Hint

Who deals with embedded Linux already had the situation where there’s the need to inspect the contents of a system that executes from RAM. Usually, it exists only compressed as a single file at a boot folder, or is thrown around at an EFI partition or /boot formatted using FAS16/32, like on a RaspberryPi. The command for that is simple, with the initramfs on this example being called rootfs.cpio.zst: zstdcat rootfs.cpio.zst | cpio -idmv That’s it. Since it isn’t really a file system, there’s no need to mount it. It will expand all their root tree contents inside the folder that you called the command, ready to be inspected.