Hacker News Reader

Build a custom LiveISO.

There are plenty of tutorials, but it is boring to follow them manually, especially if you need to make a couple of tweaks to ISO or update it.

So I put together a couple of scripts to automate the process:

https://github.com/ayourtch/iso-livecd

Get root, create a ramdisk, copy /usr/bin/* into it, and remount it under /usr/bin/*, and now you can do as you please.

By regularly redeploying or re-imaging. Exploits can only live for a certain timescale + you can lock down nearly every entry point (no need for SSH access for instance).

How do you redeploy without some sort of remote access?

You use cloud VM API and images that use something like chef or salt to configure themselves.

Basically, you destroy a VM and spin up a new one with one of your images, it will then use chef or salt to pull in its config.

SSH isn't needed then.

Toggle the Read-Only window on the floppy disk

That's probably why it's the future and not the present.

Mount the root filesystem read-only? Boot from CD?