Adding Plymouth

scripts/extract-artifacts.sh

@@ -23,6 +23,10 @@ DISABLE_DOT1X=${3:-false}
 # environments. Defaults to the literal placeholder so build-oci.sh's warning
 # fires if it was never set.
 NVMET_TRADDR=${NVMET_TRADDR:-NVMET_TRADDR}
+# Plymouth boot splash toggle (from the boot_splash Packer var). "true" bakes
+# "rhgb quiet" so Plymouth shows the graphical splash; anything else bakes
+# "plymouth.enable=0" for a fully verbose console boot (boot-chain debugging).
+BOOT_SPLASH=${BOOT_SPLASH:-true}
 # Stable namespace UUIDs. Devices are referenced by-id
 # (/dev/disk/by-id/nvme-uuid.<uuid>) rather than /dev/nvmeNnM because NVMe
 # controller/namespace indices are NOT stable (a transient discovery controller
@@ -142,6 +146,16 @@ jq -n --arg hash "$ROOT_HASH" --arg erofs_uuid "$FIXED_UUID" \
 # The device node assumes the root namespace is the host's first/only
 # NVMe/TCP namespace; adjust if not. NVMET_TRADDR: set per environment
 # *before* the UKI build, since the cmdline is immutable once signed.
+# Plymouth: rhgb (Red Hat graphical boot) + quiet for a clean splash, or
+# plymouth.enable=0 for a verbose debug boot. Press ESC at boot to see details
+# behind the splash; or override at runtime via the SMBIOS Type 11
+# io.systemd.stub.kernel-cmdline-extra OEM string (adds args without a rebuild).
+if [ "$BOOT_SPLASH" = "true" ]; then
+    SPLASH_FRAGMENT="rhgb quiet "
+else
+    SPLASH_FRAGMENT="plymouth.enable=0 "
+fi
+
 DOT1X_FRAGMENT=""
 if [ "$DISABLE_DOT1X" = "true" ]; then
     echo "==> WARNING: building TEST cmdline with rd.dot1x=0 (802.1X + MACsec DISABLED)" >&2
@@ -154,6 +168,7 @@ if [ "$DISABLE_DOT1X" = "true" ]; then
     DOT1X_FRAGMENT="rd.dot1x=0 ip=dhcp "
 fi
 printf '%s' \
+  "$SPLASH_FRAGMENT" \
   "$DOT1X_FRAGMENT" \
   "rd.neednet=1 systemd.volatile=overlay " \
   "rd.dot1x.nvindex=0x01800001 rd.dot1x.timeout=60 " \