What this needs is a recipe or script that you can point your local agent at and it builds a bespoke implementation that’s, by definition, highly resilient.

Edit: see project nomad.