

Yeah, I’m using a large font in reader mode and I think I had the word encrypted showing without un onscreen.
You are correct, it makes a custom binary in the fat partition that is verified by TPM for unlocking/proceeding, that binary then contains the other parts to move forward.




Cool. If you aren’t stuck on a diatro, then Tumbleweed has this built in. Snapshots are taken every time you make package changes or system changes, boot menu let’s you boot any old snapahot