UKI creation problems with Genkernel and Dracut

[MrSnivvel]

I'm using a UKI (Unified Kernel Image) to boot directly from UEFI on my system that I'm currently creating using Genkernel. For the most part works, but has to be ran a second time to actually build the kernel image completely because it fails with a message that '/lib/modules/${kernel_version}' does not for creating the initramfs. My workaround is to manually do make modules ; make modules_install and re-run Genkernel which rebuilds the kernel again. I don't see an option in the genkernel.conf to either enable those steps or just make genkernel realize that a UKI doesn't use modules.

genkernel.conf (with comments, whitespace removed)

[AndrewAmmerlaan]

[Screenager]

[Hu]

Regarding https://wiki.gentoo.org/wiki/User:Screenager/install/encrypted_detached_header_lvm_unified_gentoo_kernel_image_customized_dracut#Configuring_and_modifying_dracut :

If you only want to use the password once and then discard it, then letting cryptsetup read from the keyboard is a better solution than loading it into the shell and making the shell pass it to cryptsetup. Also, note that the comment removes password from memory is probably wrong. There is no guarantee that unsetting the shell variable will clear the memory before marking it as free.

You can test the return code of cryptsetup instead of testing for the existence of the resulting block device. It will return a failure code if the user supplied an invalid password. Even better, it will return different failure codes depending on whether the error is that the target is not a LUKS device versus that it is a LUKS device that the user failed to unlock.

[Screenager]

Thank you yet again, Hu, I will rewrite that script.