I may have a tough one for you.
I have a machine in the wild that is and will probably continue to be compromised. The machine is owned by a user who will be unable to keep it secure.
I must have this machine pull from git. It must also automatically install all pulls without restart (no startup solutions).
I would prefer a platform agnostic solution.
I have a few objectives: 1). Email remote admin with logs of all pulls, making sure this process cannot be subverted or altered 2). Authenticate all git pulls in some manner without the auth being able to be cracked by an adversary
I hope you all can help.