two options for #tailscale on a read-only filesystem, specifically for #pistar 1 dink with systemd to make it log and keep secrets somewhere rw 2 dink with the filesystem so it's not ro anymore 3 manually log in once every 100 days to upgrade and reboot and set things up right 3 is easiest if I remember how noted for future reference
emv rss
a very temporary alt for @w8emv running "honk" under "lima" with "tailscale funnel"; perhaps impractical, perhaps useful.