Signed boot-stage artifacts for ZFS-on-LUKS hosts — encrypted-keyfile unlock, boot-environment picker with kexec handoff, and rescue/install mode.
Install the userland tools (every artifact is minisign-verified before it runs):
curl -fsSL https://packages.osterman.co/keyboot/install | sh
Add -s -- --rescue to also stage the installer + boot image:
curl -fsSL https://packages.osterman.co/keyboot/install | sh -s -- --rescue
Or use a native package repo (see the release +
docs/native-repos.md): apk ·
deb · gentoo overlay.
The keyboot binary is a single fully-static build that runs on
Alpine, Debian, and Gentoo alike.
Current release: v0.1.1
· install.sh
· pin a version with KEYBOOT_VERSION=v0.1.1