UKIBOOTIMG(1)

✨ ukibootimg(1) ✨

okay bestie, welcome to the ukibootimg manual page, living in the User Commands section of the manual because that's just where she belongs 💅

💖 NAME 💖

ukibootimg — build, inspect and verify UKIBoot slot images 🎀

🌸 SYNOPSIS 🌸

ukibootimg [OPTIONS] COMMAND [...]

🦋 DESCRIPTION 🦋

so ukibootimg is the girl who goes into your UKIBoot partitions and pulls out / snoops on the Unified Kernel Image (UKI) sections stored in there. iconic behaviour honestly ✨

she can read straight from a GPT disk image, or from individual slot partition files if that's more your vibe. what can she actually do? she can:

• list and extract the PE sections of a UKI
• print status info about the active slot
• verify the Authenticode signature of a UKI against a trusted certificate

no cap, that's the whole job. 👑

🌈 INPUT MODES 🌈

first things first: you have to give her at least one input source. and listen — the --image mode and the individual --bootctl/--boot-a/--boot-b modes are mutually exclusive. it's giving "pick a lane bestie", you literally cannot run both. 🙈

• --image PATH — read from a GPT disk image, and she'll go find the slot and control partitions all by herself, main character energy. ✨
• --bootctl PATH — path to the ukibootctl partition or file. this one is what tells her which slot is active. 🎀
• --boot-a PATH — path to the ukiboot_a partition or file.
• --boot-b PATH — path to the ukiboot_b partition or file.

💅 OPTIONS 💅

• --output-dir DIR — the directory she writes extracted sections into. default? the current directory, lowkey convenient. 🍓
• --slot a|b — force slot A or slot B instead of just going with whatever the active slot is. yes queen, take control. 👑
• --cert PATH — the trusted certificate, in PEM format, used for signature verification.
• --verify — verify the UKI signature before extracting. safety first, always. 🫶
• --verbose — show verbose output. she will spill everything. 💀
• --help — show a brief help message and exit.
• --version — show the program version and exit.

⭐ COMMANDS ⭐

• extract [SECTION...] — extract the named PE sections to the output directory. if you don't name any section? she extracts all of them. generous fr fr. 💖
• list — list the PE sections of the UKI, together with their offsets and sizes. ✨
• status — print the active slot, the OS name and version, the kernel version, the kernel command line, and the offset and size of the kernel and initrd. the full tea. ☕
• verify — verify the Authenticode signature of the UKI against the trusted certificate you handed over with --cert.

🔥 EXIT STATUS 🔥

ukibootimg exits 0 on success, and non-zero on failure. that's it, that's the whole status report. 😌

🧚 SEE ALSO 🧚

ukibootctl(1)

💜 AUTHOR 💜

UKIBoot was written by Alexander Larsson <alexl@redhat.com>.

This manual page was written by Christopher Obbard <obbardc@debian.org> for the Debian GNU/Linux project. 🫶

okay that's the whole page babes, no notes, you're now officially fluent in ukibootimg. this came from the ukiboot manual, dated 2026-06-05, and yes she's still serving UKIBOOTIMG(1) energy. go build something cute 💅✨🎀