Switches from storing sealed data and metadata in the EFI system
partition to storing it in a LUKS2 header token of type "emboot". This
is more complicated, but eliminates the need to mount the EFI system
partition during the boot process and is likely the right direction
given how (for instance) systemd-cryptenroll works.
Learn about POSIX shell's variable reference function and eliminate
lots of evals!
Switches from storing sealed data and metadata in the EFI system partition to storing it in a LUKS2 header token of type "emboot". This is more complicated, but eliminates the need to mount the EFI system partition during the boot process and is likely the right direction given how (for instance) systemd-cryptenroll works.
Learn about POSIX shell's variable reference function and eliminate lots of evals!
Read Rich's sh tricks (http://www.etalabs.net/sh_tricks.html) and learn why not to use
echo "$var"
.Assume that /bin/sh will almost certainly offer the
local
keyword. This makes things a lot cleaner.