Jonas Andradas wrote:
In particular, both "mandos" and "mandos-client" have Debian packages available.[1] http://www.fukt.bsnet.se/mandos
That sounds interesting, but why not run the Mandos server ONLY when you are restarting machines. The Mandos server could be a tiny VM or even a boot from a USB thumb drive -- the USB could be locked away in a safe until required. A copy of the USB could be stored in a bank vault. The only time that the USB is needed is when you must restart a server or re-mount a file system protected by this scheme. No need to continually run a Mandos server anywhere.
-- Kind Regards AndrewM Andrew McGlashan Broadband Solutions now including VoIP