MIME-Version: 1.0
Message-ID: <trinity-0fcd6e2e-ad06-4aba-b9ae-4fb94ab2866f-1732381339032@3c-app-mailcom-bs12>
From: daggs <daggs@gmx.com>
To: Mallory <errorworship@gmail.com>
Cc: ~alpine/users@lists.alpinelinux.org
Subject: Re: UEFI and Unified Kernel Image
Content-Type: text/plain; charset=UTF-8
Date: Sat, 23 Nov 2024 18:02:19 +0100
Importance: normal
Sensitivity: Normal
In-Reply-To: <CAMz052d8GVmg0-bifTGOoYjRwVCK_2sS2Cj=pU-603DbO1zkNg@mail.gmail.com>
References: <CAMz052d8GVmg0-bifTGOoYjRwVCK_2sS2Cj=pU-603DbO1zkNg@mail.gmail.com>
Content-Transfer-Encoding: quoted-printable
UI-OutboundReport: notjunk:1;M01:P0:AmYXzWhUhZc=;gmzhOZuZLxxTogWirc+IeQ/4oS5
 ZI6Ml8cM14gariPIjFJX7ootQ9hAlwHXRzNMy+FtLYsSB1qTwHkkK2qxi7gSvEWPiIJkcENbG
 W6H5yXT/2Mi338/WLnPsFLVfWUQIzMEfPeM/PBCZGxZx2i87yQZmV/AC9SQEq7a2goOxckQPm
 TwmuqI0FqKayp35lrGc5NDAm3snH406CsipMHqP/sfdxvcVu2WvXHMCAH95T+uNByiTvhaV1D
 iDNcXCr31ZlYgfSo1TLkM+MF3E4UNbVTiZdAQe7febu5cjXmDR1JvRKq6ypozg9CqSLJaemzf
 dgKx1d2KvmvGvtYnB7KTWfUQxO+60LmDQLGWb9f5qtNhOcpP3QYi6+hAmnVwETh/2F/cIhWbR
 en+TMWwAvUZgRnbpJ19rZkOR8abEJguw0qGR+ZvyxEamim7uisZz1AZIZKyzbLRXdpLch0g2C
 HzkhyiMvoereQVqH4DQCgaszN6RUQTXTxwlW0emqDEgIv/n5zIOfKau57AKKBZGEvjYefHHJx
 E8gNhIlE6mPyZIRGcyahLtxPF/OhlnJ7H8Xh5+Q2Gbj0xQvt7GpFOgGF/yMxfFQtZe3IflvV9
 YoVzwtmVmX28TgqOmznfr/DQmxIWUmtR0Zne4ITwR1tdyRzhFiqghC7uIeZMXb2X8v1vLF45f
 xv3VSWBD7e35mVeZp0v59NQogdxRrFNeuKeKtq3Yaw==

Greetings,

>Sent:=C2=A0Saturday, November 23, 2024 at 3:22 PM
>From:=C2=A0"Mallory" <errorworship@gmail=2Ecom>
>To:=C2=A0~alpine/users@lists=2Ealpinelinux=2Eorg
>Subject:=C2=A0UEFI and Unified Kernel Image
>
>Ahoy there,
>=C2=A0
>I'm trying to come up with a script to build a minimal Alpine image with =
support for UEFI and UKI (no secureboot) via static version of apt-tools=2E=
 Yet it would seem that whatever I try, the UEFI partition comes back empty=
=2E And the odd thing is that the `bootx64=2Eefi` is created in the appropr=
iate place (see the build output)=2E Likely, I'm missing something painfull=
y obvious but being new to Alpine I would appreciate some pointers as to ho=
w I can debug the issue=2E
>=C2=A0
>Here's the script:
>=C2=A0
>
>#!/bin/bash=C2=A0
>set -eux=C2=A0
>readonly PATH=3D/bin:/sbin:/usr/bin:/usr/sbin
>readonly DEFAULT_DISK_SIZE=3D"2G"
>readonly IMAGE=3D"alpine=2Eimg"
>readonly MIRROR=3Dhttps://dl-cdn=2Ealpinelinux=2Eorg/alpine
>readonly REL=3D3=2E21
>readonly ARCH=3D$(uname -m)
>readonly APKV=3D2=2E14=2E4-r4
>readonly REPO=3D"${MIRROR}"/v"${REL}"/main
>readonly HOST=3D"satellite"=C2=A0
>wait_until_settled() {
>udevadm settle
>blockdev --flushbufs --rereadpt "${1}"
>until test -e "${1}p2"; do
>echo "${1}p2 doesn't exist yet=2E=2E=2E"
>sleep 1
>done
>}=C2=A0
>cleanup() {
>set +o errexit=C2=A0
>if [ -n "${LOOPDEV:-}" ]; then
>losetup -d "${LOOPDEV}"
>fi
>if [ -n "${MOUNT:-}" ] && mountpoint -q "${MOUNT}"; then
>umount --recursive "${MOUNT}" || exit 1
>fi
>if [ -n "${TMPDIR:-}" ]; then
>rm -rf "${TMPDIR}"
>fi
>}
>trap cleanup EXIT=C2=A0
>init() {
>readonly ORIG_PWD=3D"${PWD}"
>readonly OUTPUT=3D"${PWD}/out"
>tmpdir=3D"$(mktemp --dry-run --directory --tmpdir=3D"${PWD}/tmp")"
>readonly TMPDIR=3D"${tmpdir}"
>mkdir -p "${OUTPUT}" "${TMPDIR}"
>if [ -n "${SUDO_UID:-}" ] && [ -n "${SUDO_GID:-}" ]; then
>chown "${SUDO_UID}:${SUDO_GID}" "${OUTPUT}" "${TMPDIR}"
>fi
>cd "${TMPDIR}"=C2=A0
>readonly MOUNT=3D"${PWD}/mount"
>mkdir "${MOUNT}"
>}=C2=A0
>setup_disk() {
>truncate -s "${DEFAULT_DISK_SIZE}" "${IMAGE}"
>sgdisk --align-end \
>--clear \
>--new 0:0:+1G --typecode=3D0:ef00 --change-name=3D0:'EFI' \
>--new 0:0:0 --typecode=3D0:8304 --change-name=3D0:'alpine' \
>"${IMAGE}"=C2=A0
>LOOPDEV=3D$(losetup --find --partscan --show "${IMAGE}")
>wait_until_settled "${LOOPDEV}"=C2=A0
>mkfs=2Evfat -F 32 -n EFI "${LOOPDEV}p1"
>mkfs=2Eext4 -L alpine -q "${LOOPDEV}p2"
>mount "${LOOPDEV}p2" "${MOUNT}"
>mount --mkdir "${LOOPDEV}p1" "${MOUNT}/boot/efi"
>}=C2=A0
>bootstrap() {
>curl -s "${MIRROR}"/v"${REL}"/main/"${ARCH}"/apk-tools-static-${APKV}=2Ea=
pk | tar xz=C2=A0
>=2E/sbin/apk=2Estatic --repository "${REPO}" \
>--update-cache \
>--allow-untrusted \
>--root "${MOUNT}" \
>--initdb add alpine-base=C2=A0
>cat <<EOF >"${MOUNT}"/etc/fstab
>LABEL=3Dalpine / ext4 defaults 0 0
>LABEL=3DEFI /boot/efi vfat defaults 0 2
>EOF=C2=A0
>echo "nameserver 1=2E1=2E1=2E1" > "${MOUNT}"/etc/resolv=2Econf
>echo "${REPO}" >"${MOUNT}"/etc/apk/repositories=C2=A0
>cat <<EOF >"${MOUNT}"/etc/network/interfaces
>auto lo
>iface lo inet loopback=C2=A0
>auto eth0
>iface eth0 inet dhcp
>EOF=C2=A0
>for a in dev dev/pts proc sys run; do mount -o bind /$a "${MOUNT}"/$a; do=
ne=C2=A0
>chroot "${MOUNT}" /bin/sh -x <<CHROOT
>mkdir -p /etc/kernel-hooks=2Ed/
>mkdir -p /etc/mkinitfs/
>mkdir -p /boot/efi/EFI/Linux/=C2=A0
>echo "cmdline=3Droot=3DLABEL=3Dalpine modules=3Dext4" > /etc/kernel-hooks=
=2Ed/secureboot=2Econf
>echo "signing_disabled=3Dyes" >> /etc/kernel-hooks=2Ed/secureboot=2Econf
>echo "output_dir=3D"/boot/efi/EFI/Linux/"" >> /etc/kernel-hooks=2Ed/secur=
eboot=2Econf
>echo "output_name=3D"bootx64=2Eefi"" >> /etc/kernel-hooks=2Ed/secureboot=
=2Econf
>echo "disable_trigger=3Dyes" >> /etc/mkinitfs/mkinitfs=2Econf=C2=A0
>apk update
>apk add linux-lts \
>linux-firmware-none \
>mkinitfs \
>secureboot-hook \
>gummiboot-efistub \=C2=A0
>setup-hostname -n "${HOST}"=C2=A0
>rc-update -q add devfs sysinit
>rc-update -q add dmesg sysinit
>rc-update -q add mdev sysinit
>rc-update -q add hwdrivers sysinit=C2=A0
>rc-update -q add hwclock boot
>rc-update -q add modules boot
>rc-update -q add hostname boot
>rc-update -q add bootmisc boot
>rc-update -q add networking boot=C2=A0
>rc-update -q add mount-ro shutdown
>rc-update -q add killprocs shutdown
>rc-update -q add savecache shutdown=C2=A0
>rc-update -q add crond default=C2=A0
>mkdir -p /boot/efi/loader/entries=C2=A0
>cat > /boot/efi/loader/entries/alpine=2Econf <<EOF
>title Alpine Linux
>linux /EFI/Linux/bootx64=2Eefi
>EOF=C2=A0
>ls -la /boot/efi/EFI/Linux/
>CHROOT=C2=A0
>cp "${IMAGE}" "${OUTPUT}/"
>}=C2=A0
>main() {
>if [ "$(id -u)" -ne 0 ]; then
>echo "root is required"
>exit 1
>fi=C2=A0
>init
>setup_disk
>bootstrap
>}=C2=A0
>main
>And the output from the run:
>=C2=A0
>
>+ readonly PATH=3D/bin:/sbin:/usr/bin:/usr/sbin
>+ PATH=3D/bin:/sbin:/usr/bin:/usr/sbin
>+ readonly DEFAULT_DISK_SIZE=3D2G
>+ DEFAULT_DISK_SIZE=3D2G
>+ readonly IMAGE=3Dalpine=2Eimg
>+ IMAGE=3Dalpine=2Eimg
>+ readonly MIRROR=3Dhttps://dl-cdn=2Ealpinelinux=2Eorg/alpine
>+ MIRROR=3Dhttps://dl-cdn=2Ealpinelinux=2Eorg/alpine[https://dl-cdn=2Ealp=
inelinux=2Eorg/alpine]
>+ readonly REL=3D3=2E21
>+ REL=3D3=2E21
>++ uname -m
>+ readonly ARCH=3Dx86_64
>+ ARCH=3Dx86_64
>+ readonly APKV=3D2=2E14=2E4-r4
>+ APKV=3D2=2E14=2E4-r4
>+ readonly REPO=3Dhttps://dl-cdn=2Ealpinelinux=2Eorg/alpine/v3=2E21/main[=
https://dl-cdn=2Ealpinelinux=2Eorg/alpine/v3=2E21/main]
>+ REPO=3Dhttps://dl-cdn=2Ealpinelinux=2Eorg/alpine/v3=2E21/main[https://d=
l-cdn=2Ealpinelinux=2Eorg/alpine/v3=2E21/main]
>+ readonly HOST=3Dsatellite
>+ HOST=3Dsatellite
>+ trap cleanup EXIT
>+ main
>++ id -u
>+ '[' 0 -ne 0 ']'
>+ init
>+ readonly ORIG_PWD=3D/home/boojum/Documents/zzz/alpine-image-bootstrap
>+ ORIG_PWD=3D/home/boojum/Documents/zzz/alpine-image-bootstrap
>+ readonly OUTPUT=3D/home/boojum/Documents/zzz/alpine-image-bootstrap/out
>+ OUTPUT=3D/home/boojum/Documents/zzz/alpine-image-bootstrap/out
>++ mktemp --dry-run --directory --tmpdir=3D/home/boojum/Documents/zzz/alp=
ine-image-bootstrap/tmp
>+ tmpdir=3D/home/boojum/Documents/zzz/alpine-image-bootstrap/tmp/tmp=2Eu5=
KuNSSdie
>+ readonly TMPDIR=3D/home/boojum/Documents/zzz/alpine-image-bootstrap/tmp=
/tmp=2Eu5KuNSSdie
>+ TMPDIR=3D/home/boojum/Documents/zzz/alpine-image-bootstrap/tmp/tmp=2Eu5=
KuNSSdie
>+ mkdir -p /home/boojum/Documents/zzz/alpine-image-bootstrap/out /home/bo=
ojum/Documents/zzz/alpine-image-bootstrap/tmp/tmp=2Eu5KuNSSdie
>+ '[' -n 1000 ']'
>+ '[' -n 1000 ']'
>+ chown 1000:1000 /home/boojum/Documents/zzz/alpine-image-bootstrap/out /=
home/boojum/Documents/zzz/alpine-image-bootstrap/tmp/tmp=2Eu5KuNSSdie
>+ cd /home/boojum/Documents/zzz/alpine-image-bootstrap/tmp/tmp=2Eu5KuNSSd=
ie
>+ readonly MOUNT=3D/home/boojum/Documents/zzz/alpine-image-bootstrap/tmp/=
tmp=2Eu5KuNSSdie/mount
>+ MOUNT=3D/home/boojum/Documents/zzz/alpine-image-bootstrap/tmp/tmp=2Eu5K=
uNSSdie/mount
>+ mkdir /home/boojum/Documents/zzz/alpine-image-bootstrap/tmp/tmp=2Eu5KuN=
SSdie/mount
>+ setup_disk
>+ truncate -s 2G alpine=2Eimg
>+ sgdisk --align-end --clear --new 0:0:+1G --typecode=3D0:ef00 --change-n=
ame=3D0:EFI --new 0:0:0 --typecode=3D0:8304 --change-name=3D0:alpine alpine=
=2Eimg
>Creating new GPT entries in memory=2E
>Warning: The kernel is still using the old partition table=2E
>The new table will be used at the next reboot or after you
>run partprobe(8) or kpartx(8)
>The operation has completed successfully=2E
>++ losetup --find --partscan --show alpine=2Eimg
>+ LOOPDEV=3D/dev/loop1
>+ wait_until_settled /dev/loop1
>+ udevadm settle
>+ blockdev --flushbufs --rereadpt /dev/loop1
>+ test -e /dev/loop1p2
>+ mkfs=2Evfat -F 32 -n EFI /dev/loop1p1
>mkfs=2Efat 4=2E2 (2021-01-31)
>+ mkfs=2Eext4 -L alpine -q /dev/loop1p2
>+ mount /dev/loop1p2 /home/boojum/Documents/zzz/alpine-image-bootstrap/tm=
p/tmp=2Eu5KuNSSdie/mount
>+ mount --mkdir /dev/loop1p1 /home/boojum/Documents/zzz/alpine-image-boot=
strap/tmp/tmp=2Eu5KuNSSdie/mount/boot/efi
>+ bootstrap
>+ curl -s https://dl-cdn=2Ealpinelinux=2Eorg/alpine/v3=2E21/main/x86_64/a=
pk-tools-static-2=2E14=2E4-r4=2Eapk[https://dl-cdn=2Ealpinelinux=2Eorg/alpi=
ne/v3=2E21/main/x86_64/apk-tools-static-2=2E14=2E4-r4=2Eapk]
>+ tar xz
>tar: Ignoring unknown extended header keyword 'APK-TOOLS=2Echecksum=2ESHA=
1'
>tar: Ignoring unknown extended header keyword 'APK-TOOLS=2Echecksum=2ESHA=
1'
>tar: Ignoring unknown extended header keyword 'APK-TOOLS=2Echecksum=2ESHA=
1'
>+ =2E/sbin/apk=2Estatic --repository https://dl-cdn=2Ealpinelinux=2Eorg/a=
lpine/v3=2E21/main[https://dl-cdn=2Ealpinelinux=2Eorg/alpine/v3=2E21/main] =
--update-cache --allow-untrusted --root /home/boojum/Documents/zzz/alpine-i=
mage-bootstrap/tmp/tmp=2Eu5KuNSSdie/mount --initdb add alpine-base
>fetch https://dl-cdn=2Ealpinelinux=2Eorg/alpine/v3=2E21/main/x86_64/APKIN=
DEX=2Etar=2Egz[https://dl-cdn=2Ealpinelinux=2Eorg/alpine/v3=2E21/main/x86_6=
4/APKINDEX=2Etar=2Egz]
>(1/24) Installing alpine-baselayout-data (3=2E6=2E8-r0)
>(2/24) Installing musl (1=2E2=2E5-r7)
>(3/24) Installing busybox (1=2E37=2E0-r8)
>Executing busybox-1=2E37=2E0-r8=2Epost-install
>(4/24) Installing busybox-binsh (1=2E37=2E0-r8)
>(5/24) Installing alpine-baselayout (3=2E6=2E8-r0)
>Executing alpine-baselayout-3=2E6=2E8-r0=2Epre-install
>Executing alpine-baselayout-3=2E6=2E8-r0=2Epost-install
>(6/24) Installing ifupdown-ng (0=2E12=2E1-r6)
>(7/24) Installing libcap2 (2=2E71-r0)
>(8/24) Installing openrc (0=2E55=2E1-r2)
>Executing openrc-0=2E55=2E1-r2=2Epost-install
>(9/24) Installing mdev-conf (4=2E7-r0)
>(10/24) Installing busybox-mdev-openrc (1=2E37=2E0-r8)
>(11/24) Installing alpine-conf (3=2E18=2E1-r4)
>(12/24) Installing alpine-keys (2=2E5-r0)
>(13/24) Installing alpine-release (3=2E21=2E0_alpha20240923-r0)
>(14/24) Installing ca-certificates-bundle (20240705-r0)
>(15/24) Installing libcrypto3 (3=2E3=2E2-r4)
>(16/24) Installing libssl3 (3=2E3=2E2-r4)
>(17/24) Installing ssl_client (1=2E37=2E0-r8)
>(18/24) Installing zlib (1=2E3=2E1-r2)
>(19/24) Installing apk-tools (2=2E14=2E4-r4)
>(20/24) Installing busybox-openrc (1=2E37=2E0-r8)
>(21/24) Installing busybox-suid (1=2E37=2E0-r8)
>(22/24) Installing scanelf (1=2E3=2E8-r1)
>(23/24) Installing musl-utils (1=2E2=2E5-r7)
>(24/24) Installing alpine-base (3=2E21=2E0_alpha20240923-r0)
>Executing busybox-1=2E37=2E0-r8=2Etrigger
>OK: 8 MiB in 24 packages
>+ cat
>+ echo 'nameserver 1=2E1=2E1=2E1'
>+ echo https://dl-cdn=2Ealpinelinux=2Eorg/alpine/v3=2E21/main[https://dl-=
cdn=2Ealpinelinux=2Eorg/alpine/v3=2E21/main]
>+ cat
>+ for a in dev dev/pts proc sys run
>+ mount -o bind /dev /home/boojum/Documents/zzz/alpine-image-bootstrap/tm=
p/tmp=2Eu5KuNSSdie/mount/dev
>+ for a in dev dev/pts proc sys run
>+ mount -o bind /dev/pts /home/boojum/Documents/zzz/alpine-image-bootstra=
p/tmp/tmp=2Eu5KuNSSdie/mount/dev/pts
>+ for a in dev dev/pts proc sys run
>+ mount -o bind /proc /home/boojum/Documents/zzz/alpine-image-bootstrap/t=
mp/tmp=2Eu5KuNSSdie/mount/proc
>+ for a in dev dev/pts proc sys run
>+ mount -o bind /sys /home/boojum/Documents/zzz/alpine-image-bootstrap/tm=
p/tmp=2Eu5KuNSSdie/mount/sys
>+ for a in dev dev/pts proc sys run
>+ mount -o bind /run /home/boojum/Documents/zzz/alpine-image-bootstrap/tm=
p/tmp=2Eu5KuNSSdie/mount/run
>+ chroot /home/boojum/Documents/zzz/alpine-image-bootstrap/tmp/tmp=2Eu5Ku=
NSSdie/mount /bin/sh -x
>+ mkdir -p /etc/kernel-hooks=2Ed/
>+ mkdir -p /etc/mkinitfs/
>+ mkdir -p /boot/efi/EFI/Linux/
>+ echo 'cmdline=3Droot=3DLABEL=3Dalpine modules=3Dext4'
>+ echo 'signing_disabled=3Dyes'
>+ echo 'output_dir=3D/boot/efi/EFI/Linux/'
>+ echo 'output_name=3Dbootx64=2Eefi'
>+ echo 'disable_trigger=3Dyes'
>+ apk update
>fetch https://dl-cdn=2Ealpinelinux=2Eorg/alpine/v3=2E21/main/x86_64/APKIN=
DEX=2Etar=2Egz[https://dl-cdn=2Ealpinelinux=2Eorg/alpine/v3=2E21/main/x86_6=
4/APKINDEX=2Etar=2Egz]
>v20240923-5088-g92cc27fd38d [https://dl-cdn=2Ealpinelinux=2Eorg/alpine/v3=
=2E21/main[https://dl-cdn=2Ealpinelinux=2Eorg/alpine/v3=2E21/main]]
>OK: 5550 distinct packages available
>+ apk add linux-lts linux-firmware-none mkinitfs secureboot-hook gummiboo=
t-efistub
>(1/23) Installing gummiboot-efistub (48=2E1-r8)
>(2/23) Installing linux-firmware-none (20240909-r3)
>(3/23) Installing xz-libs (5=2E6=2E3-r0)
>(4/23) Installing zstd-libs (1=2E5=2E6-r1)
>(5/23) Installing kmod (33-r2)
>(6/23) Installing lddtree (1=2E27-r0)
>(7/23) Installing libeconf (0=2E6=2E3-r0)
>(8/23) Installing libblkid (2=2E40=2E2-r4)
>(9/23) Installing device-mapper-libs (2=2E03=2E28-r2)
>(10/23) Installing json-c (0=2E18-r0)
>(11/23) Installing libuuid (2=2E40=2E2-r4)
>(12/23) Installing cryptsetup-libs (2=2E7=2E5-r1)
>(13/23) Installing kmod-libs (33-r2)
>(14/23) Installing mkinitfs (3=2E10=2E2-r1)
>Executing mkinitfs-3=2E10=2E2-r1=2Epost-install
>(15/23) Installing linux-lts (6=2E12=2E0-r1)
>(16/23) Installing libgcc (14=2E2=2E0-r4)
>(17/23) Installing jansson (2=2E14-r4)
>(18/23) Installing libstdc++ (14=2E2=2E0-r4)
>(19/23) Installing binutils (2=2E43=2E1-r1)
>(20/23) Installing efi-mkuki (0=2E1=2E0-r2)
>(21/23) Installing kernel-hooks (0=2E2-r1)
>(22/23) Installing sbsigntool (0=2E9=2E5-r2)
>(23/23) Installing secureboot-hook (0=2E2-r2)
>Executing secureboot-hook-0=2E2-r2=2Epost-install
>Executing busybox-1=2E37=2E0-r8=2Etrigger
>Executing kmod-33-r2=2Etrigger
>Executing mkinitfs-3=2E10=2E2-r1=2Etrigger
>Executing kernel-hooks-0=2E2-r1=2Etrigger
>kernel-hooks: executing hook 50-secureboot=2Ehook (lts, 6=2E12=2E0-1, )
>=3D=3D> initramfs: creating /tmp/secureboot=2EJlefgi/initramfs for 6=2E12=
=2E0-1-lts
>Display ELF dependencies as a tree=C2=A0
>Usage: lddtree [options] ELFFILE=2E=2E=2E=C2=A0
>Options:
>-a, --all Show all duplicated dependencies
>-h, --help Show this help output
>-l, --flat Display output in a flat format
>--no-auto-root Do not automatically prefix input ELFs with ROOT
>-R, --root ROOT Use this ROOT filesystem tree
>-V, --version Show version information
>-x, --debug Run with debugging
>=3D=3D> secureboot: creating UEFI Unified Kernel Image with /boot/vmlinuz=
-lts
>=3D=3D> secureboot: writing *unsigned* UEFI image to /boot/efi/EFI/Linux/=
/bootx64=2Eefi (signing is disabled!)
>OK: 133 MiB in 47 packages
>+ setup-hostname -n satellite
>+ rc-update -q add devfs sysinit
>+ rc-update -q add dmesg sysinit
>+ rc-update -q add mdev sysinit
>+ rc-update -q add hwdrivers sysinit
>+ rc-update -q add hwclock boot
>+ rc-update -q add modules boot
>+ rc-update -q add hostname boot
>+ rc-update -q add bootmisc boot
>+ rc-update -q add networking boot
>+ rc-update -q add mount-ro shutdown
>+ rc-update -q add killprocs shutdown
>+ rc-update -q add savecache shutdown
>+ rc-update -q add crond default
>+ mkdir -p /boot/efi/loader/entries
>+ cat
>+ ls -la /boot/efi/EFI/Linux/
>total 11416
>drwxr-xr-x 2 root root 4096 Nov 23 13:20 =2E
>drwxr-xr-x 3 root root 4096 Nov 23 13:20 =2E=2E
>-rwxr-xr-x 1 root root 11680190 Nov 23 13:20 bootx64=2Eefi
>+ cp alpine=2Eimg /home/boojum/Documents/zzz/alpine-image-bootstrap/out/
>+ cleanup
>+ set +o errexit
>+ '[' -n /dev/loop1 ']'
>+ losetup -d /dev/loop1
>+ '[' -n /home/boojum/Documents/zzz/alpine-image-bootstrap/tmp/tmp=2Eu5Ku=
NSSdie/mount ']'
>+ mountpoint -q /home/boojum/Documents/zzz/alpine-image-bootstrap/tmp/tmp=
=2Eu5KuNSSdie/mount
>+ umount --recursive /home/boojum/Documents/zzz/alpine-image-bootstrap/tm=
p/tmp=2Eu5KuNSSdie/mount
>+ '[' -n /home/boojum/Documents/zzz/alpine-image-bootstrap/tmp/tmp=2Eu5Ku=
NSSdie ']'
>+ rm -rf /home/boojum/Documents/zzz/alpine-image-bootstrap/tmp/tmp=2Eu5Ku=
NSSdie

I'm doing a similar thing which work, here is what I do:
mkfs=2Evfat ${DEV_POINT}1
mkfs=2Eext3 ${DEV_POINT}2
mkfs=2Eext4 ${DEV_POINT}3
mkfs=2Eext4 ${DEV_POINT}4
mkfs=2Eext4 ${DEV_POINT}5
mkfs=2Eext4 ${DEV_POINT}6
mount ${DEV_POINT}6 ${MNT_POINT}
mkdir -p ${MNT_POINT}/efi
mkdir -p ${MNT_POINT}/mnt/efi
mkdir -p ${MNT_POINT}/boot
mkdir -p ${MNT_POINT}/home
mkdir -p ${MNT_POINT}/tmp
mkdir -p ${MNT_POINT}/var
mount -t vfat ${DEV_POINT}1 ${MNT_POINT}/mnt/efi
mount ${DEV_POINT}2 ${MNT_POINT}/boot
mount ${DEV_POINT}3 ${MNT_POINT}/home
mount ${DEV_POINT}4 ${MNT_POINT}/tmp
mount ${DEV_POINT}5 ${MNT_POINT}/var
mount -o bind ${MNT_POINT}/mnt/efi ${MNT_POINT}/efi
cd ${MNT_POINT}/boot/
ln -sf =2E=2E/efi EFI

hope it helps you

Dagg