what's the point in moving the initrd?
So... Moving initrd and the kernel image into one image file - how does that fix ANYTHING?
Drivers still need to go in the image, the image still needs to be built on the host, which means you still have a "trust" issue.
All you need is some sort of signed mechanism on the initrd image, some way to use the RPM to sign the image in the first place.
.. so why shift to UKI? What's the actual benefits?