Skip to content

Update to boot UKIs directly from ESP - #1042

Open
piyush-jena wants to merge 4 commits into
bottlerocket-os:developfrom
piyush-jena:uki-only/core-kit
Open

piyush-jena wants to merge 4 commits into
bottlerocket-os:developfrom
piyush-jena:uki-only/core-kit

Conversation

@piyush-jena

@piyush-jena piyush-jena commented Sep 10, 2026

Copy link
Copy Markdown
Contributor

Description of changes:

  • release: The UKI FIPS HMAC path moves to /boot/EFI/BOOT/.bottlerocket.efi.hmac (the UKI now lives at the ESP fallback path). Since, shim is not required for UKIs, it is made conditional.
  • prairiedog: prepare_boot() mounts ESP instead of XBOOTLDR on UKI images.
  • signpost: Replace the XBOOTLDR type-GUID constant and its resolvers with ESP equivalents.

Use twoliter PR bottlerocket-os/twoliter#742 for reference

Testing done: See twoliter bottlerocket-os/twoliter#745.

  • Build this with old twoliter and then build aws-k8s-1.36 AMI ✅

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.

Signed-off-by: Piyush Jena <jepiyush@amazon.com>
Signed-off-by: Piyush Jena <jepiyush@amazon.com>
Comment thread packages/release/release.spec
Comment thread sources/api/prairiedog/src/error.rs
Signed-off-by: Piyush Jena <jepiyush@amazon.com>
Signed-off-by: Piyush Jena <jepiyush@amazon.com>
@piyush-jena
piyush-jena marked this pull request as ready for review September 16, 2026 14:47
@piyush-jena

Copy link
Copy Markdown
Contributor Author

I will merge it post twoliter merge.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants