Disk full error when using intel-ucode:20230808 system extension with Imager v1.5.1

[nberlee]

Bug Report

When running the following command on both Linux amd64 and Apple Silicon arm64 platforms, I am encountering an "exit status 1: Disk full" error.

docker run -t -v ./secureboot:/secureboot -v ./out:/out ghcr.io/siderolabs/imager:v1.5.1 secureboot-iso --arch=amd64 --system-extension-image=ghcr.io/siderolabs/intel-ucode:20230808

Description

The command fails specifically when using the intel-ucode:20230808 system extension. The issue does not occur when the system extension is omitted or when using an AMD system extension.

Working Command for Reference:

docker run  -t -v ./secureboot:/secureboot -v ./out:/out ghcr.io/siderolabs/imager:v1.5.1 secureboot-iso --arch=amd64 --system-extension-image=ghcr.io/siderolabs/amd-ucode:20230804

@smira response is slack was: This might a problem with size of the ISO

Which might be right as secureboot-installer works fine.

Logs

profile ready:
arch: amd64
platform: metal
secureboot: true
version: v1.5.1
input:
  kernel:
    path: /usr/install/amd64/vmlinuz
  initramfs:
    path: /usr/install/amd64/initramfs.xz
  sdStub:
    path: /usr/install/amd64/systemd-stub.efi
  sdBoot:
    path: /usr/install/amd64/systemd-boot.efi
  baseInstaller:
    imageRef: ghcr.io/siderolabs/installer:v1.5.1
  secureboot:
    signingKeyPath: /secureboot/uki-signing-key.pem
    signingCertPath: /secureboot/uki-signing-cert.pem
    pcrSigningKeyPath: /secureboot/pcr-signing-key.pem
    pcrPublicKeyPath: /secureboot/pcr-signing-public-key.pem
    platformKeyPath: /secureboot/PK.auth
    keyExchangeKeyPath: /secureboot/KEK.auth
    signatureKeyPath: /secureboot/db.auth
  systemExtensions:
    - imageRef: ghcr.io/siderolabs/intel-ucode:20230808
output:
  kind: iso
  outFormat: raw
initramfs ready
kernel command line: talos.platform=metal console=ttyS0 console=tty0 init_on_alloc=1 slab_nomerge pti=on consoleblank=0 nvme_core.io_timeout=4294967295 printk.devkmsg=on ima_template=ima-ng ima_appraise=fix ima_hash=sha512 lockdown=confidentiality
UKI ready
◱ exit status 1: Disk full
Error: exit status 1: Disk full

Environment

• Talos version:1.5.1
• Platform: amd64 & arm64