Amutable opens private preview of Foundations Linux without SSH
Original title: Amutable Foundations is a Linux system with no SSH and no package manager
Machines must send signed, hardware-backed reports of their images before receiving secrets or rejoining a cluster.
Amutable opened signups for a private preview of Foundations, a Linux system whose intended state is stored in version control and shipped as signed images. Machines verify firmware, boot loader, kernel and OS at boot, recording measurements in a TPM or confidential-VM CPU attestation. They have no package manager, SSH or interactive shell, so changes require a new signed image. A control plane checks each signed report against the hardware root of trust and declared state.
Unconfirmed: Capabilities and enforcement behavior are described by Amutable and are not independently verified.
- A mismatch can deny secrets and keep a machine out of the cluster.
- The company says configuration often sits outside measurable signed image data.
- It also criticizes shared join tokens as the usual cluster setup.
- Amutable cites EU Cyber Resilience Act reporting enforced since September 2026.
- Vendors
- Amutable
- Products
- Amutable Foundations
From the original article
2 min read at helpnetsecurity.com
Amutable opened signups for the private preview of Amutable Foundations, a Linux system in which each machine sends a signed report of the software and configuration it runs, drawing on local hardware to make the report easier to verify. The company says its engineers write and maintain code in the kernel, in systemd and in image-building tools. If you run a Linux fleet, this changes what you check.
By Anamarija Pogorelec · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.