The Embedded Linux Security Handbook

9

Image-Based Deployments

In this chapter, we are going to truly diverge from the existing norms of package-based installs (and updates), which have been the mainstay of Linux for over thirty years. Let’s talk about immutable image-based systems. Immutable images have only been around for a few years. Just recently, they have captured the limelight. Some will argue (myself included) that immutable operating systems for appliances are the future of all embedded systems. The very thought of a system that is immutable and unchanging just gives us the impression of something even more secure than the rest. Or does it? If you too assume that it is more secure, you would be correct. More secure – yes – but not perfect...this chapter will give you ...