2 ms·
> Immutable Trees. Directory trees can be made immutable, so that their contents can no longer be changed in any way whatsoever. This can be used to ensure that
by kordless 11y ago
> Immutable Trees. Directory trees can be made immutable, so that their contents can no longer be changed in any way whatsoever. This can be used to ensure that backups can not be modified after they have been made.
That would be perfect for things we don't want to ever change...like container images. Or configuration files.
- porker 11y agoWhat is the benefit of immutable trees over versioned backups - or to put it another way: why wouldn't you keep a change history in your backups?
- aidos 11y agoI might be mistaken but I believe that feature refers to the ability to make a bit of your file system read only. It's just there so you don't accidentally wipe out a backup you meant to keep. You would still do versioned backups and then make one a month immutable. Or whatever your strategy is.
- kordless 11y agoBackups are for data generated by people using applications running on services provided by infrastructure. What I'm referring to is the configuration portion of launching and running a service, not the data generated after a human uses it. The thing that pops out of this is TRUST. We need to be able to trust an application we are running is the one we want to run, who was responsible for writing it, who's responsible for running it, and all the bits in-between.