-------- Original Message --------
>> Does anyone here have some advice/idea/experience on how to do immutable
>> systems with OpenBSD?
> If you're new to OpenBSD, it would be much better to get some experience with
> a 'regular' installation first.
+1
I used to mount / read-only and have /dev on memory filesystems but I don't
bother any more.
I don't have any interest and so much experience in immutable Linux but I
suspect that it's largely a false sense of security. Useful for if you break
your system but in the same turn like live kernel updates also useful to an
attacker to infiltrate your system without detection and/or remove their tracks
too. Most attacks only affect memory anyway. It's a more advanced idea for
example to try and break windows update with plausible deniability than persist
something detectable.
