1.2 KiB
ukify
Build and sign Unified Kernel Images (UKIs). More information: https://www.freedesktop.org/software/systemd/man/latest/ukify.html.
- Build a Unified Kernel Image:
ukify build --linux {{path/to/vmlinuz}} --initrd {{path/to/initrd.img}} --cmdline "{{root=UUID=xxxx}}"
- Build a UKI with multiple initrd files:
ukify build --linux {{path/to/vmlinuz}} --initrd {{path/to/initrd1.img}} --initrd {{path/to/initrd2.img}} --cmdline "{{root=UUID=xxxx}}"
- Build a UKI, specifying the output filename:
ukify build --linux {{path/to/vmlinuz}} --initrd {{path/to/initrd.img}} --cmdline "{{root=UUID=xxxx}}" --output {{path/to/output.efi}}
- Build a UKI including CPU microcode:
ukify build --linux {{path/to/vmlinuz}} --initrd {{path/to/initrd.img}} --microcode {{path/to/microcode.img}} --cmdline "{{root=UUID=xxxx}}"
- Sign the UKI for Secure Boot:
ukify build --linux {{path/to/vmlinuz}} --initrd {{path/to/initrd.img}} --cmdline "{{root=UUID=xxxx}}" --secureboot-private-key {{path/to/private_key.pem}} --secureboot-certificate {{path/to/certificate.pem}}
- Inspect a UKI file:
ukify inspect {{path/to/uki.efi}}
- Generate signing keys:
ukify genkey --secureboot-certificate-validity {{365}}
- Display help:
ukify {{[-h|--help]}}