On Sat, Feb 14, 2026 at 12:56:41PM +0100, Peter G. wrote: > There. Solved. No chop. No half measures. Nothing exposed.
So without knowing the OP's actual requirements, you're suggesting two one-size-fits-all solutions that are likely far beyond their expected budget. Although you may have found a solution from a technical point of view, the OpenBSD approach tends to be more aligned with encouraging people to understand the systems they are implementing, and implement appropriately. If the OP would otherwise be happy with an initramfs dropbear install on a linux system, what you propose would be something of a sledgehammer to crack a nut. Besides, your solution also introduces new attack surfaces that were not there before.
