updated documentation

Of course the official opsi documentation has been updated.
New: a practical guide for debugging network boot issues.

Looking ahead

With this release we lay the groundwork for upcoming innovations:

• Full operating system installations on ARM64
• Better support for Docker and cloud environments
• Simplified integration via Proxy-DHCP
• PXE boot via HTTP

This version greatly simplifies daily work and makes Netboot fit for the future.