SecurityNov 2, 2026, 8:23 PM UTC·1 min read

Amutable opens preview of Linux that proves its own state

The startup around systemd creator Lennart Poettering has opened a preview of a Linux where servers prove boot chain and configuration with TPM-signed measurements.

Rows of servers in a data center cluster, illustrating Linux systems verified by hardware-signed measurements. — Image: iX Magazin

SUMO

Dialo

ediviewer

Amutable, the startup founded around systemd creator Lennart Poettering, has opened a preview of a Linux system designed to prove its own state. Servers running it document their boot chain and configuration using measurements signed by a TPM, the security chip built into most modern hardware.

The practical consequence is strict: a machine that is configured incorrectly can be removed from a Linux cluster. Instead of trusting that a node is set up as intended, the cluster can check cryptographic evidence of what is actually running on it.

Why it matters

Operators of server fleets have long struggled to verify that every machine boots the expected software and carries the intended settings. Drift, tampering or misconfiguration is often discovered only after something goes wrong. Hardware-backed measurements shift that check from an assumption to something that can be verified automatically, and machines that fail it can be excluded.

The approach covers the whole path from the start of the boot process to the running configuration, rather than just a single component. That makes it relevant for security-sensitive environments, where proof of a system's integrity can be as important as the integrity itself.

What comes next

The preview is the first public step for the young company. Details such as supported hardware, distribution of the system and commercial terms were not part of the information available, so it remains to be seen how broadly the technology can be adopted and how it will fit alongside existing Linux distributions and cluster tooling.

For administrators and security teams, the preview offers an early look at a model in which a server's trustworthiness is demonstrated rather than assumed.