Security Hardening

[mudler]

• [ ] #112
• [x] #113
• [ ] #114
• [ ] #115
• [x] #139
• [x] Boot with signed kernels (no-UKI)
• [ ] Boot measurement (UKI https://github.com/kairos-io/kairos/issues/868)
• [ ] https://github.com/kairos-io/kairos/issues/789

[sdwilsh]

It might be worth adding #789 to this list.

[3pings]

@mudler What are the thoughts on enabling Kubearmor and Aide support with this too? https://github.com/aide/aide https://github.com/kubearmor/KubeArmor