diff --git a/pages/linux/ukify.md b/pages/linux/ukify.md new file mode 100644 index 0000000000..6a217ed5b4 --- /dev/null +++ b/pages/linux/ukify.md @@ -0,0 +1,36 @@ +# ukify + +> Build and sign Unified Kernel Images (UKIs). +> More information: . + +- Build a Unified Kernel Image: + +`ukify build --linux {{path/to/vmlinuz}} --initrd {{path/to/initrd.img}} --cmdline "{{root=UUID=xxxx}}"` + +- Build a UKI with multiple initrd files: + +`ukify build --linux {{path/to/vmlinuz}} --initrd {{path/to/initrd1.img}} --initrd {{path/to/initrd2.img}} --cmdline "{{root=UUID=xxxx}}"` + +- Build a UKI, specifying the output filename: + +`ukify build --linux {{path/to/vmlinuz}} --initrd {{path/to/initrd.img}} --cmdline "{{root=UUID=xxxx}}" --output {{path/to/output.efi}}` + +- Build a UKI including CPU microcode: + +`ukify build --linux {{path/to/vmlinuz}} --initrd {{path/to/initrd.img}} --microcode {{path/to/microcode.img}} --cmdline "{{root=UUID=xxxx}}"` + +- Sign the UKI for Secure Boot: + +`ukify build --linux {{path/to/vmlinuz}} --initrd {{path/to/initrd.img}} --cmdline "{{root=UUID=xxxx}}" --secureboot-private-key {{path/to/private_key.pem}} --secureboot-certificate {{path/to/certificate.pem}}` + +- Inspect a UKI file: + +`ukify inspect {{path/to/uki.efi}}` + +- Generate signing keys: + +`ukify genkey --secureboot-certificate-validity {{365}}` + +- Display help: + +`ukify {{[-h|--help]}}`