3 ms·
I see this being very useful for containerized use cases. Usually, you have a Docker file that installs and sets everything once at container creation time. Aft
by zerof1l 4y ago
I see this being very useful for containerized use cases. Usually, you have a Docker file that installs and sets everything once at container creation time. After that, you don't want anything to change in the OS. Great for security.
- eru 4y agoYes. If you want to change anything, you rebuild from source. Exactly what we are doing when we are eg working on a C program: we don't monkey patch the binary, we run the build system again.
- throwaway894345 4y agoI agree, but at least in many cases, containers aren't the immutability mechanism. E.g., MicroOS seems to rely on btrfs snapshots--all changes are dropped on reboot and the system starts from a fresh factory state. Your application could be containerized or it could be a package pulled from the distro repository and managed by systemd.