Security
The article explains Secure Boot concepts and documents Lanzaboote, an EFI UKI stub for NixOS, enabling Secure Boot without embedding the kernel and initrd in the UKI. It covers systemd-boot, UKI flow, the idea of a Root of Trust, and ongoing integration into NixOS, with open collaboration opportunities.