> take over kernel, initrd and bootloader Huh? There are not really any Kernel or bootloader changes proposed here, just signing them and using existing functi

> take over kernel, initrd and bootloader Huh? There are not really any Kernel or bootloader changes proposed here, just signing them and using existing functionality within them. (Okay, I guess he proposes adjusting the Kernel to optionally have a way to authenticate parameters, but is that really “taking over”?) As for initrd, he’s just talking about adjusting the way their generated to be more static and modular to simplify signing. Yes, there’s some tooling to do this proposed as part of the systemd organizational umbrella, but systemd isn’t a monolithic thing. Regardless, and just like systemd, you don’t have to use any of this if you don’t want to.