This is a screenshot of running an "immutable bookworm" (i.e., customized live USB) on HD (NVME):
As mentioned previously, since I started this thread I have begun to use this live bookworm iso as my primary OS for everyday use. As a relatively experienced Debian desktop user, using a read-only system was awkwardly inconvenient. Almost everything I need was missing. However, things got much improved as time went on and the bookworm live iso got incrementally customized. I have a live iso dual-grub-boot subsystem, one with persistence and one without, that are attached to the system grub.cfg file via running the /etc/grub.d/40_custom script* in case I need to further modify my live iso. But this need has become less and less frequent. It definitely gives me a different feeling running a read-only (aka "immutable") OS, especially in light of the CrowdStrike/Microsoft fiasco today.
As shown in the screenshot, Google Chrome is running as an appimage in RAM. Ditto LibreOffice but for some reason it was not shown as also mounted in /tmp.
* This is an example of the /etc/grub.d/40_custom file that I have been using for my immutable bookworm:
As mentioned previously, since I started this thread I have begun to use this live bookworm iso as my primary OS for everyday use. As a relatively experienced Debian desktop user, using a read-only system was awkwardly inconvenient. Almost everything I need was missing. However, things got much improved as time went on and the bookworm live iso got incrementally customized. I have a live iso dual-grub-boot subsystem, one with persistence and one without, that are attached to the system grub.cfg file via running the /etc/grub.d/40_custom script* in case I need to further modify my live iso. But this need has become less and less frequent. It definitely gives me a different feeling running a read-only (aka "immutable") OS, especially in light of the CrowdStrike/Microsoft fiasco today.
As shown in the screenshot, Google Chrome is running as an appimage in RAM. Ditto LibreOffice but for some reason it was not shown as also mounted in /tmp.
* This is an example of the /etc/grub.d/40_custom file that I have been using for my immutable bookworm:
Code:
user@debian:/tmp$ cat /media/user/d12/etc/grub.d/40_custom #!/bin/shexec tail -n +3 $0# This file provides an easy way to add custom menu entries. Simply type the# menu entries you want to add after this comment. Be careful not to change# the 'exec tail' line above.menuentry "Debian 12.6 ISO Remasterized" {set iso_path="/debian12/new-debian-live-12.6.0.iso" search --no-floppy --label --set=iso_partition isormmod tpmloopback loop ($iso_partition)$iso_pathlinux (loop)/live/vmlinuz-6.1.0-22-amd64 boot=live components quiet splash noeject noresume findiso=$iso_pathinitrd (loop)/live/initrd.img-6.1.0-22-amd64}menuentry "Debian 12.6 ISO with persistence" {set iso_path="/debian12/debian-live-12.6.0-amd64-gnome.iso" search --no-floppy --label --set=iso_partition isormmod tpmloopback loop ($iso_partition)$iso_pathlinux (loop)/live/vmlinuz-6.1.0-22-amd64 boot=live persistence persistence-label=persistence_12 components noresume noeject quiet splash findiso=$iso_pathinitrd (loop)/live/initrd.img-6.1.0-22-amd64}
Statistics: Posted by pwzhangzz — 2024-07-19 17:27