<story><title>Build Initramfs Rootless</title><url>https://blog.izissise.net/posts/initramfs/</url></story><parent_chain></parent_chain><comment><author>bradfa</author><text>If you want devtmpfs mounted automatically by the kernel within an initramfs, then you may need to patch your kernel slightly, like: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;lore.kernel.org&amp;#x2F;lkml&amp;#x2F;25e7e777-19f9-6280-b456-6c9c782c7901@landley.net&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;lore.kernel.org&amp;#x2F;lkml&amp;#x2F;25e7e777-19f9-6280-b456-6c9c782...&lt;/a&gt;&lt;p&gt;By default the kernel will not mount devtmpfs automatically within an initramfs, even if you&amp;#x27;ve configured your kernel to automatically mount devtmpfs, because it waits until the real rootfs has been mounted to do it.  This is fine unless you never plan to actually mount a real rootfs as you&amp;#x27;ve made your initramfs have everything a normal rootfs would have and you want devtmpfs to Just Work.</text></comment>
<story><title>Build Initramfs Rootless</title><url>https://blog.izissise.net/posts/initramfs/</url></story><parent_chain></parent_chain><comment><author>lrvick</author><text>Here is a tiny containerized and deterministic Linux build process with a minimal init system in rust for secure enclaves:&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;git.distrust.co&amp;#x2F;public&amp;#x2F;enclaveos&amp;#x2F;src&amp;#x2F;branch&amp;#x2F;master&amp;#x2F;Containerfile&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;git.distrust.co&amp;#x2F;public&amp;#x2F;enclaveos&amp;#x2F;src&amp;#x2F;branch&amp;#x2F;master&amp;#x2F;C...&lt;/a&gt;&lt;p&gt;And another one for a simple busybox based ISO for airgap operations:&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;git.distrust.co&amp;#x2F;public&amp;#x2F;airgap&amp;#x2F;src&amp;#x2F;branch&amp;#x2F;stagex-rewrite&amp;#x2F;Containerfile&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;git.distrust.co&amp;#x2F;public&amp;#x2F;airgap&amp;#x2F;src&amp;#x2F;branch&amp;#x2F;stagex-rewr...&lt;/a&gt;&lt;p&gt;Making Linux images for server&amp;#x2F;appliance use cases is always more secure and almost always easier than trying to adapt workstation distros like debian. Lots of ways to do it depending on your tooling preferences.</text></comment>