- setup-node-storage service auto-partitions NVMe for containerd/longhorn - Root password encrypted with sops/age, decrypted during build - Fix SSH host key permissions (0600) so sshd actually starts - Disable SSH socket activation for reliable boot - Add OPERATIONS.md with runbook - Makefile tracks source dependencies
- Built from latest iPXE git source - Fixes UEFI initrd handoff bugs present in old 2019 version - Add tftp/ sync to Makefile deploy target - Track ipxe.efi in git