Wait is the Pi version Alpine based too? Thats awesome if so. I gotta check out what you've got going on. Alpine looked crazy for dealing with compiler and libc reasons for what I was looking at putting together so I am currently working on a raspberry pi os lite based build. Just got delayed as I realized I needed a microhdmi cable. Also looking at system integrity checking. Got a kludgey idea of ripping the IMG file from my set up to keep a checksum of it to verify before burning fresh before every sign. Wear on the SD card but you get cryptographic proof it's unmolested. Or maybe looking at secure boot. Nothing quite looks perfect but playing with integrity checks.