Thats pretty much the only option. Doesnt need to be tails either, just a simple linux with no networking.