Top all-time · #6315
Amutable
Company blog · amutable.com/blogsystemssecurity
Amutable is the company blog at amutable.com, writing about systems and security. Since 2026, 12 different Hacker News readers have linked it 14 times, most often “Introducing Amutable, Linux Systems Integrity”. It is still writing: the last post was on 2026-10-28, and you can follow it by feed.
Too few sampled comments (6) to say how often HN recommends it.?
Why HN links it
HN commenters link Amutable's blog and events page when discussing the company's immutable, systemd-based Linux work, remote attestation, the Tine build system, and a TPM-signed hardware report module.
Summarised by Claude from a sample of 6 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Amutable Foundations brings verifiable integrity to Linux infrastructure, from build to runtime.
Most-linked posts?
- Introducing Amutable, Linux Systems Integrity2 people · 2 mentions · first linked 2026-01-27
What Hacker News says?
> Linux excels over Windows in the area of security by a wide margin No, this is wrong but might be true if you are talking about Linux package manager vs. Random Windows .exe on internet. But if you are talking about Secure Boot, encrypted disk, sudo etc. Windows is more secure but it looks like https://amutable.com/ will make Linux more secure like Windows. Edit: Some insecure things on Linux: Dbus (kwallet etc.),…
Comment linking /
on “Microsoft open-sources LiteBox, a security-focused library OS”Submitted From Thin Air to Bootable Images: The Tine Build System as a story · 40 points
HN discussionThe other article on their blog introduces a systemd module that not only collects all hardware information, but also signs it with TPM before transmission [0]. I'm not even sure it makes much sense in datacenter conditions. And once it gets onto computers of the regular users, it would be very easy to repurpose it for spyware. [0]: https://amutable.com/blog/it-starts-upstream-systemd-report
Comment linking /blog/it-starts-upstream-systemd-report
on “From Thin Air to Bootable Images: The Tine Build System”Submitted Dumb servers, smart clients: Distributing OS images with Quarry as a story · 30 points
HN discussionDisclaimer: I work at Amutable but not on tine (though we did discuss this internally a fair bit, as you might expect). Nix does have a similar model in some respects (in particular the idea of input-hashed build graphs) and so solves a lot of similar problems but there were a few important factors that made us not go with Nix (or NixOS) and instead go with Buck2. As the blog post mentions, the ability to build dire…
Comment linking /blog/it-starts-upstream-kernel
on “From Thin Air to Bootable Images: The Tine Build System”Submitted Introducing Amutable Foundations as a story · 17 points
HN discussionIt's possible to not implement remote attestation even when you implement secure boot. This company is explicitly all about implementing remote attestation (which is a form of DRM): https://amutable.com/events > Remote Attestation of Imutable Operating Systems built on systemd > Lennart Poettering
Comment linking /events
on “Lennart Poettering, Christian Brauner founded a new company”Submitted Lennart Poettering, Christian Brauner founded a new company as a story · 10 points
HN discussionAlso see http://amutable.com/events which lists a talk at Open Confidential Computing Conference (Berlin, March)
Comment linking /events
on “Lennart Poettering, Christian Brauner founded a new company”Submitted Building cryptographically verifiable integrity into Linux systems as a story · 3 points
HN discussionIt's great that the same someone has formed a company called Amutable which has the sole purpose of converting Linux to a locked-down immutable OS where the users doesn't have the key. Also it's interesting that a set of simple interfaces have worked for so long. Maybe they did something wrong that it didn't break? See: https://www.amutable.com
Comment linking /
on “Replacing Systemd with OpenRC in Debian”Submitted Amutable Foundations: Verifiable integrity for Linux infrastructure as a story · 1 points
HN discussionSubmitted Amutable as a story · 1 points
HN discussionSubmitted Introducing Amutable, Linux Systems Integrity as a story · 1 points
HN discussion
