[fsflover]

This should work with Qubes quite well: https://puri.sm/posts/pureboot-101-first-boot-first-update-a...

See also: https://forum.qubes-os.org/t/verified-boot-on-qubes-a-lofty-...