@curious78
some of the general changes of Brace should work under Silverblue, and it used to have explicit support for it too
I stopped because I didn’t (and still don’t) see the value of Silverblue in its current state over traditional variants.
Like they aren’t (yet) doing eg. seamless A/B updates or strict dm-verity enforcement.
Going further, fapolicyd can be used to trivially help with ensuring integrity of executables on traditional variants but isn’t compatible with flatpak installed software.
For anyone who wants to try this:
dnf install fapolicyd;
sed -i 's/integrity = none/integrity = sha256/g' /etc/fapolicyd/fapolicyd.conf;
systemctl enable fapolicyd --now;