[UEFI Ipxe] After a boot failure, the machine will automatically restart after 5 minutes in the setup interface

[Feng-zero]

BIOS booted up and loaded the optionROM from NIC. In the Save&exit interface, I entered the IPxe boot, but failed to boot(Caused by server configuration issues) and returned to the BIOS setup interface. I operated on the interface for 5 minutes, but the watchdog triggered the action of restarting the machine. Is this a normal mechanism?
Is it set by: https://github.com/ipxe/ipxe/blob/master/src/interface/efi/efi_watchdog.c ?

[NiKiZe]

iPXE should initialize the watchdog timer yes.
But it should also shutdown on exit, see comment in https://github.com/ipxe/ipxe/blob/master/src/interface/efi/efi_watchdog.c#L95

[Feng-zero]

In my testing scenario, the BIOS did not exit, but instead returned to the setup interface due to an IPxe boot failure. So the ExitBootServices() interface of optionrom was not called, but the 5-minute watchdog is still running.

[Feng-zero]

I enter ipxe boot in Boot Override.

[mcb30]

BIOS booted up and loaded the optionROM from NIC. In the Save&exit interface, I entered the IPxe boot, but failed to boot(Caused by server configuration issues) and returned to the BIOS setup interface. I operated on the interface for 5 minutes, but the watchdog triggered the action of restarting the machine. Is this a normal mechanism?

After exiting from iPXE, it is the responsibility of the platform firmware to either cancel the watchdog timer, or to periodically reset the timer. You can see the relevant code in EDK2 at https://github.com/tianocore/edk2/blob/master/MdeModulePkg/Library/UefiBootManagerLib/BmLoadOption.c#L1485-L1502

Is it set by: https://github.com/ipxe/ipxe/blob/master/src/interface/efi/efi_watchdog.c ?

iPXE will periodically reset the watchdog timer while iPXE itself is running, in order to prevent the system from rebooting after five minutes spent inside iPXE (e.g. waiting at the iPXE shell prompt for user interaction).

It sounds as though your platform firmware may have a bug in that it fails to either cancel the watchdog timer or to periodically reset the watchdog timer. (Alternatively, it's possible that your firmware vendor made a deliberate choice to treat five minutes of inactivity as indicating that the system ought to be rebooted.)

[Feng-zero]

Thanks for your answers. My firmware should be problematic, thank you very much!