Julian Andres Klode 🏳️‍🌈 on Nostr: npub1cm7wl…n32y8 We did that first for confidential VMs in Ubuntu with ...

npub1cm7wlyhq6f0yhmert2lsm45s3ej26dl4whu2y8n4w04gqhg3ctxsyn32y8 (npub1cm7…32y8) We did that first for confidential VMs in Ubuntu with https://github.com/canonical/nullboot but I'm not sure that's the best idea on real hardware with (deleting and) writing an EFI variable each kernel update.

Modern hardware probably fine but like a ThinkPad X230 may just have broken UEFI graphics at some point as it forgets to garbage collect nvram...