From a7b476b3fcd8e81d3c8413fbf7035c38bc9c3cd0 Mon Sep 17 00:00:00 2001 From: Markus Hilger Date: Wed, 5 Aug 2026 03:17:41 +0200 Subject: [PATCH] Ignore UEFI HTTP boot on ProxyDHCP port --- confluent_server/confluent/discovery/protocols/pxe.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/confluent_server/confluent/discovery/protocols/pxe.py b/confluent_server/confluent/discovery/protocols/pxe.py index 5fae0159..c09829e6 100644 --- a/confluent_server/confluent/discovery/protocols/pxe.py +++ b/confluent_server/confluent/discovery/protocols/pxe.py @@ -317,11 +317,14 @@ async def proxydhcp(handler, nodeguess): node, ('deployment.*', 'collective.managercandidates')) if disco['arch'] is None: continue + if disco['arch'] == 'uefi-httpboot': + # HTTP boot is offered by the DHCP path, not proxyDHCP + continue insecuremode = cfd.get(node, {}).get('deployment.useinsecureprotocols', {}).get('value', 'never') if not insecuremode: insecuremode = 'never' - if insecuremode == 'never' and disco['arch'] != 'uefi-httpboot': + if insecuremode == 'never': if not skiplogging: log.log( {'info': 'Boot attempt by {0} detected in insecure mode, but '