I am planning to deploy a few GuruPlugs at different locations, that I will be managing over a VPN.
Now I would like to make the plugs completely foolproof, by making the complete rootfs read-only, and by placing the log files etc in a tmpfs. This way, the plug will reset back to the defaults on a reboot. Of course I will need a rewritable folder for some config files (like VPN cert) and a SQLlite DB, but I am planning to make a small script that will reset those files too in case of problems.
Is this possible to do? And how should i do it?