My scenario is much safer and simpler and fully reproduces a real Tails environment and does so with a secure boot:
It has two live modes: ultra‑secure Overlay Mode, like in Tails, and ZRAM scenario.
The root filesystem is mounted read‑only (ultra‑secure, like in Tails).
Custom GRUB options are used so that the default boot process isn’t affected at all (ultra‑secure).
Hardened options are applied when mounting the overlay/copy (like in Tails).
A RAM‑wipe is performed for paranoid protection (like in Tails).
It’s a very simple script that will install all modules automatically - you just need to run the script.
My scenario works in BTRFS (the old scenario does not work in BTRFS)
1 Like