Also make root fs readonly. DietPi distro claims they do it out of box. Same for openwrt, they mount /var dir as tmps and do writes only there. For raspbian htt

Also make root fs readonly. DietPi distro claims they do it out of box. Same for openwrt, they mount /var dir as tmps and do writes only there. For raspbian http://blog.pi3g.com/2014/04/make-raspbian-system-read-only/ http://blog.pi3g.com/2014/04/make-raspbian-system-read-only/.