outputArtifacts type
This is a preview feature.
Its API and behavior is subject to change.
You must enable this feature by specifying output-artifacts
in the
previewFeatures API.
Specifies the configuration for the output directory containing the generated artifacts, including UKI PE images, shim, systemd-boot, and Verity hash files.
After Image Customizer outputs the selected artifacts, it will also generate a helper
configuration file named inject-files.yaml
under the same directory of output
artifacts. This file can later be used to inject signed artifacts back into an
image. For more details, see the injectFilesConfig
documentation.
Example:
output:
artifacts:
items:
- ukis
- shim
- systemd-boot
- verity-hash
path: ./output
previewFeatures:
- output-artifacts
Added in v0.14.
path [string]
Required.
Specifies the directory path where Image Customizer will output the selected artifacts.
Added in v0.14.
items [string[]]
Required.
Specifies the artifacts that will be output after the image customization.
Supported values:
ukis
– UKI PE images (vmlinuz-<version>.efi
).shim
– Bootloader shim executable (boot<arch>.efi
).systemd-boot
– Systemd-boot executable (systemd-boot<arch>.efi
).verity-hash
– Verity hash files associated with dm-verity protected partitions. Added in v0.16.
The output.artifacts
field must be used with the output-artifacts
enabled in previewFeatures
.
These artifacts are generated in an unsigned format and must be signed externally if required.
Supported architectures for shim and systemd-boot include x64 and arm64,
reflected in the <arch>
portion of the filenames.
The verity-hash
artifact will only be output if the corresponding Verity entry
defines a hashSignaturePath
. If the
hashSignaturePath
is not configured, Image Customizer will skip generating the
hash file for that Verity device. For more details, see the
verity
documentation.
Added in v0.14.