@7c36db82 are there any best practices of running lanzaboote/systemd-boot over a raid or whatever if I have two disks and I need the machine to boot from either? 

 @2708d30e not really, the best thing you can do is to get efibootguard (https://github.com/siemens/efibootguard) a first stage bootloader or use an EFI filesystem driver that knows how to do RAID