Reference
title: Reference
Reference
The four canonical configuration surfaces that cloud-boot exposes.
:material-console-line:{ .lg .middle } Kernel cmdline
Every
cloudboot.*knob: where it lives, what it accepts, and which path it affects. Cross-referenced with the plan HCL and metadata-URL JSON.:material-file-code:{ .lg .middle } Plan HCL schema
target {}blocks,local.*/self.*scoping, multi-arch OCI indexes, the seven attributes a target carries.:material-link:{ .lg .middle } metadata-URL JSON
The
cloudbootkey inside the per-instance metadata response. Overrides cmdline values without rebuilding the boot ISO.:material-restart:{ .lg .middle } NVRAM reset
How to clear
Boot####+BootOrderafter a Path C target has been staged. In-band script and out-of-band libvirt recipe.
Precedence
When the same value appears in multiple places, cloud-boot resolves in this order (later wins):
- Kernel cmdline —
/proc/cmdlineas parsed by the firmware. - HCL plan — values from the resolved target.
- metadata-URL JSON — the
cloudbootblock in the per-instance metadata response.
So a metadata-URL value overrides both the cmdline and the plan, which is what you want for per-instance secrets like LUKS passphrases.