The FSF sysadmins control a firewall that is outside of the VM. So we need to contact them to open new ports.
Disribution: Trisquel
Boot setup: Encrypted /
, GRUB decrypts opens the encrypted rootfs and loads the kernel and initramfs from it which then opens the encrypted rootfs again with a key.