Name: docker-netbootxyz
Availability: InStock
Author: netbootxyz

GitHub Website

Docker ComposeCompose file & guide

$ docker compose up -d netbootxyz

Support

Updatedyesterday

LanguageShell

Setup difficultyAdvanced

Stars: 384
Ports: 3000 (Web configuration interface), 69 (TFTP service (UDP)), 80 (NGINX server for hosting assets)

Docker

ghcr.io/netbootxyz/netbootxyz

netboot.xyz web application interface showing boot menu options

What is docker-netbootxyz?

docker-netbootxyz packages netboot.xyz as a Docker container that runs a complete PXE boot environment. It includes a Node.js web application for editing iPXE menus on the fly, nginx for serving boot assets locally, dnsmasq for TFTP services, and syslog for TFTP activity logs. The container requires an external DHCP server configured to point clients to the container's TFTP service. Users can mirror OS installer images locally for faster boot times and create custom iPXE menus through the web interface. The image supports both x86_64 and ARM architectures and is configured via environment variables for ports, user/group IDs, and menu versions.

docker-netbootxyz alternatives

Should you self-host docker-netbootxyz?

docker-netbootxyz scores 56/100 on selfhost.directory (how scoring works) and ranks #10 of 31 in Networking. It has 384 GitHub stars.

It shipped 3 stable releases in the past year. The latest, 0.7.6-nbxyz16, came out on 15 March 2026.

Setup is advanced: plan for several services and some ongoing maintenance. An official Docker image is available. It is Apache-2.0-licensed and written mostly in Shell.

Its closest alternative on selfhost.directory is headscale (82/100, 45 185 stars). It scores higher overall, so compare the two before you pick. See docker-netbootxyz vs headscale side by side.

Features

Configurable menu versions
Custom iPXE menus
Local asset mirroring
NGINX asset hosting
TFTP server
UEFI Secure Boot support
User/group ID mapping
Volume persistence
Web-based menu editor

docker-netbootxyz

Overview

The netboot.xyz docker image allows you to easily set up a local instance of netboot.xyz. The container is a small helper application written in node.js. It provides a simple web interface for editing menus on the fly, retrieving the latest menu release of netboot.xyz, and enables mirroring the downloadable assets from Github to your location machine for faster booting of assets.

docker-netbootxyz releases & version history

I'm on

0.7.6-nbxyz16Release

3/15/2026 · 7 months ago

Merge pull request #126 from netbootxyz/renovate/docker-metadata-acti…

0.7.6-nbxyz130.7.6-nbxyz13: CI: Use native arm64 runner to fix QEMU build crash (#130)

3/15/2026 · 7 months ago

CI: Split into native per-arch build jobs to fix QEMU arm64 crash

The arm64 build was failing with 'Illegal instruction (core dumped)'
during npm install because QEMU user-mode emulation doesn't support
all arm64 instructions used by newer Node.js versions.

Split the single multi-platform build job into:

setup: determines tags, webapp version (shared via outputs)
build-amd64: builds on ubuntu-latest natively
build-arm64: builds on ubuntu-24.04-arm natively (no QEMU)
manifest: merges per-arch digests into multi-arch manifest
comment: posts PR test instructions

Both architectures get independent Trivy scans. The amd64 and arm64
builds run in parallel so total build time should be similar or faster.

Also pins Trivy CLI to v0.69.3 to work around deleted release assets
from the Trivy supply chain attack (aquasecurity/trivy#10265).

Address review feedback: fix BUILD_DATE, add permissions, add event fallback

Compute BUILD_DATE in setup job and pass as output instead of using
$(date) in build-args YAML which is not evaluated at runtime
Add explicit permissions block (contents:read, packages:write,
pull-requests:write) to limit GITHUB_TOKEN scope
Add else fallback in tag strategy for unsupported event types

Bump Alpine base image from 3.22.2 to 3.23.3 to clear Trivy CVEs
Fix Trivy CVEs: upgrade systeminformation to 5.31.0 and zlib to >=1.3.2

systeminformation 5.27.1->5.31.0: fixes CVE-2025-68154, CVE-2026-26280,
CVE-2026-26318 (command injection vulnerabilities)
zlib 1.3.1-r2->1.3.2: fixes CVE-2026-22184 (buffer overflow in untgz)

The systeminformation fix overrides the version pinned by the webapp
upstream (5.27.10) until that repo is updated.

Fix zlib upgrade: use apk --upgrade to ensure CVE-2026-22184 is resolved

The previous 'apk add zlib>=1.3.2' wasn't upgrading zlib because it
was already installed as a transitive dependency. Use --upgrade flag
to force apk to pull the latest available version (1.3.2-r0).

Fix Trivy arm64 scan: set TRIVY_PLATFORM to match image architecture

Trivy defaults to linux/amd64 when resolving remote image digests.
On the arm64 build job, the pushed digest is a single-platform arm64
image, so Trivy fails with 'no child with platform linux/amd64'.
Setting TRIVY_PLATFORM=linux/arm64 resolves this.

0.7.6-nbxyz12Release

3/15/2026 · 7 months ago

CI: Fix injection risk, tag validation, Trivy gating, and Dockerfile …

Even more releases RSS

FAQ

Will my favorite distribution work with netboot.xyz?

Most distributions work if they provide an installer kernel (vmlinuz), initramfs, and rootfs hosted on a mirror. The project maintains a CI/CD system to keep OS versions up to date.

What is PXE Booting?

PXE (Pre-Boot eXecution Environment) allows clients to boot from a server over the network, enabling automation before the system boots from its hard drive.

How does netboot.xyz work?

netboot.xyz uses iPXE to call a webserver hosting iPXE source files containing menus and logic for various Linux installers. When you select an OS, it retrieves images from project directories or trusted mirrors.

What is netboot.xyz?

netboot.xyz is a tool that allows you to boot your favorite Operating System's installer or various utilities over the network with minimal overhead from a single menu system.