support uki

stylus_uki.yaml

@@ -0,0 +1,14 @@
+#cloud-config
+stages:
+  after-install:
+    - name: Run copy pub key after install commands
+      if: '[ -e "/run/cos/uki_install_mode" ]'
+      commands:
+        - echo "Copying public key to persistent path"
+        - umount /oem || true
+        - cryptsetup close /dev/mapper/oem
+        - /usr/lib/systemd/systemd-cryptsetup attach oem $(findfs PARTLABEL=oem) - tpm2-device=auto
+        - mount /dev/mapper/oem /oem
+        - cp /run/initramfs/live/.signing-public-key /oem/.signing-public-key
+        - umount /dev/mapper/oem
+        - cryptsetup close /dev/mapper/oem