Timothée Ravier

For this PR and https://github.com/coreos/fedora-coreos-docs/pull/671, we should add a note that while the resulting VM is launched in Confidential Mode, it does not really is a "Confidential VM". The disk...

It varies per cloud and setups. Azure has support to encrypt a disk image for you (just the rootfs), bind it to a TPM and then pass it to a...

We should probably create `/boot/grub2/grubenv` but likely not `/etc/default/grub` as we don't need it anymore.

> Regarding defaults - not so sure. If a user creates the file because he wants to configure something - he is most likely to not put the BLSCFG variable...

A potential workaround for this issue would be: ``` $ sudo grub2-editenv - set menu_auto_hide=1 ``` But I can't get this to work so something else is likely missing.

With https://github.com/coreos/bootupd/pull/931, we should now create the file. It still won't configure it to hide the menu by default but at least it should be easier to do now as...

Maybe we should think of this as "Adoption does not record missing files in the ESP".

> But want to confirm that if it is necessary to do the change for adoption to only include the installed packages `bootupd-state.json`? Yes, I think that's what we should...

And maybe directly install the missing ones.

I think this is implemented in https://github.com/coreos/bootupd/pull/945