Alpine with SSH support. Only PKI auth, set via environment. Hardened ciphers. Proper logging.