4 ms·
"I'm surprised immutable systems aren't more popular." In the security world, an immutable system is an unpatchable system. If a 0-day is found in the system i
by lightedman 4y ago
"I'm surprised immutable systems aren't more popular."
In the security world, an immutable system is an unpatchable system. If a 0-day is found in the system image, you can't fix it, you have to get a new image going. This causes wasted personnel-hours, wasted money, and some times wasted hardware if the image happens to be on a ROM-type of data storage. I've seen immutable systems on WORM HDDs. The people running those types of systems quickly got tired of having to do hardware replacements for every patch.
- goodpoint 4y agoWrong. Immutable does not mean unpatchable at all.
- lightedman 4y agoIf you can simply patch it, that's mutable, not immutable, by definition. Immutable means unchangeable without exception.
- goodpoint 4y agoYou are misunderstanding what immutable infrastructure is. You don't buy some SSD with a preinstalled OS and use it as it is for 10 years. The point is in not making changes on the fly on live systems. You are perfectly able (and encouraged) to deploy new nodes with updated software and roll over the old nodes.