Initramfs is a specially crafted small root filesystem that mounted at the early stages of Linux OS boot process. This initramfs among other things is responsible for unlocking encrypted partitions and mounting it as a root filesystem.
Booster is a tool to create such early boot images. Booster is made with speed and full disk encryption use-case in mind.
Booster advantages:
- Fast image build time and fast boot time.
- Out-of-box support for full disk encryption setup.
- Clevis style data binding. The encrypted filesystem can be bound to TPM2 chip or to a network service. This helps to unlock the drive automatically but only if the TPM2/network service presents.
- Systemd-cryptenroll type of binding. Booster is able to detect and unlock systemd-fido2 and systemd-tpm2 style partitions.
- Supports autodiscoverable root partition
- Easy to configure.
- Automatic host configuration discovery. This helps to create minimalistic images specific for the current host.
There are other initramfs generators similar to booster: mkinitcpio and dracut.
Install booster package from the official repository.
At the installation time this package will create a number of booster images in your /boot/ directory:
$ ls -lh /boot/booster-*.img
-rwxr-xr-x 1 root root 3.9M Dec 10 20:51 /boot/booster-linux.imgInstall booster with xbps-install -S booster.
Run xbps-reconfigure -f linux to create the initramfs for a previously installed kernel.
Install booster using apk add booster.
Refer to /usr/share/doc/booster/README.alpine for bootloader configuration instructions (which depend on the desired setup).
Or optionally the image can be generated manually as booster build mybooster.img. Note that by default booster generates
host specific images with minimum binaries needed for the current host. Providing --universal flag to booster tool
will add more modules and tools and the result image will be bigger.
Once the image is generated it is time to configure the bootloader.
For usage instructions please see booster manpage using man booster or the same document available online.
The project consists of 3 components:
initbinary that runs as a part of your machine boot process. It is going to be the very first user process run at your machine.generatortool that creates ramfs image with all components needed to boot the computerintegration_teststests that involve all components and use QEMU to boot from a generated image
These components use standard Golang tooling. To build any part do go build, to run tests do go test.
cd {init,generator,integration_tests}
go test -vWork on this project has been started as a part of Twitter's hack week. Huge thanks to my employer for its support of open-source development. Special thanks to Ian Brown.
Booster architecture has been inspired by Michael Stapelberg's project called distri. Initial version of booster borrowed a lot of ideas from the distri's initramfs generator.
See license