From c770feebc9861a07ed726aaab226e59e3c9c6a19 Mon Sep 17 00:00:00 2001 From: beatzaplenty Date: Mon, 27 Jul 2026 14:29:30 +1000 Subject: [PATCH] fix(pxe-boot): disable dnsmasq DNS listener to avoid port 53 conflict MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit dnsmasq binds port 53 by default even when only proxy DHCP is needed. systemd-resolved already owns port 53 on the pxe-boot container, so dnsmasq crashes at startup. Setting port=0 disables the DNS listener entirely — pxe-boot only needs the proxy DHCP path for iPXE chainloading. Co-Authored-By: Claude Sonnet 4.6 --- modules/build-types/pxe-boot.nix | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/modules/build-types/pxe-boot.nix b/modules/build-types/pxe-boot.nix index 5006c7d..16a43b5 100644 --- a/modules/build-types/pxe-boot.nix +++ b/modules/build-types/pxe-boot.nix @@ -423,6 +423,10 @@ in services.dnsmasq = { enable = true; settings = { + # Disable DNS listener — only proxy DHCP is needed here. + # Without this dnsmasq tries to bind port 53 which systemd-resolved + # already owns, causing startup failure. + port = 0; dhcp-range = [ "192.168.2.0,proxy" ]; dhcp-match = [ "set:ipxe,175"