Engineering
Hardening Short.io’s bare metal nodes: from encrypted disks to verified boot
We wiped a bare metal provider's AlmaLinux installs and rebuilt them with LUKS. Then PCR 7 turned out not to stop a kernel command line edit — signed UKIs did.