Limine + LUKS2 + TPM2 Auto-Unlock Guide (CachyOS/Arch Linux) Working configuration for: Limine bootloader LUKS2 encrypted root partition btrfs with Snapper snapshots dracut (required for btrfs snapshot boot) systemd-based initramfs Secure Boot enabled TPM2 auto-unlock using PCR 0+7