I'm using an "Unified Kernel Image" directly through the EFI boot-manager. It's the most simple boot setup I've ever used, and it doesn't have the mentioned is

I'm using an "Unified Kernel Image" directly through the EFI boot-manager. It's the most simple boot setup I've ever used, and it doesn't have the mentioned issues: > the same disk is now impossible/harder to boot in another system/mainboard. Just go and select your UKI in the EFI boot-manger. Works on every modern system OOTB. > no more choice between different kernels in case the newest one broke something You can have more than one UKI around. You can, for example, have even one with a whole recovery system included in the initrd part! > to change the cmdline with kenel parameters you now need to run efibootmgr You only need to recreate the UKI with an updated command line. No change to the boot-manager needed. Also a UKI has a better security story compared to all other options. You have only one signed EFI binary. No need for complex setups that validate the initrd after the fact, as everything is included in the UKI and signed as a whole. Have this setup on my Debian box but used actually the superior documentation form the Arch wiki to get there.