I have been using debian for a long time, but it never came with an installer that offered the setup I wanted. Finally, I decided to roll my own. It has all the best words baked in: TPM2, an exclusively owner's UEFI PK key, UKI, LUKS2, dracut, systemd-homed managed users with a LUKS2 volume as the home directory, logins via FIDO2, UKI/modules signing with a YubiKey/PIV-bound private key, and no options whatsoever except for locales.
I doubt it will gain any traction, but in case it might be of use to someone, I made it public on GitHub <https://github.com/devoid-of-void/devoid>.
