6 ms·
It's interesting to watch these immutable images being adopted in the wider computing community. This has been a thing forever in the embedded world with Yocto
by edrxty 3y ago
It's interesting to watch these immutable images being adopted in the wider computing community. This has been a thing forever in the embedded world with Yocto/Peta Linux/Buildroot images. The image is a usually a straight disk image and is read-only in operation. This doesn't inherently fix all the insecure IOT stuff as you usually need some way to reimage the device with updates and it takes at least some skill to do the bootloader signature verification right. It does help though as well as keep things deterministic.
- Ferret7446 3y agoIt has not been possible/practical to use immutable system images until recent advances like ostree/flatpak/systemd-homed. We didn't "just discover" some secret only known to the embedded community, lots of people have been working toward this exact goal for a long time, because we already knew for a long time that it has a lot of advantages.
- sambazi 3y ago"It has not been possible/practical to use immutable system images until recent advances like ostree/flatpak/systemd-homed." no, you can just mount overlayfs with ram-backing for example