Reduce UKI size etc

README.md

@@ -21,3 +21,14 @@ mkosi
 ```
 mkosi --architecture=x86-64 --compress-output=no --force qemu
 ```
+
+
+### How to create credentials
+
+See https://www.freedesktop.org/software/systemd/man/latest/systemd.system-credentials.html
+
+**NOTE:** --with-key=null requires systemd v256
+
+```
+systemd-creds encrypt --with-key=null --name=network.hosts <(echo 127.0.0.1 localhost) /efi/loader/credentials/network.hosts.cred
+```

mkosi.conf

@@ -1,6 +1,12 @@
 [Config]
 MinimumVersion=24
-Dependencies=base,boot
+Profile=disk
+
+[Output]
+OutputDirectory=mkosi.output
+CacheDirectory=mkosi.cache
+BuildDirectory=mkosi.builddir
+#WorkspaceDirectory=mkosi.workspace
 
 [Distribution]
 Architecture=arm64
@@ -11,14 +17,6 @@ Release=trixie
 WithNetwork=yes
 BaseTrees=
     %O/base_%v
-ExtraTrees=
-    %O/boot_%v/efi:/efi
-    %O/boot_%v/boot:/boot
-    %O/boot_%v/usr/lib/modules:/usr/lib/modules
-Bootable=no
-RemoveFiles=
-    /boot/vmlinu*
-    /usr/lib/modules/*/vmlinu*
 
 [Host]
 Incremental=yes
@@ -43,20 +41,5 @@ QemuMem=4G
 #	# Disable the kernel's ratelimiting on userspace logging to kmsg.
 #	printk.devkmsg=on
 
-[Output]
-OutputDirectory=mkosi.output
-CacheDirectory=mkosi.cache
-BuildDirectory=mkosi.builddir
-#WorkspaceDirectory=mkosi.workspace
-ImageId=system
-Output=%i_%v
-CompressOutput=no
-CompressLevel=0
-Format=disk
-SplitArtifacts=yes
-
 [Validation]
 Checksum=no
-SecureBoot=yes
-SecureBootKey=mkosi.key
-SecureBootCertificate=mkosi.crt

mkosi.finalize

@@ -1,3 +1,9 @@
 #!/bin/bash -e
 
 #cp $BUILDROOT/efi/EFI/Linux/*.efi $OUTPUTDIR/
+
+kver=$(basename $BUILDROOT/usr/lib/modules/*)
+if zcat -t $BUILDROOT/usr/lib/modules/$kver/vmlinuz ; then
+  mv $BUILDROOT/usr/lib/modules/$kver/{vmlinuz,vmlinuz.gz}
+  gzip -d $BUILDROOT/usr/lib/modules/$kver/vmlinuz.gz
+fi

mkosi.images/base/mkosi.conf

@@ -1,7 +1,10 @@
+[Output]
+Output=base_%v
+Format=tar
+CompressOutput=no
+CompressLevel=0
+
 [Content]
-Locale=en_US.UTF-8
-Keymap=fi
-Timezone=Europe/Helsinki
 WithDocs=no
 Bootable=no
 ExtraTrees=
@@ -52,20 +55,3 @@ Packages=
     util-linux
     xz-utils
     zstd
-
-Environment=
-	SYSTEMD_REPART_MKFS_OPTIONS_VFAT="-S 512"
-
-KernelCommandLine=
-	console=ttyAMA0
-	ipv6.disable=1
-	fstab=no
-	mount.usrflags=noatime
-	systemd.swap=no
-	rw
-
-[Output]
-Output=base_%v
-Format=tar
-CompressOutput=no
-CompressLevel=0

mkosi.postoutput

@@ -0,0 +1,5 @@
+#!/bin/bash -e
+
+#ln -sf boot_${IMAGE_VERSION}.efi $OUTPUTDIR/${IMAGE_ID}_${IMAGE_VERSION}.efi
+
+ls -la $OUTPUTDIR

mkosi.profiles/conf/mkosi.conf

@@ -0,0 +1,9 @@
+[Config]
+Dependencies=base
+
+[Output]
+Format=directory
+Overlay=yes
+ImageId=%p
+Output=%i_%v
+SplitArtifacts=yes

mkosi.profiles/disk/mkosi.conf

@@ -0,0 +1,63 @@
+[Config]
+Dependencies=base
+
+[Output]
+ImageId=system
+Output=%i_%v
+CompressOutput=no
+CompressLevel=0
+Format=disk
+SplitArtifacts=yes
+
+[Content]
+Packages=
+    linux-image-arm64
+RemoveFiles=
+    /boot/vmlinu*
+Locale=en_US.UTF-8
+Keymap=fi
+Timezone=Europe/Helsinki
+Environment=
+	SYSTEMD_REPART_MKFS_OPTIONS_VFAT="-S 512"
+    SYSTEMD_ESP_PATH=/efi
+Bootable=yes
+Bootloader=systemd-boot
+UnifiedKernelImageFormat=%i_%v
+KernelModulesInitrdExclude=
+    .*
+KernelModulesInitrdInclude=
+    default
+    raspberrypi
+    /bcm2835_wdt.ko
+    /bcm2711_thermal.ko.xz
+    /vc4.ko
+    /v3d.ko
+    /dwc2.ko
+    /genet.ko
+    /sdhci.ko
+    /uas.ko
+    /usb-storage.ko
+    /xhci-pci.ko
+    /phy-generic.ko.xz
+KernelModulesExclude=
+    sound
+    bluetooth
+    wireless
+    drivers/net/ethernet
+KernelModulesInclude=
+    drivers/net/ethernet/broadcom/genet/genet
+KernelCommandLine=
+	console=ttyAMA0
+	ipv6.disable=1
+	fstab=no
+	mount.usrflags=noatime
+	systemd.swap=no
+	rw
+#   rd.debug
+#   #systemd.log_level=debug
+#   systemd.log_target=console
+
+[Validation]
+SecureBoot=yes
+SecureBootKey=%D/mkosi.key
+SecureBootCertificate=%D/mkosi.crt