[hcfman]

Is this for real? Is the initramfs not signed and authenticated? if that was the case it would be a very serious and obvious flaw I would have thought.

[fsflover]

Since 2018, heads builds and ships with its own initramfs: https://heads.dyne.org/news/2018/03/release-04.html