Currently we basically accept no customizations for bootable containers to ensure we don't accidentally break things with the fs-verity hash in the native composefs.
It should however be possible to enable any customizations that only touch /etc or /var.
Disk customizations are likely to be kept disabled for now as there is tight coupling to the kernel arguments in the signed UKI versus the disk layout.
Currently we basically accept no customizations for bootable containers to ensure we don't accidentally break things with the fs-verity hash in the native composefs.
It should however be possible to enable any customizations that only touch
/etcor/var.Disk customizations are likely to be kept disabled for now as there is tight coupling to the kernel arguments in the signed UKI versus the disk layout.