Comment by tapoxi

Secure boot and let the game attest the boot state.

It would restrict you to a series of whitelisted kernels, probably from major distributions, but it's better than the current situation.