booster icon indicating copy to clipboard operation
booster copied to clipboard

booster lack ability to generate a unified kernel image(uki) uki.efi

Open user7z opened this issue 1 year ago • 2 comments

i like to migrate to booster , but i cant know since uki is desired feature that elimante the bootloader , i home booster devs emplement it in their way to be customizable , and can uses diffrent stubs , not just the systemdstub , and to be integrated with booster inistialization with luks tokens(celvis) etc.. why uki is important ? it makes the use of UEFI capabilities : (direct boot , secure boot , tpm ,etc..) in simple way. also the uki complement encryption-use case , specifically fulldiskencryption (for securing /) & secureboot (for securing the unencrypted ESP) , uki makes it easy to sign bootfiles, since it combines them to a single .efi

user7z avatar Aug 18 '24 16:08 user7z

https://github.com/Zile995/booster-um idk if that helps but just give it a check

m4ks1oo avatar Aug 25 '24 21:08 m4ks1oo

Would be nice to have a kernel-install plugin. Then booster won't need to deal with sd-ukify. Fedora uses kernel-install (e.g. kernel-core's spec file / install script), and mkinitcpio and dracut both have a kernel-install plugin. Though Arch uses pacman hooks for individual initramfs generators. I think on Arch, to generate UKI, override the hook by placing one with the same name in /etc/pacman.d/hooks/ with the modification: (Maybe also add booster-linux.efi to the remove hook) https://github.com/anatol/booster/blob/6df7c60694103287bd53877399a3cbca4490c820/packaging/arch/90-booster-install.hook#L12

Exec = /usr/lib/booster/regenerate_uki build /boot

P.S. regenerate_uki is still not shipped in Arch because of the PKGBUILD.

EDIT: There is already a PR for kernel-install, somehow I didn't notice, sorry...

technobirb avatar Feb 09 '25 13:02 technobirb