@stefanoStefano Marinelli thanks! Yes, RO root would be a very good thing for this use case. Bookmarked!
@yvan
@stefanoStefano Marinelli read-only root on OpenBSD is easy:
. mount_mfs /dev with size 20m and -P option pointing to a copy of /dev; needed for writable device files; copy of /dev in any dir can be created with 'sh /dev/MAKEDEV all'
. Writable /etc/random.seed is needed at shutdown/reboot. So, make it a symlink to /var/db/random.seed or /var/run/random.seed.
. Test above and set mount / mount option in fstab to ro.
If you have a fediverse account, you can quote this note from your own instance. Search https://privacysafe.social/ap/users/115842680896978069/statuses/115999907534038645 on your instance and quote it. (Note that quoting is not supported in Mastodon.)