Exactly. Does your business model care if your server is running apache or nginx? No? Then why the hell isn't that automated, baked, and tamper-proofed? We'll know we've arrived when the only feasible attack is sneaking malicious code into a git repo and hoping no one notices.

And that's why I'm quite excited by the concept of Coreos and the way they do updates.

curious to know how you can make a linux distro immutable from any modification.