/usr/bin/systemd-repart

> systemd-repart [OPTION…] [DEVICE]

Grow and add partitions to a partition table, and generate disk images (DDIs).

Options:
  -h --help                                Show this help
     --version                             Show package version
     --no-pager                            Do not start a pager
     --no-legend                           Do not show headers and footers

Operation:
  -n                                       Run dry-run operation
     --dry-run=BOOL                        Whether to run dry-run operation
     --empty=MODE                          How to handle empty disks lacking partition tables
                                           (refuse, allow, require, force, create)
     --offline=BOOL                        Whether to build the image offline
     --discard=BOOL                        Whether to discard backing blocks for new partitions
     --cow=BOOL|auto                       Whether to enable copy-on-write for newly created image
                                           files
     --sector-size=SIZE                    Set the logical sector size for the image
     --grain-size=BYTES                    Set the grain size for partition alignment
     --architecture=ARCH                   Set the generic architecture for the image
     --size=BYTES                          Grow loopback file to specified size
     --seed=UUID                           128-bit seed UUID to derive all UUIDs from
     --split=BOOL                          Whether to generate split artifacts

Output:
     --pretty=BOOL                         Whether to show pretty summary before doing changes
     --json=FORMAT                         Generate JSON output (pretty, short, or off)

Factory Reset:
     --factory-reset=BOOL                  Whether to remove data partitions before recreating them
     --can-factory-reset                   Test whether factory reset is defined

Configuration & Image Control:
     --root=PATH                           Operate relative to root path
     --image=PATH                          Operate relative to image file
     --image-policy=POLICY                 Specify disk image dissection policy
     --definitions=DIR                     Find partition definitions in specified directory
     --list-devices                        List candidate block devices to operate on

Verity:
     --private-key=PATH|URI                Private key to use when generating verity roothash
                                           signatures
     --private-key-source=SOURCE           Specify how to use the private key (file,
                                           provider:PROVIDER, engine:ENGINE)
     --certificate=PATH|URI                PEM certificate to use when generating verity roothash
                                           signatures, or a provider-specific designation if
                                           --certificate-source= is used
     --certificate-source=SOURCE           Specify how to interpret the certificate from
                                           --certificate=. Allows the certificate to be loaded from
                                           an OpenSSL provider (file, provider:PROVIDER)
     --join-signature=HASH:SIG             Specify root hash and pkcs7 signature of root hash for
                                           verity as a tuple of hex-encoded hash and a DER-encoded
                                           PKCS7, either as a path to a file or as an ASCII
                                           base64-encoded string prefixed by 'base64:'

Encryption:
     --key-file=PATH                       Key to use when encrypting partitions
     --tpm2-device=PATH                    Path to TPM2 device node to use
     --tpm2-device-key=PATH                Enroll a TPM2 device using its public key
     --tpm2-seal-key-handle=HANDLE         Specify handle of key to use for sealing
     --tpm2-pcrs=PCR1+PCR2+…               TPM2 PCR indexes to use for TPM2 enrollment
     --tpm2-public-key=PATH                Enroll signed TPM2 PCR policy against PEM public key
     --tpm2-public-key-policyref=STRING    Enroll signed TPM2 PCR policy with the specified policy
                                           reference
     --tpm2-public-key-pcrs=PCR1+PCR2+…    Enroll signed TPM2 PCR policy for specified TPM2 PCRs
     --tpm2-pcrlock=PATH                   Specify pcrlock policy to lock against

Partition Control:
     --include-partitions=PART1,PART2…     Ignore partitions not of the specified types
     --exclude-partitions=PART1,PART2…     Ignore partitions of the specified types
     --defer-partitions=PART1,PART2…       Take partitions of the specified types into account but
                                           don't populate them yet
     --defer-partitions-empty=BOOL         Defer all partitions marked for formatting as empty
     --defer-partitions-factory-reset=BOOL Defer all partitions marked for factory reset

Copying:
  -s --copy-source=PATH                    Specify the primary source tree to copy files from
     --copy-from=IMAGE                     Copy partitions from the given image

DDI Profile:
     --make-ddi=TYPE                       Create a DDI of the given type
  -S                                       Same as --make-ddi=sysext, make a system extension
  -C                                       Same as --make-ddi=confext, make a configuration
                                           extension
  -P                                       Same as --make-ddi=portable, make a portable service

Auxiliary Resource Generation:
     --append-fstab=MODE                   How to join the content of a pre-existing fstab with the
                                           generated one (no, auto, replace)
     --generate-fstab=PATH                 Write fstab configuration to the given path
     --generate-crypttab=PATH              Write crypttab configuration to the given path

El Torito boot catalog:
     --el-torito=BOOL                      Whether to add a boot catalog to boot the ESP
     --el-torito-system=STRING             Set the system identifier in the ISO9660 descriptor
     --el-torito-volume=STRING             Set the volume identifier in the ISO9660 descriptor
     --el-torito-publisher=STRING          Set the publisher identifier in the ISO9660 descriptor

See the systemd-repart(8) man page for details.