# dnsmasq: DHCP + TFTP on eth1 only (provisioning LAN).
# Install to /etc/dnsmasq.d/network-boot.conf on the LXC.
# Restrict to eth1 so we don't interfere with host/other DHCP.

# Listen only on eth1 (provisioning LAN)
interface=eth1
bind-interfaces

# DHCP range for devices on eth1 (adjust if you use a different subnet)
dhcp-range=10.20.50.100,10.20.50.200,12h

# TFTP for Raspberry Pi / CM4 network boot
enable-tftp
tftp-root=/srv/tftpboot

# RPi 4 netboot: next-server is this host; boot filename (Pi firmware uses this)
# Option 66 = next-server (TFTP), 67 = boot filename
dhcp-option=66,10.20.50.1
dhcp-option=67,start4cd.elf

# Logging (optional; disable in production if too noisy)
log-dhcp
log-queries

# Do not use /etc/resolv.conf or act as DNS if you only want DHCP+TFTP
port=0