ukify
Build and sign Unified Kernel Images (UKIs). tldr-pages
On Linux
Linux
Build a Unified Kernel Image
ukify build --linux path/to/vmlinuz --initrd path/to/initrd.img --cmdline "root=UUID=xxxx"IdentifyBuild a UKI with multiple initrd files
ukify build --linux path/to/vmlinuz --initrd path/to/initrd1.img --initrd path/to/initrd2.img --cmdline "root=UUID=xxxx"IdentifyBuild a UKI, specifying the output filename
ukify build --linux path/to/vmlinuz --initrd path/to/initrd.img --cmdline "root=UUID=xxxx" --output path/to/output.efiIdentifyBuild a UKI including CPU microcode
ukify build --linux path/to/vmlinuz --initrd path/to/initrd.img --microcode path/to/microcode.img --cmdline "root=UUID=xxxx"IdentifySign the UKI for Secure Boot
ukify build --linux path/to/vmlinuz --initrd path/to/initrd.img --cmdline "root=UUID=xxxx" --secureboot-private-key path/to/private_key.pem --secureboot-certificate path/to/certificate.pemIdentifyInspect a UKI file
ukify inspect path/to/uki.efiIdentifyGenerate signing keys
ukify genkey --secureboot-certificate-validity 365IdentifyDisplay help
ukify --helpIdentify