blkdiscard /dev/nvme0n1
No need to write anything. Better would be to use nvme tools to securely erase it ("format" is the terminology used)
No need to write anything. Better would be to use nvme tools to securely erase it ("format" is the terminology used)
Your flash drive can't then be used as evidence that you haven't wiped it yet.
The initrd on the drive would be evidence you haven't wiped the drive.
Whether that gets you out of a jam and not in trouble for destroying evidence is another question.
Or maybe a better setup is an internal drive with /boot and a system stripped from sensitive files then somewhere in the drive an hidden partition (not sure how to avoid the vanilla OS overwriting the hidden partition), then you can either boot the vanilla OS or map the hidden partition and boot from it.