@Sebastian-Roth Thanks that all makes sense.
Thanks Sebastian — from my point of view I could still get rid of TFTP by recognizing either UEFI HTTP Boot (physical hardware) or existing iPXE ROM (in my Nutanix VM) vi DHCP headers (vendor class / user class) and in either case chainload the FOG iPXE binary (with “params” enabled) via HTTP and eventually perhaps HTTPS.
This should be pretty straightforward, I’ll see if I can work it out and I’ll post back - may be worth a wiki article.
Now … the next item to tackle would be replacing FTP (vsftpd) with SFTP
Feel free to close this thread if it’s no longer appropriate as a “feature request”.