After install
Kairos configuration mechanism is based on the cloud-config file given during installation, however, it's possible to extend the configuration by providing additional cloud-configs in either /oem or /usr/local/cloud-config.
Configuring partitions
Kairos configuration mechanism for partitions is based on the cloud-config file
Creating Custom Cloud Images
A comprehensive guide to creating custom cloud images with Kairos using the latest tools
Customization
Learn how to customize Kairos images to suit your needs
Multi-disk dynamic partitioning
This page walks through a complete, tested example of installing Kairos across two
Private registries authentication
As the source for install or upgrade can be an OCI image and sometimes those are behind a private container registry, Kairos
Using /opt with System Extensions
By default, Kairos does not include /opt as a system extension (sysext) overlay hierarchy. This is because in normal runtime, /opt is writable and bind-mounted to the persistent partition, allowing users and applications to freely write data that persists across reboots.
Build
Learn how to build Kairos images from scratch
Networking
By default, Kairos ISOs are configured to automatically get an IP from the network interface. However, depending on the base system you have chosen, there are different way to configure networking. This section collects information on setting network configuration depending on the base that is being chosen (openSUSE, Alpine, Ubuntu).
Extending the system with systemd extensions
This feature is in preview state and only available in Kairos v3.4.x releases and alphas.
Bundles
Bundles are a powerful feature of Kairos that let you customize and configure your operating system. This section explains how to use and build custom bundles.
Encrypting User Data with Kairos
This section describes how to encrypt partition with LUKS in Kairos.
Confidential Computing
Kairos works with Confidential Containers on AMD SEV-SNP hardware today, using non-Hadron Kairos flavors (Ubuntu and other glibc-based bases).
Revoking secure boot access
This document describes how an administrator can prevent certain OS images from