QubesOS TL;DR Setup
Requirements
- UI enforcing GnuPG HSM with sig subkey installed
- Examples: Yubikey, Ledger, Trezor
- Public key matching device in step #1 on flash drive
- TOTP/HTOP capable Personal HSM
- Examples: Nitrokey, Librem Key
- PC with TPM verified coreboot-heads firmware installed