Episode 134 dives into Unified Kernel Images (UKI), a new boot method that combines the Linux kernel, initramfs, and boot command line into a single signed EFI executable. Hosts Lucas and Luna explore how UKI streamlines Secure Boot by requiring only one signature instead of multiple for kernel and bootloader. They discuss real-world adoption: Fedora 40 ships UKI by default, and Ubuntu is testing it. The episode explains the technical mechanism—how systemd-stub converts a UKI into an EFI application, enabling measured boot with TPM2 and reducing attack surface. Lucas contrasts UKI with traditional GRUB + signed kernel setups, noting that UKI eliminates the need for a separate bootloader in many cases. Luna raises concerns about backward compatibility and fringe hardware. The conversation concludes with the trend toward simpler, more secure boot chains, and whether UKI could replace GRUB entirely.