RakuOS fixes the one thing that annoys me most about immutable Linux distros

2026-06-09 · Source: News and Advice on the World's Latest Innovations | ZDNET · Field: Technology & Digital — Software Development & Engineering, Cloud Computing & IT Infrastructure · Depth: Intermediate, medium

Summary

RakuOS is a new hybrid Linux distribution that combines the security benefits of an immutable base system with the flexibility of traditional package management. Unlike typical immutable distros that rely solely on containerized applications like Flatpak or Snap, RakuOS employs a persistent overlay system mounted directly on /usr. This innovative approach allows users to install native packages using dnf or dnf5, which then persist across system updates, while the core system remains pristine and can be instantly rolled back via bootc. The distribution also features the high-performance CachyOS kernel, ensuring speed and responsiveness. RakuOS is available for free download as ISOs for KDE Plasma, GNOME, and COSMIC desktop environments, offering a user-friendly experience that feels like a traditional Linux OS.

Key takeaway

For IT professionals or developers seeking a secure yet flexible Linux environment, RakuOS offers a compelling solution. If you value the enhanced security of an immutable OS but require the convenience of installing native applications via traditional package managers like dnf, RakuOS provides the best of both worlds. Consider downloading an ISO for your preferred desktop environment (KDE Plasma, GNOME, or COSMIC) to experience its hybrid approach and high-performance CachyOS kernel firsthand.

Key insights

RakuOS merges immutable Linux security with traditional package manager flexibility via a persistent /usr overlay.

Principles

• Immutable base enhances security.
• Persistent overlays enable hybrid OS functionality.
• Native packages can persist across updates.

Method

RakuOS uses a persistent overlay on /usr to allow native package installation (dnf, dnf5) while keeping the base system read-only. It leverages OSTree for system resets.

In practice

• Install native packages via dnf or dnf5.
• Reset system to pristine state using rpm-ostree reset.
• Rebase Fedora Atomic distros to RakuOS.

Topics

• Immutable Linux
• Hybrid OS
• Package Management
• OSTree
• CachyOS Kernel
• Linux Security

Best for: Software Engineer, IT Professional, DevOps Engineer

Related on AIssential

• Atomic or immutable? I tested both Linux distros to see which is actually the future — Immutable and atomic Linux distributions enhance system security and reliability through read-only core files and transactional updates.
• 6 easy ways I make Zorin OS even faster and more secure — Even user-friendly Linux distributions like Zorin OS benefit from simple, free tweaks to enhance security, performance, and system resilience.
• After years of Linux, I tried GhostBSD and found it incredibly stable - and nearly unbreakable — GhostBSD offers a highly stable, complete UNIX-like OS experience based on FreeBSD with a lightweight Mate desktop.
• Wasabi Technologies Upgrades Data Protection Strategy for Leading, Historic Japanese University, Sophia School Corporation — Offsite, immutable cloud storage enhances data protection against ransomware and disasters while optimizing costs for educational institutions.
• Microsoft Announces Azure Linux 4.0, Its First General-Purpose Server Linux Distribution — Microsoft now offers two first-party Linux distributions, Azure Linux 4.0 for VMs and Azure Container Linux for immutable container hosts, aligning with other hyperscalers.
• Pip 26.1 Ships Dependency Cooldowns and Experimental Lockfile Support to Combat Supply Chain Attacks — Pip 26.1 enhances Python supply chain security through dependency cooldowns and experimental "pylock.toml" lockfile support.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by News and Advice on the World's Latest Innovations | ZDNET.