Cryptographically attested Linux fleets

Teams can operate Linux fleets that boot only read‑only, reproducible images signed end‑to‑end; each machine produces a signed, verifiable boot and runtime report that a control plane checks against declared state. The model removes package managers and interactive shells, forcing fleet changes as image replacements and coupling operational trust to image‑signing and control‑plane operators. — Shifting system administration from interactive ops to signed image rollouts reshapes security (supply‑chain attestation), operational models (no SSH/package managers) and governance (who runs the control plane and who verifies trust).