TODO

posted:
• homed adopt
• hostnamectl should show image id

todo:
• luks recovery key firstboot prompt
• installer tool (wrapping repart, bootctl install, tpm2-clear, reboot)
• make sure reset and so on are never candidates for auto selection in menu
• boot counting
• pcrlock
• sysupdate from http
• ask for confirmation before factory reset
• firstboot: when asking for kbd mapping, preselect uefi firmware default
• firstboot: when asking for hostname, preselect default hostname
• ask for comfirmation before factory reset

later:
• in live mode: mark root block device read-only on block level
• pkcs7 for image downloads, rather than gpg
• https boot