Comment on Silverblue or other immutable on remote VPS?
just_another_person@lemmy.world 2 months ago
How would describe the “reduced attack surface” of something running a container?
Comment on Silverblue or other immutable on remote VPS?
just_another_person@lemmy.world 2 months ago
How would describe the “reduced attack surface” of something running a container?
atzanteol@sh.itjust.works 2 months ago
That phrase has practically lost all meaning.
aordogvan@lemmy.world 2 months ago
Because even if an attacker could gain access even as root he cannot modify system files. This is why immutable OS distros are called immutable.
myersguy@lemmy.simpl.website 2 months ago
They 100% can.
asap@lemmy.world 2 months ago
It’s a read-only filesystem:
MalReynolds@slrpnk.net 2 months ago
Absitively, use case here IMO is set and forget autoupdate to stay current and SELinux (which actually reduces surface)
possiblylinux127@lemmy.zip 2 months ago
Wait, why wouldn’t they? They could wipe the entire disk if the so choose