Build a coordinated stock ABL Fedora Core pair for Uke

[MCC45TR]

The existing stock ABL image starts only an initramfs and cannot run Fedora from a separate Linux partition. Add boot-pair to the single ukelinux.sh entry, producing coordinated fedora_boot.img and Android sparse EXT4 system.img files for boot_b and an independently prepared GPT linux partition.

The built-in initramfs admits exactly one GPT partition named linux with this pair's UUID and EXT4 filesystem. Source, 13 accepted patches, separate ABL hook, signed COPR RPMs and host tools are pinned. All 1,146 rebuilt modules must match the signed installed payload. Composition checks inode metadata and SELinux contexts, full sparse coverage and readback, Python exclusion and payload privacy. TTY1 and USB peripheral shells are development services. The builder queues behind other builds and performs no partition creation, flashing, slot selection or reboot.

Requires the opt-in kernel preparation in MCC45TR/senemos-uke-kernel-mainline#2.

Validation completed for pair-03ea9569c96dcb08:

• CLI/admission/frozen-resume fixtures, ShellCheck and native boot/sparse codecs passed.
• Actual 7.2.9 Image/modules/DTB build, 1,146 module byte comparisons and linked initramfs comparison passed.
• EXT4 e2fsck/readback, 15,335 SELinux inode contexts and root/initramfs architecture, privacy and Python checks passed.
• Independent Android simg2img decoded the full 3 GiB filesystem to identical raw bytes.
• The exact Image entered the real EXT4 root in generic ARM64 QEMU, with systemd PID1 and enforcing SELinux, and executed a local TTY keyboard command. Wrong partition-name and wrong UUID cases explicitly rejected the root.
• The public entry recovered the completed VM result after interruption, sealed it against the exact Image/script, and verified the completed cache on the next invocation.

The artifact report records exact source, tool, image and VM identities. The local delivery contains a 96 MiB boot image and a 556.23 MiB sparse system image representing 3 GiB EXT4.

Qualcomm ABL admission, UFS, actual tablet pixels/input, CDC enumeration and Android return remain owner-test gates. This unsigned development pair has not booted the tablet; no public binary release or physical success is claimed.

The single entry also provides --check-device --pair DIRECTORY. It verifies the coordinated delivery before bounded, read-only inventory through exactly one ready ADB or fastboot transport. Fastboot checks Uke identity, slot A, reported unlock state, target capacities and a non-logical Linux target. ADB reads properties and sysfs without root escalation and still requires the bootloader check. Reports omit unit identifiers/raw output and cannot overwrite an existing file. Offline verification and corrupt-pair/transport/locked/logical/small-target/privacy fixtures passed. No actual transport is currently available. This host feature leaves the qualified pair recipe and image bytes unchanged.