Installing to flash disk gives you an option to install with an "n" option. Once installed in this manor the drive is protected from any changes, a reboot reverts the drive to just as it was. Now is there a way to change the umask=000 so that the drive can have changes made from time to time but locked down the rest of the time. I have young students that use the notebooks and the write protection is great until I need to add something.
Dell PowerEdge R630 8SFF 2.6Ghz 20-Core 128GB Mem 2x10G+2x1G NIC 2x750W PSU
$399.04
Supermicro 4U 36 Bay Storage Server 2.2Ghz 16-C 128GB 1x1280W Rails TrueNAS ZFS
$716.98
Intel XEON E5-2699 V3 CPU PROCESSOR 18 CORE 2.30GHZ 45MB L3 CACHE 145W SR1XD
$45.00
Dell R730xd 12LFF 2.6Ghz 20-C 128GB H730 2x10G+2x1G NIC 2x1100W 12x Trays Rails
$721.05
Intel Xeon E5-2680 v4 2.4GHz 35MB 14-Core 120W LGA2011-3 SR2N7
$17.99
INTEL XEON GOLD 6240 2.6GHZ PROCESSOR | SRF8X
$399.99
Intel Xeon Gold 6140 SR3AX 2.3GHz 18-Core Processor CPU
$44.99
Intel Xeon Gold 6138 2.0GHz 27.5MB 20-Core 125W LGA3647 SR3B5
$46.00
HP Workstation Z640 2x Xeon E5-2623V4 32GB Ram Dual 256GB SSD K420 Linux GA
$234.98
INTEL XEON GOLD 6148 PROCESSOR | 2.40GHZ | SR3B6
$99.99