I'll try and answer all your points: I tried to outline the project features in brief at the start of the page. I'm sorry if I didn't communicate it clearly.

I'll try and answer all your points: I tried to outline the project features in brief at the start of the page. I'm sorry if I didn't communicate it clearly. Feel free to pinpoint where you were thrown off. You need immutability so you don't have to worry/waste time on maintaining the system, and instead can focus on your containers. Lightwhale isn't a special Debian variant. It's built ground up with Buildroot. It is literally purpose-built for this task. A package manager doesn't remove the burden of maintenance, it just makes it easier. But it's still maintenance. I'm basically arguing it's unnecessary as long as you have a Docker Engine. Snap and flatpak, while totally different concepts, I agree. Linux (or GNU) doesn't solve any of this by itself. True, the root account is a layer of security. But there are still may other problem even attack surfaces on a system. I did a different explanation here that is easier to relate to, perhaps: https://news.ycombinator.com/item?id=47932066 https://news.ycombinator.com/item?id=47932066