I've implemented a workaround for this in our configuration management and forgot all about it, until now when I started playing with trixie and it all came crashing down again.
This bug persists, and the old workaround doesn't apply in trixie, due to things being symlinked in other ways. The new variant of this woraround looks like: install_items+=" /usr/lib/molly-guard/molly-guard " It would be great if we figured out how these diverts causes dracut to fail to reboot machines. Probably because it's missing a reboot binary in the initramfs, because it just got a mollyguard symlink instead. Either ensure molly-guard doesn't end up in the dracut initramfs, or include all of molly-guard so dracut can reboot properly. ///Anton