@DrWhax@mastodon.social oh, and if you want to use a Yubikey or hardware token, it needs to be available as a CCID to the dom0, or you need to do build signing in a separate qube and copy the unified image into the dom0 for installation in the UEFI `/boot` partition.