// ZDNET — LINUX & OPEN SOURCE
openSUSE Leap adds a new security layer: Immutable mode
Tech > Services & Software > Operating Systems > Linux
One of the more secure Linux distributions has added another feature to help further lock it down.
I’ve been a fan of SUSE and openSUSE for a long time. I actually remember SUSE Linux before it was SUSE Enterprise Linux or SUSE Enterprise Linux Desktop. Even back then, the distribution was a power user’s dream come true.
openSUSE has been, for a very long time, one of the more secure of the “mainstream” Linux distributions. And in German-speaking countries, openSUSE is quite popular due to its ties to the German company SUSE.
Also: This Linux distro makes openSUSE accessible to all – even newbies should take a look
Starting with version 16.1, openSUSE Leap (the stable version of the distro) is adding another layer to its security that should further elevate it as one of the more secure distributions on the market. That layer is immutable mode.
According to the official openSUSE blog, “Leap 16.1 is the first Leap release to offer an Immutable Mode, a transactionally updated system with a read-only root filesystem. This is essentially what our users know from Leap Micro, just integrated directly into Leap.”
For those who don’t know, Leap Micro is a specialized, lightweight, immutable, and fixed-release operating system designed for containerized workloads, edge computing, and virtualized environments. Leap Micro is not a desktop OS, but Leap is. And with Leap benefiting from what Micro already has, this could be a huge step forward.
First off, the same blog mentions that Leap Immutable “is the way forward for container and virtual machine hosts, edge devices and anyone who prefers atomic updates with easy rollback.” It’s the last bit that should raise eyebrows, as the developers intend Leap Immutable not only for specialized deployments but for anyone who prefers atomic updates on the desktop.
But atomic updates and immutability aren’t exactly the same thing. Does that mean Leap Immutable will be a sort of “immutable light”?