-
heads
A minimal Linux that runs as a coreboot or LinuxBoot ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
I use full disk encryption on both computers with TPMs and without. I tend to run Arch for desktop and Ubuntu for servers. In Arch with systemd-boot it's pretty straightforward to install sbctl to sign init images then enable TPM unlocking of LUKS.
You may be interested in Heads, which is available on Purism laptops under the name PureBoot. Though this really needs a coreboot-capable machine, I think, and isn't something you can just add to your existing UEFI boot chain.