[scanner] fix: publish PXE boot artifacts (#23)

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: kubestellar-hive[bot]

Justfile

@@ -109,12 +109,20 @@ cluster-build REF="main":
 export-installer: build-installer
     rm -rf dist/installer-checkout
     mkdir -p dist dist/installer-checkout
-    rm -f dist/bluefin-server-installer-*.raw.zst dist/bluefin-server-*.efi dist/SHA256SUMS
+    rm -f dist/bluefin-server-installer-*.raw.zst dist/bluefin-server-*.efi dist/bluefin-server-pxe-* dist/SHA256SUMS
     just bst artifact checkout oci/bluefin-server-installer.bst --directory /src/dist/installer-checkout
     mv dist/installer-checkout/* dist/
     rm -rf dist/installer-checkout
     @echo "==> wrote:" && ls -lh dist/
 
+# Export standalone kernel and initrd for PXE boot. The DDI remains embedded
+# in the raw installer image; network DDI fetching is not enabled.
+[group('installer')]
+export-pxe: export-installer
+    @test -n "$(find dist/ -maxdepth 1 -type f -name 'bluefin-server-pxe-vmlinuz-*' -print -quit)" || { echo "ERROR: PXE kernel was not exported." >&2; exit 1; }
+    @test -n "$(find dist/ -maxdepth 1 -type f -name 'bluefin-server-pxe-initrd-*.cpio.gz' -print -quit)" || { echo "ERROR: PXE initrd was not exported." >&2; exit 1; }
+    @echo "==> wrote PXE artifacts:" && ls -lh dist/bluefin-server-pxe-*
+
 # -- k3s systemd-sysext -------------------------------------------------------
 # Produces a systemd-sysext extension image for k3s.
 

docs/skills/ddi-installer.md

@@ -24,8 +24,7 @@ metadata:
 - OCI-only image work (no installer involvement).
 - Bootc-specific changes.
 - Desktop or nspawn machine image work.
-- Adding a network-pull installer — the design is offline; the DDI is embedded as
-  a data partition.
+- Adding network DDI fetching — the DDI remains embedded as a data partition.
 
 ## Architecture
 
@@ -135,6 +134,24 @@ This is the gist of the process:
 For the detailed build/export/flash/release workflow, see
 [ddi-installer-build.md](ddi-installer-build.md).
 
+## PXE boot artifacts
+
+The installer build also publishes standalone PXE inputs:
+
+- `bluefin-server-pxe-vmlinuz-<ver>` — installer kernel.
+- `bluefin-server-pxe-initrd-<ver>.cpio.gz` — installer initrd.
+
+Both files are included in the installer artifact `SHA256SUMS`. PXE clients can
+boot them with the same command line used by the installer UKI, for example:
+
+```text
+systemd.unit=system-install.target console=tty0 console=ttyS0,115200 rw unattended
+```
+
+The DDI is still required on `bluefin-installer-data`; standalone network DDI
+fetching is not supported yet. Use the raw installer image for complete,
+offline installation.
+
 ## Common Rationalizations
 
 | Rationalization | Reality |

elements/oci/bluefin-server-installer.bst

@@ -316,7 +316,13 @@ config:
 
       # Also export the target UKI (.efi) for GitHub Releases and systemd-sysupdate
       cp /layer/usr/lib/bluefin-server/bluefin-server.efi "bluefin-server-%{installer-version}.efi"
+      # Export raw PXE inputs alongside the UKI. PXE users supply their own
+      # kernel command line, so these remain separate from the fixed-cmdline UKI.
+      cp /layer/boot/vmlinuz "bluefin-server-pxe-vmlinuz-%{installer-version}"
+      cp /installer.cpio.gz "bluefin-server-pxe-initrd-%{installer-version}.cpio.gz"
 
       sha256sum --binary "${FNAME}.zst" > SHA256SUMS
       sha256sum --binary "bluefin-server-%{installer-version}.efi" >> SHA256SUMS
+      sha256sum --binary "bluefin-server-pxe-vmlinuz-%{installer-version}" >> SHA256SUMS
+      sha256sum --binary "bluefin-server-pxe-initrd-%{installer-version}.cpio.gz" >> SHA256SUMS
       ls -lh