Extract internal secureboot code into its own package?

[Itxaka]

Hello folks, Im Itxaka from the @kairos-io team

We share some similarities in our projects and was wondering if it was possible to extract the internal/secureboot code into its own package.

We do similar things with it but we are currently relaying on ukify for the uki generation and directly on systemd-pcrphase to set up the PCR enter-initrd and exit-intrd phases.

we would really like to just implement this in pure go code, as for UKI our own initramfs module (https://github.com/kairos-io/immucore) is relaying in those external things. It would be nice to have that in a separate repo that we can use and contribute to.

We also have a uki builder that relays on ukify which is a pain in the ass to maintain, which could also take advantage of the uki module in there.

Really awesome job on that module btw, look really nice and clean!