Linux Unified Kernel Images (UKI) and systemd-boot: A 2026 Secure Boot Guide
Build, sign, and enroll Unified Kernel Images on Linux: ukify, sbctl, systemd-boot, and TPM2 PCR policies for a measured, tamper-evident Secure Boot chain in 2026.
TPM2 Security Articles
Linux Full Disk Encryption with LUKS2, TPM2, FIDO2, and Secure Boot
Set up hardened Linux full disk encryption with LUKS2, TPM2 auto-unlock, FIDO2 hardware keys, and Clevis/Tang NBDE. Includes tested commands for Fedora, Ubuntu, and RHEL with PCR selection guidance and troubleshooting.