on securing the linux boot process: anti evil maid attacks. related to bios/tcm
hardware security features (some of these to earlier?): + WX̂ + NX bit + Executable-space protection uefi secureboot
boot process: + platform configuration registers (PCRs) + trusted platform module (TPM) AES instruction set on advanced cpu intel me amd psp hardware security module (HSM)
lvm commands (lvm2 package): + vgcreate: volume group create + pvcreate: physical volume create in lvm + vgextend: extend volume group + lvcreate: logical volume create
tpm and systemd-cryptenroll page
can see status of secure boot: dmesg | grep -i secure