Talos Linux

Linux stripped down to just enough to run Kubernetes: no shell, no SSH, no package manager. Everything is managed through a gRPC API, so there is no way to log into the machine and poke at it — which is exactly the point.