True, but AFAIK an audit system is worthless if it resides on the same potentially compromised machine, no?
13 karma · joined August 13, 2015
Vault gives time limited Tokens with Network Boundary. Instead of Keeper, i would just use age:
# write
echo "my secret" | age -r <recipient-pubkey> > secret.age
# read
age -d -i key.txt secret.age
https://www.schneier.com/blog/archives/2016/03/data_is_a_tox...
Alpine with lbu[0] seems like a perfect fit and looks IMHO less experimental. Also you can provide backups straight via iPXE[1].
Nonetheless, kudos for the slim ubuntu image :)