Still no answer on my question. Please keep on subject.
I'm sorry i added to much dust in thread.
how to get pgp validation for the download beside the sha256sum?
after that (but is beyond this scope):
Code
zcat LibreELEC-RPiX.aarch64-12.2.1.img.gz | sudo dd of=/dev/sdX bs=4M status=progress conv=fsync
sudo fdisk /dev/sdX -l
sudo parted /dev/sdX resizepart 2 100%
sudo e2fsck -f /dev/sdX2
sudo resize2fs /dev/sdX2
sudo fdisk /dev/sdX -l
sudo mount /dev/sdX1 /media/pi_boot
sudo mount /dev/sdX2 /media/pi_storage
sudo mkdir -p /media/pi_storage/.kodi/userdata/addon_data/service.libreelec.settings/
sudo touch /media/pi_storage/.kodi/userdata/addon_data/service.libreelec.settings/wizard_completed
sudo mkdir -p /media/pi_boot/config/
sudo bash -c "echo \"SSH_ENABLE='true'\" > /media/pi_boot/config/ssh"
sudo editor /media/pi_boot/cmdline.txt # add ssh at end of line
sudo mkdir -p /media/pi_storage/.config/system.d/
sudo ln -sf /dev/null /media/pi_storage/.config/system.d/smbd.service
sudo ln -sf /dev/null /media/pi_storage/.config/system.d/nmbd.service
sudo ln -sf /dev/null /media/pi_storage/.config/system.d/wsdd2.service
sudo ln -sf /dev/null /media/pi_storage/.config/system.d/avahi-daemon.service
sudo ln -sf /dev/null /media/pi_storage/.config/system.d/rpcbind.service
sudo ln -sf /dev/null /media/pi_storage/.config/system.d/rpcbind.socket
sudo bash -c "echo -e '[General]\nEnableOnlineCheck=false\nOnlineCheckInterval=0\nNetworkInterfaceBlacklist=wlan0,wg*\nFallbackTimeservers=192.x.x.x' > /media/pi_storage/.config/connman_main.conf"
sudo mkdir -p /media/pi_storage/.config/wireguard/
sudo chmod 700 /media/pi_storage/.config/wireguard
# add security beyond scope here
sudo editor /media/pi_storage/.config/autostart.sh # start security
sudo chmod +x /media/pi_storage/.config/autostart.sh
sudo editor /media/pi_storage/.kodi/userdata/sources.xml # add sources for kodi
sudo umount /media/pi_boot
sudo umount /media/pi_storageThen the first light for the system.