I don't use Fedora anymore and these procedures might be considerably outdated. Fedora folks are working on a way to integrate and deploy [UKI by default](https://fedoraproject.org/wiki/Changes/Unified_Kernel_Support_Phase_2).
As you may notice, this is almost a part 2 of my Secure your boot process: UEFI + Secureboot + EFISTUB + Luks2 + lvm + ArchLinux. Except that here i’ll not talk about all the secureboot stuff that i’ve already ran into on my last blogpost. This one is specifically focused on how to achieve the same setup using Fedora.
This blogpost compiles my personal opinions around using bootloaders on EFI environments so, the classic “opinions expressed here are solely my own and do not express the views or opinions of my employer” applies.