**By:** webdevel@sparkhausmedia.com (Lori White)
© Photo by Stas Muravev on Unsplash
The core of an immutable system cannot be changed, but you can bend that rule by overlaying your own stuff using a nifty systemd feature called SysExt.
Immutable distros are great at keeping users safe and sysadmins sane.
Users cannot modify the base system – even with super user access.
This means the user cannot delete anything vital or install anything dodgy.
The only way the base system changes is through updates, and updates are atomic, which means the whole system is updated all at once.
Avoiding error-prone partial updates adds an extra level of security and allows for an easy rollback to a prior version if something goes awry.
Apps are installed in containerized packages, like Flatpaks, Snaps, or AppImages, which means buggy or malicious code can only affect the user’s home directory.
Immutable distros are ideal for schools, hospitals, work stations, and all those places where you need to keep users safe and systems working without interruption.
The problem with immutable distros is that they take away the user’s ability to tinker, which is an important feature with traditional Linux distros.
One would be excused for thinking of immutables as the Linux equivalent of the gray, metal filing cabinets you find in public administration offices: solid, stable, reliable, great value for money environments, but boring and only good for work environments.
However, a tool called SysExt [1] offers a solution for users who want the benefits of immutable without losing the option to tinker.
SysExt is a little known and even less documented feature available on all distros with systemd.
The name SysExt is a portmanteu of System Extensions and, in a nutshell, this ingenious tool lets you overlay your own content from directories in your home folder onto system directories that otherwise would be out of bounds.
This article describes how to get started with SysExt.
The examples are based on KDE Linux [2], an immutable distro created by the KDE community, but the procedures are similar for other immutable distros.
[…]
Take control of the services running on your Linux machine
You might need to tweak your Debian or Ubuntu packages to get them to work with systemd.
Caddy lets even the most inexperienced user set up a secure web server.
Wondering what all the fuss is about systemd? We explain the basic concepts and capabilities of the new system management suite – coming soon to a distro near you.
Systemd can start timers that automatically perform tasks at specified times.
The configuration files are known as timer units.
Developer Noah Cagle decided the world needed the once obscure but beloved Linux distribution and gave it a decidedly pink refresh.
If you’re looking for a laptop with tons of power and battery, look no further than the latest iteration of the System76 Lemur Pro.
Using the cloc utility, Michael Larabel of Phoronix discovered that Linux kernel 7.2 has over 43 million lines of code.
The Kubuntu Focus team has upped the performance ante of its M2 and Zr laptops with the latest, greatest CPUs from Intel.
Gamers using KDE’s Plasma desktop have been suffering from a slight input delay in mouse movement that could lead to getting fragged.
A developer changed three lines of code, giving Linux storage performance a 5% bump.
Once again the Arch User Repository is plagued by a high volume of malicious packages.
If you’re a fan of Alpine Linux, it’s time to upgrade because the latest version has been released with KDE Plasma 6.6, Gnome 50, and Linux kernel 6.18 LTS.
Comprehensive measures adopted by the European Commission aim to reduce dependency on non-EU countries.
Within growing security and skills gaps, AI has been found to be a positive driving force behind tech hiring trends in Europe.
—
**📚 Original Source:**
[Extending an immutable distro with SysExt](http://www.linux-magazine.com/Issues/2026/308/SysExt)
About The Author
