Would it be possible to do A/B updates using BootNext from efibootmgr?

[travier]

Bootupd would write the new bootloader in a new place (B), set BootNext to a new boot entry with this bootloader. And then on reboot would check that the boot succeeded and would do the reverse for the next update (use A).

See: https://github.com/rhboot/efibootmgr

[travier]

If this works, that would potentially let us enable boot loader updates by default (just like it is on dnf based Fedora) has the update itself would be safe.

[travier]

Related to rhboot/shim#502

[martinezjavier]

#454 is something that could be complementary to this and make the update mechanism safer as well.