I've been looking into
overlayroot as a strategy to help secure my projects that are 'under wraps'.
overlayroot on a Linux system allows one to make their hard drive read only and run their Linux OS entirely in RAM.
I have installed
overlayroot and always boot in
tmpfs mode. I have created two encrypted partitions, using dm-crypt, one for online and one for offline use. I use my online for research and social networking. I use my offline for proprietary work. I always reboot if I need to switch from online to offline activity. If I've been online or will go online, I will reboot before I open my offline drive.
Is the use of
overlayroot a more secure way to use the Internet? Yes or no, please explain what vulnerabilities are handled or not handled to support your answer.