Fix ukify

scripts/build-oci.sh

@@ -41,11 +41,16 @@ if printf '%s' "$CMDLINE" | grep -q NVMET_TRADDR; then
 fi
 
 # --- 1+2. Build (and sign) the UKI -------------------------------------------
+# os-release stamped into the UKI's .osrel section (identifies the image to
+# bootctl / boot menus). ukify takes this as inline text; a value starting with
+# '@' is instead read from a file of that name (newline-separated KEY=VALUE).
+OSREL=$(printf 'NAME=FleetDiskless\nID=fleet-diskless\nVERSION_ID=%s\nPRETTY_NAME="Fleet Diskless %s"\n' "$VERSION" "$VERSION")
+
 UKIFY_ARGS=(build
     --linux   "$ART/vmlinuz"
     --initrd  "$ART/initramfs.img"
     --cmdline "$CMDLINE"
-    --os-release "@NAME=FleetDiskless@VERSION=${VERSION}@"
+    --os-release "$OSREL"
     --output  "$UKI")
 
 if [ -n "$SB_KEY" ] && [ -n "$SB_CERT" ]; then