[c0balt]

Lanzaboote is great, I've been using it for almost a year now in a dual boot with Windows 11 for full secure boot on my desktop. It is quite stable (notably was set and forget) and the initial setup was relatively easy.

[e12e]

Does it play well with bitkeeper full disk encryption?

Previous attempts at dual booting windows 11 on a laptop - I had issues when Linux updated boot alternatives - windows would demand bitkeeper recovery key input.

[c0balt]

I don't know, my Windows 11 setup does not use FDE (afaik). It is exclusively for games which require kernel level anti-cheat with secure boot.

However when I setup Windows it wiped my TPM keys for LUKS so maybe there is a potential conflict there.