

Just a note that dry canning is pretty bad and has a much much higher chance of botulism than other canning methods. (Botulism spores must be kept at-heat at 160C dry heat for over 2 hours, not the oven temperature, but the full temperature of the medium itself)
It doesn’t matter here much because it is already powdered, shelf-stable mix, but in general.
https://extension.psu.edu/dry-canning-is-not-recommended
https://extension.sdstate.edu/why-behind-unsafe-canning-practices
https://yesicanned.com/dry-canning/
https://nchfp.uga.edu/blog/dry-canning-raw-vegetables-is-an-unsafe-practice
This is similar to what I do.
I have a USB drive with the whole bootloader + decryption keyfiles on it. I remove it while it is running as everything is stored in RAM and already booted.
Downside being it has to be plugged in to update the boot partition during an upgrade.