The Debian-Live approach also provides some good opportunities. First and foremost, the very easy remastering makes it efficient to run with no persistent store quite often. For instance, upon remastering, I just start without the store, and the image I run is union-mounted with the persistence file and copied&compressed. Then I have to boot something else to copy the new squashfs image in place, but that's all that has to be done outside the system.
Boot the new image without persistence, create a new persistence file.
For further adaptations, the new persistence file can be mounted in an instance run under kvm, programs can be added and settings tweaked for an eventual new remastering.
Storing the series of squashfs-compressed images, one can always go back in this process if needed.
NetFu Firewall 1U, Intel CPU, 8 x Gigabit, SFP, w/ pfSense, Others, NEW OPTIONS
$541.85
Cisco ASA5525-FTD-K9 Security Appliance with FirePower Services
$1000.00
Juniper Networks SRX-210 Secure Services Gateway VPN Firewall
$39.99
Ubiquiti Networks USG Unifi Security Gateway Router/Firewall
$29.95
Fortinet Fg-300E FORTIGATE 300E Network Security Firewall Appliance
$249.00
Dell SonicWall TZ400 Firewall Appliance
$39.99
Protectli Vault FW4B-0-8-120, 4 Port Firewall / Mini PC 8GB RAM, 120GB SSD
$289.99
Fortinet Fortiwifi 60D FG-60D Security Appliance Firewall / VPN w/ AC Adapter
$34.97
NetGate SG-2440 with pfSense Plus Console GNU Router Firewall Security Appliance
$69.99
Sophos XG 135 Network Security 7 Gbps Firewall throughput Desktop Appliance
$124.99