Nahum Shalman

I think we at Equinix Metal need to get this unblocked. It might take us longer than ideal to fully pivot off these bits. The two main options in my...

> I noticed that [ipxe/ipxe#116](https://github.com/ipxe/ipxe/pull/116) was merged. I believe this should be fixable by simply upgrading which version of ipxe we use. Uh, am I missing something? It doesn't look...

I'm not sure. I think we've worked around this in our production environment by preferring the alternate chain. I *think* we can wait-and-see a little longer in case upstream finally...

@NiKiZe replied > At least add a test case showing the issue. I'm guessing it wasn't immediately obvious to @chschenk how to write such a test case, nor is it...

> Yalright, well, just let me know when it's finally done with no TODOs left, and I'm happy to review it. Looking forward to your review when you have the...

> Fastly uses the `DST Root CA X3` cross-signed certificate as of writing. So no one can load any of the published Alpine Linux netboot images from https://dl-cdn.alpinelinux.org, or anything...

> Just to have all data..., which version of iPXE are you using here? Manually built from 1d1cf74a5e58811822bee4b3da3cff7282fcdfca

> That is current git master, and matching your output from working test? If so it is already properly fixed? Both are builds of current git master (at least at...

> FYI, I disconnected the crate for tonic from the workspace until tonic migrate/upgrade to `hyper` 1.0,... (`http`, `axum`). This disconnection allows to upgrade the other crates of the workspace....

Noting for myself... This PR conflicts with #64. I tagged a version that I used with Tailscale 1.36 here: https://github.com/nshalman/wireguard-go/releases/tag/tailscale-1.36.0 / https://github.com/nshalman/wireguard-go/commit/0d59a42bb75d113d1ab95fbbbf7dcf66affb4c01 Not sure if @zx2c4 has a preference on...