Repository Specifics
In any repository choice you make, it is essential to exercise utmost care in hardening it. Having an immutable Object Storage bucket becomes futile if your system can be wiped at a lower level.
Ensure to restrict or deactivate any possibility of accessing low-level configuration systems such as hardware management (IPMI, etc.) for your Object Storage and implement relevant restrictions concerning access to administration interfaces.