The Debian-Live approach also provides some good opportunities. First and foremost, the very easy remastering makes it efficient to run with no persistent store quite often. For instance, upon remastering, I just start without the store, and the image I run is union-mounted with the persistence file and copied&compressed. Then I have to boot something else to copy the new squashfs image in place, but that's all that has to be done outside the system.
Boot the new image without persistence, create a new persistence file.
For further adaptations, the new persistence file can be mounted in an instance run under kvm, programs can be added and settings tweaked for an eventual new remastering.
Storing the series of squashfs-compressed images, one can always go back in this process if needed.
pfSense Firewall Router (6) 1Gb Intel Ethernet Ports AES-NI CPU 8GB RAM 80GB SSD
$79.95
Fortinet FortiGate 600 Firewall FG-600D with Rack Ears Tested & Reset
$189.77
XMAS SALE - PFSense Firewall - J4125 - 8 Gigs Ram - 256 SSD - 2.5 GbE
$199.00
OPNsense Network Firewall Router Security Appliance (6) Intel Ethernet Ports
$79.95
FORTINET FG-500D FortiGate 500D, 10xGE RJ45 ports, 8xGE SFP slots Firewall
$126.00
Fortinet Fortigate FG-60E Network Security Firewall with Adapter 60E
$105.00
Ubiquiti Networks USG Unifi Security Gateway Router/Firewall
$100.00
FORTINET FORTIGATE-80E FG-80E FIREWALL
$85.00
Fortinet Fortigate FG-60E POE Network Security Firewall with adapter 54V
$106.90
Cisco Meraki MX100 10 Port Cloud Managed Firewall Security Appliance UNCLAIMED
$78.89