bootc-install - Man Page

Install to the target block device


bootc-install [--wipe] [--block-setup] [--filesystem] [--root-size] [--target-transport] [--target-imgref] [--target-no-signature-verification] [--target-ostree-remote] [--skip-fetch-check] [--disable-selinux] [--karg] [-h|--help] [-V|--version] <DEVICE>


Install to the target block device



Automatically wipe all existing data on device

--block-setup=BLOCK_SETUP [default: direct]

Target root block device setup.

direct: Filesystem written directly to block device tpm2-luks: Bind unlock of filesystem to presence of the default tpm2 device.

[possible values: direct, tpm2-luks]


Target root filesystem type

[possible values: xfs, ext4, btrfs]


Size of the root partition (default specifier: M).  Allowed specifiers: M (mebibytes), G (gibibytes), T (tebibytes).

By default, all remaining space on the disk will be used.

--target-transport=TARGET_TRANSPORT [default: registry]

The transport; e.g. oci, oci-archive.  Defaults to `registry`


Specify the image to fetch for subsequent updates


Explicitly opt-out of requiring any form of signature verification


Enable verification via an ostree remote


By default, the accessiblity of the target image will be verified (just the manifest will be fetched). Specifying this option suppresses the check; use this when you know the issues it might find are addressed.

Two main reasons this might fail:

- Forgetting `--target-no-signature-verification` if needed - Using a registry which requires authentication, but not embedding the pull secret in the image.


Disable SELinux in the target (installed) system.

This is currently necessary to install *from* a system with SELinux disabled but where the target does have SELinux enabled.


Add a kernel argument

-h,  --help

Print help (see a summary with '-h')

-V,  --version

Print version


Target block device for installation.  The entire device will be wiped



Referenced By


bootc 0.1.0