Get the latest tech news
systemd ParticleOS
Contribute to systemd/particleos development by creating an account on GitHub.
At the same time, make sure the UEFI firmware interface is password protected so an attacker cannot just disable Secure Boot again. To install ParticleOS with a USB drive, first build the image on an existing Linux system as described above. It is possible to use cryptenroll to add a recovery password to the root partition: cryptsetup luksAddKey --token-type systemd-tpm2 /dev/<id>
Or read this on Hacker News