Что думаешь? Оцени!
From Plate to Petri Dish
，推荐阅读爱思助手下载最新版本获取更多信息
In 2011, hackers successfully cracked the main Linux development site, kernel.org. Afterward, to make sure this didn't happen again, the kernel's PGP web of trust was explicitly "bootstrapped" at a face-to-face key‑signing session during the 2011 Kernel Summit.
But of course, like any immutable system, there are mutable parts (otherwise, we couldn’t create any configuration files). OSTree handles this with “overlays” (actually, we use OverlayFS) that allow a read-write filesystem to be layered on top of the immutable system. For example, the /etc and /var directories are writable, while the rest of the system is read-only.