Products › lamboot-tools
lamboot-tools
The Linux UEFI boot toolkit.
Diagnose, repair, and migrate UEFI boot on any Linux system. One suite of command-line tools, one structured JSON schema, and a remediation command attached to every finding. Built by Lamco Development LLC.
The Linux UEFI boot toolkit, for any bootloader
lamboot-tools is the Linux UEFI boot toolkit from Lamco Development LLC. It is a suite of standalone command-line tools that diagnose, inventory, back up, repair, and migrate UEFI boot on any UEFI Linux system. Every tool works regardless of which bootloader is installed: GRUB, systemd-boot, rEFInd, Limine, and LamBoot are all first-class targets. The tools orchestrate the standard Linux boot utilities (efibootmgr, sgdisk, dosfstools, sbsign, and others) and add the diagnostic intelligence, migration automation, and self-guided troubleshooting those utilities do not provide on their own. There is no runtime dependency on a specific bootloader. If a system boots through UEFI, these tools work on it.
Your system will not boot? Start here.
$ sudo lamboot-diagnose
boot_mode: UEFI mode confirmed
partition_table: GPT
esp: mounted at /boot/efi; fallback loader EFI/BOOT/BOOTX64.EFI missing
bootloader: no bootloader binaries found on ESP
Result: 1 critical, 1 warning, 17 passed (19 checks)Every finding includes an actionable remediation command. No guessing.
Eleven tools, one suite
Install lamboot-tools for the core suite. The Proxmox VE companion is below.
| Tool | What it does |
|---|---|
| lamboot-diagnose | Read-only scan of the UEFI boot chain across 11 categories, with a remediation command for every finding. |
| lamboot-esp | EFI System Partition health, inventory, stale-file cleanup, and offline deploy. |
| lamboot-nvram | UEFI boot-entry inventory (Boot#### and BootOrder), dead-entry cleanup, and restore, online or against an offline OVMF VARS image. |
| lamboot-backup | Save, restore, show, and list boot-config snapshots (NVRAM, boot order, Secure Boot state). |
| lamboot-repair | Boot repair, online or against an offline disk, following diagnose, plan, confirm, execute, verify. |
| lamboot-migrate | BIOS to UEFI conversion and cross-bootloader migration, with verification and rollback. |
| lamboot-doctor | Guided wrapper that chains diagnose to repair. |
| lamboot-uki-build | Build, inspect, sign, and verify Unified Kernel Images. |
| lamboot-signing-keys | Secure Boot key lifecycle: generate, rotate, inspect, MOK enroll, and OVMF VARS handling. |
| lamboot-inspect | Deep introspection of boot reports and the trust log for LamBoot systems. Written in Python. |
| lamboot-toolkit | The suite dispatcher: status, help, run, version, and verify across all tools. |
Start with lamboot-toolkit status to see what is installed, or <tool> --help for any tool.
JSON with a fix attached to every finding
Every tool emits structured JSON on --json, against a stable schema (the output carries schema_version v1). Every finding at warning level or above carries two machine-readable fields: a remediation command you can run, and a documentation URL that explains it. A person reading the terminal sees the fix; a script parsing the JSON gets the same fix as data. That is what makes the suite auditable: the tool reports what it found, how it verified it, and exactly what to do next.
lamboot-toolkit-pve
For Linux running in VMs on Proxmox, the lamboot-toolkit-pve subpackage adds host-side fleet tooling on top of the core suite.
| Tool | What it does |
|---|---|
| lamboot-pve-setup | Per-VM LamBoot integration setup on a Proxmox host. |
| lamboot-pve-fleet | Fleet-wide inventory, setup, verification, and reporting across VMs. |
| lamboot-pve-migrate | Host-side BIOS to UEFI migration lifecycle for guests (snapshot, prep, finalize, rollback). |
| lamboot-pve-monitor | Host-side reader of guest boot-health state, with nothing running inside the guest. |
| lamboot-pve-ovmf-vars | Build OVMF_VARS.fd with a signing certificate pre-enrolled in db. |
This companion bridges the bootloader to fleet operation. See the LamBoot Proxmox page for how the host reads guest boot health.
Two Rust binaries, shipped inside the release
Two Rust components ship as prebuilt, statically linked (musl) binaries inside the lamboot-tools release, so one binary per architecture runs across distributions with different glibc versions with no runtime dependency. Both are components of this product, shipped with the release.
lamboot-capcheck 0.1.0
A firmware and platform capability auditor across 12 domains. lamboot-doctor uses it for capability context, and lamboot-migrate uses it through an optional capability gate.
lamboot-reader 0.1.0
A GRUB config reader and resolver.
Available today through GitHub Releases
Get it from the GitHub release: the signed release tarball (lamboot-tools-0.9.1.tar.gz) with its detached GPG signature (.asc). Additional distribution channels are being prepared.
tar xzf lamboot-tools-0.9.1.tar.gz && cd lamboot-tools-0.9.1
sudo make install # core suite, bundled binaries, and man pages
sudo make install-pve # optional: Proxmox VE companion
Then confirm what landed:
lamboot-toolkit status # list installed tools and versions
sudo lamboot-diagnose # full boot-chain scan, 11 categories
sudo lamboot-esp check # ESP health
sudo lamboot-backup save # snapshot boot config before changes
sudo lamboot-doctor # guided diagnose to repair
One umbrella, versioned parts
lamboot-tools uses a hybrid version model. The umbrella version, lamboot-tools 0.9.1, is the release tag, and it bundles per-tool semantic versions plus the versions of the two bundled components (lamboot-capcheck 0.1.0, lamboot-reader 0.1.0). Each tool reports both its own version and the umbrella version through --version. The structured JSON output carries its own independent schema_version, currently v1.
Ownership and license
All intellectual property in lamboot-tools and its bundled components is owned by Lamco Development LLC. The ownership transfer completed on 2026-06-02. The Rust component source lives in private repositories, and their compiled binaries ship with the release. lamboot-tools is licensed under MIT OR Apache-2.0.
(c) 2025-2026 Lamco Development LLC. All rights reserved.
A companion to LamBoot
lamboot-tools is a standalone product that works on any UEFI Linux system. It is a companion to LamBoot, the memory-safe UEFI bootloader (public v0.16.5). The tools work with any bootloader; LamBoot is the reference target, and the Proxmox companion bridges the bootloader to fleet operation.