netbootxyz

0.7.6-ls222deprecated

netbootxyz is a way to PXE boot various operating system installers or utilities from one place within the BIOS without the need of having to go retrieve the media to run the tool. iPXE is used to provide a user friendly menu from within the BIOS that lets you easily choose the operating system you want along with any specific types of versions or bootable flags.

docker pull lscr.io/linuxserver/netbootxyz:latest

This image is deprecated

It is no longer maintained and receives no further updates. The details below are kept for reference; you can find maintained alternatives in the catalogue.

Quick start

Generated from the image's own configuration. Replace the /path/to folders with real paths on your host.

Include optional settings

---
services:
  netbootxyz:
    image: lscr.io/linuxserver/netbootxyz:latest
    container_name: netbootxyz
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - MENU_VERSION=1.9.9 # optional
      - PORT_RANGE=30000:30010 # optional
      - SUBFOLDER=/ # optional
      - NGINX_PORT=80 # optional
      - WEB_APP_PORT=3000 # optional
    volumes:
      - /path/to/netbootxyz/config:/config
      - /path/to/assets:/assets # optional
    ports:
      - 3000:3000
      - 69:69/udp
      - 8080:80 # optional
    restart: unless-stopped

Parameters

Ports
Port	Function	Required
3000:3000	Web configuration interface.	required
69:69/udp	TFTP Port.	required
8080:80	NGINX server for hosting assets.	optional

Environment variables
Variable	Function	Required
PUID=1000	User ID	required
PGID=1000	Group ID	required
TZ=Etc/UTC	Timezone	required
MENU_VERSION=1.9.9	Specify a specific version of boot files you want to use from NETBOOT.XYZ (unset pulls latest)	optional
PORT_RANGE=30000:30010	Specify the port range tftp will use for data transfers [(see Wikipedia)](https://en.wikipedia.org/wiki/Trivial_File_Transfer_Protocol#Details)	optional
SUBFOLDER=/	Specify a subfolder if running this behind a reverse proxy (IE /proxy/)	optional
NGINX_PORT=80	Specify a different internal port for the asset server	optional
WEB_APP_PORT=3000	Specify a different internal port for the configuration UI	optional

Volumes
Path	Function	Required
/config	Storage for boot menu files and web application config	required
/assets	Storage for NETBOOT.XYZ bootable assets (live CDs and other files)	optional

Architectures

Pulling :latest picks the right one for your host automatically.

x86_64amd64-latest
arm64arm64v8-latest

Changelog

17 May 2025
Deprecate
30 Jun 2024
Rebase to Alpine 3.20.
24 Feb 2024
Add new port settings for the webserver and app.

Browse all

wireguard

1.0.20260223-r0-ls127

WireGuard® is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPsec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. WireGuard is designed as a general purpose VPN for running on embedded interfaces and super computers alike, fit for many different circumstances. Initially released for the Linux kernel, it is now cross-platform (Windows, macOS, BSD, iOS, Android) and widely deployable. It is currently under heavy development, but already it might be regarded as the most secure, easiest to use, and simplest VPN solution in the industry.

1M3.6Karm64

unifi-network-application

10.6.106-ls151

The unifi-network-application software is a powerful, enterprise wireless software engine ideal for high-density client deployments requiring low latency and high uptime performance.

899K1.1Karm64

duckdns

8d8f7eba-ls94

duckdns is a free service which will point a DNS (sub domains of duckdns.org) to an IP of your choice. The service is completely free, and doesn't require reactivation or forum posts to maintain its existence.

772K376arm64

openssh-server

10.3_p1-r1-ls239

openssh-server is a sandboxed environment that allows ssh access without giving keys to the entire server. Giving ssh access via private key often means giving full access to the server. This container creates a limited and sandboxed environment that others can ssh into. The users only have access to the folders mapped and the processes running inside this container.

492K613arm64