To what extent, if at all, would have CrowdStrike's faulty update have been easier to deal with with an immutable distro?
To what extent, if at all, would have CrowdStrike's faulty update have been easier to deal with with an immutable distro?
You're viewing a single thread.
You mean like NixOS?
It wouldn't technically stop anything, it would just make your live Hell on Earth if you tried to add that self-updating ring-0 proprietary software in your servers.
But I guess what you are looking for is immutable infrastructure? That one would stop the problem.
Can't see many Linux, or BSD, admins, being happy with "self-updating ring-0 proprietary software". That's very much a Windows culture thing.
Did you hear about it when that same software had that same problem on its Linux endpoint system a couple of months ago?
Well, me neither. I can't tell how much of if is "anybody willing to use something like that will also want a Windows server" (crazy people), or "nobody that wants Linux would accept it". Those two are not exactly the same, and I don't know how well the auditors that keep pushing this kind of shit into companies interact with the culture.
Yer, I didn't, but this does seams a very Windows'y way of doing things, so can't see it widely done in Linux/BSD/Unix world.