I guess what I’m saying is I match the “really know what you’re doing” criteria.

Or even just log in via serial console, but that’s not a capability I have coded in yet.

Uh yeah, that’s the whole idea. I can always just bring it offline and mount the root as a separate disk to a different VM to investigate.

This is really cool. I appreciate you sharing it. I’m currently building out my homelab to try out various softwares and scenarios, and one of the things I’m worried about is malicious software sneaking in, and compromising my LAN.

In the case that something does, this essentiallyy provides a tripwire which leaves all the evidence intact while stopping the bleed (unless it has a VM escape, but that’s another story).

In any case, this is very useful and I’m really glad you made it. Thanks!