A basic example setup of using Fedora bootc to build an encrypted image unlocked using a TPM2 device - View it on GitHub