Dm-verity backed silverblue images?

Hi there,

I have been building a arch-based distro that has properties similar to what Lennart has laid out in his most recent blog post Fitting everything together for a while. Unfortunately keeping this running is a lot of work – especially considering that arch is not interested in having a immutable install:-) Silverblue is already immutable, so it am wondering whether it is worthwhile moving over.

Ostree can not simply be verified at boot time to be in the right state, so I do want a image backed by dm-verity. It should be easy enough to create, has somebody already done that?

What are the plans for systemd-homed in Fedora/Silverblue? It apparently is still missing SE Linux rules and does require some PAM modifications at this time. Is that really the case?