Hacker News Reader

Not if grub is encrypted, better even behind FDE.

How does booting for remote login in such a setup work though? You'd have to be physically present in order to enter the passphrase.

For that I do an ssh shim at initram (with portknocking) for key entry preboot

I would love to read a tutorial on that if you know of one.