engineering: make Azure Container Linux images installable (inline dm-verity, ESP staging) - #754

Draft

Paco Huelsz (frhuelsz) wants to merge 9 commits into

mainfrom

user/frhuelsz/inline-verity

Commits on Sep 2, 2026

engineering: support inline dm-verity in COSI-derived Host Configurations

Paco Huelsz (frhuelsz)
and
Copilot
committed
9fd2349
docs: do not document inline dm-verity in the public API reference

Paco Huelsz (frhuelsz)
and
Copilot
committed
4b0d55b
docs(cosi): document the `hashOffset` field of `VerityConfig`

Paco Huelsz (frhuelsz)
and
Copilot
committed
ceccfdd
bug: create the ESP staging directory when the OS image omits it

Paco Huelsz (frhuelsz)
and
Copilot
committed
14ebffc
bug: only require a verity addon template when the image ships them

Paco Huelsz (frhuelsz)
and
Copilot
committed
914dbf1
bug: gate verity addon activation on verity being inline

Paco Huelsz (frhuelsz)
and
Copilot
committed
2074a44
bug: do not write fstab for UKI images using usr-verity

Paco Huelsz (frhuelsz)
and
Copilot
committed
8a965d0
engineering: warn on a hash offset given with a separate hash image

Paco Huelsz (frhuelsz)
and
Copilot
committed
652a9b2
bug: preserve the ESP image's filesystem label

Paco Huelsz (frhuelsz)
and
Copilot
committed
d1cfc98