I have a machine running CentOS 7 with a removable hard drive. I want to restrict what hard drive can be used with the machine i.e. the machine can only be used with one disk and nothing else.
I've been looking in to UEFI secure boot. Can UEFI secure boot be used in this way? My research is inconclusive. I may be able to sign the bootloader, kernel and applications, but is there a more wholistic approach of signing a disk?
If it is in fact possible, can you please provide details. If not, is there an alternative way to achieve this?