Quickstart: VPS Image Migration

Goal

Provision a Linode-compatible VPS image, bootstrap secrets securely, and enable remote rebuilds.

Build the vps image from the repository and confirm a Linode-compatible artifact is produced.
Provision a VPS from the image and verify network connectivity and remote access.
On first boot, allow the host to generate its own secrets bootstrap key material.
Enroll the host by adding its public key as a secrets recipient and re-encrypt required secrets.
Trigger a rebuild from an explicitly authorized operator machine to apply secrets and confirm core services start successfully.
Validate the remote rebuild workflow from an explicitly authorized operator machine.