engineering: make Azure Container Linux images installable (inline dm-verity, ESP staging) - #754

Draft

Paco Huelsz (frhuelsz) wants to merge 8 commits into

mainfrom

user/frhuelsz/inline-verity

Commits on Sep 11, 2026

engineering: support inline dm-verity in COSI-derived Host Configurations

Paco Huelsz (frhuelsz)
and
Copilot
committed
b2da1d3
docs: do not document inline dm-verity in the public API reference

Paco Huelsz (frhuelsz)
and
Copilot
committed
f276504
docs(cosi): document the `hashOffset` field of `VerityConfig`

Paco Huelsz (frhuelsz)
and
Copilot
committed
7fe155b
bug: only require a verity addon template when the image ships them

Paco Huelsz (frhuelsz)
and
Copilot
committed
9ffe488
bug: gate verity addon activation on verity being inline

Paco Huelsz (frhuelsz)
and
Copilot
committed
531c458
bug: do not write fstab for UKI images using usr-verity

Paco Huelsz (frhuelsz)
and
Copilot
committed
786a2a8
engineering: warn on a hash offset given with a separate hash image

Paco Huelsz (frhuelsz)
and
Copilot
committed
355111e
bug: preserve the ESP image's filesystem label

Paco Huelsz (frhuelsz)
and
Copilot
committed
829b846