# dnsmasq: DHCP + TFTP on eth1 only (provisioning LAN). # Install to /etc/dnsmasq.d/network-boot.conf on the LXC. # Restrict to eth1 so we don't interfere with host/other DHCP. # Listen only on eth1 (provisioning LAN) interface=eth1 bind-interfaces # DHCP range for devices on eth1 (adjust if you use a different subnet) dhcp-range=10.20.50.100,10.20.50.200,12h # TFTP for Raspberry Pi / CM4 network boot enable-tftp tftp-root=/srv/tftpboot # PXE options (66/67) are in network-boot-pxe.conf; remove that file to disable netboot advertising # Logging (optional; disable in production if too noisy) log-dhcp log-queries # Do not use /etc/resolv.conf or act as DNS if you only want DHCP+TFTP port=0