This guide allows you to use the TPM on your computer to decrypt your LUKS encrypted volumes. If you are worried about a cold boot attack on your hardware please DO NOT use this guide with your root volume!
Verify that you have a TPM in your computer:
# systemd-cryptenroll --tpm2-device=list
PATH DEVICE DRIVER
https://help.steampowered.com/en/faqs/view/1B71-EDF2-EB6D-2BB3
SteamOS runs a custom grub to cater it's needs for it's A/B partition design. So far the said custom grub does not boot for me on ovmf/intel uefi (maybe it boots on amd? some said they managed to just rufus the image and boot it)
skip to https://gist.github.com/Kethen/698cfa8cf387e131ebd36fbfbfe9272e#gamescope-and-non-amd-gpu if it just boots for you
Upon closer inspection the official bootloader does load some kind of amd firmware before booting the kernel
sudo dnf remove gnome-tour gnome-abrt gnome-calculator gnome-calendar gnome-maps gnome-weather \
rhythmbox gnome-contacts totem gnome-logs gnome-photos gnome-clocks gedit gnome-system-moniter \
gnome-user-docs gnome-screenshot gnome-remote-desktopsudo dnf remove fedora-chromium-config
| pi400: CFLAGS+=-static -lusbgx -lconfig -DPI400_USB | |
| pi400: pi400.c gadget-hid.c | |
| $(CC) $^ $(CFLAGS) -o $@ | |
| clean: | |
| -rm pi400 |