The Debian-Live approach also provides some good opportunities. First and foremost, the very easy remastering makes it efficient to run with no persistent store quite often. For instance, upon remastering, I just start without the store, and the image I run is union-mounted with the persistence file and copied&compressed. Then I have to boot something else to copy the new squashfs image in place, but that's all that has to be done outside the system.
Boot the new image without persistence, create a new persistence file.
For further adaptations, the new persistence file can be mounted in an instance run under kvm, programs can be added and settings tweaked for an eventual new remastering.
Storing the series of squashfs-compressed images, one can always go back in this process if needed.
Fortinet FortiGate 60F | 10 Gbps Firewall Network Security EXPIRED (FG-60F)- New
$226.79
Palo Alto PA-220 Next Generation Firewall Appliance w/ Power Adapter and Cord
$59.99
Fortinet Fortigate FG-61E Firewall Network Security Appliance ATP Bundle 1 years
$263.99
Cisco Meraki MX84 Cloud Managed Security Firewall Appliance UNCLAIMED MX84-HW
$39.99
Fortinet FortiWiFi-60E Network Security Appliance - White
$38.40
Dell SonicWall TZ300 5 Port Network Security Firewall Appliance APL28-0B4
$39.99
Cisco ASA5506-K9 ASA 5506-X Network Security Firewall
$40.00
Cisco Meraki Z3 VPN Firewall - Black
$15.00
Fortinet FortiGate 60E POE FirewallRouter
$180.00
1U BareMetal pfsense opnsense Router Firewall DNS Server 6x 10GB Ethernet Ports
$149.00