For most systems a reboot after unlock and MBRDone is set should be a valid and simple approach.
There are some known issues that needs to be solved:
- Machines with multiple locked drives
- Machines with SSC Enterprise drives
- Machines with shaky BIOS which does not handle a switch of boot device between reboots nicely
Multiple drives are currently not kept unlocked (only the boot drive is kept unlocked) after the soft reboot so we need to either see if we miss something in the unlock phase or if we need kexec action when multiple locked drives are present.
Originally posted by @qvicksilver in #7 (comment)