Duranium turns old androids into unbreakable linux tanks
A handful of retired smartphones just became the hardest targets on the planet. Duranium, an immutable spin-off of postmarketOS, boots today on the Pixel 3a, OnePlus 6, Fairphone 5 and a short list of Chromebooks, wrapping their aging boards in a read-only, cryptographically signed straitjacket that refuses to start if a single bit has been nudged.
The pitch is simple: planned obsolescence dies when the OS can’t be touched. Every file outside the user’s home directory is sealed at boot by dm-verity, the same verification lattice Google uses to guard its Pixel firmware. If someone slips malware into the kernel or a mischievous app requests root, the phone reboots into the last known-good image. No recovery console, no ransom notes, no drama.
Why this is not another silverblue clone
Fedora Silverblue and NixOS already ship immutable desktops, but they still stack a writable layer on top of a frozen base. Duranium strips even that comfort. Updates arrive as full, signed disk images—atomic, monolithic, take-it-or-leave-it. Either the new build passes the cryptographic handshake or the bootloader silently rolls back. No partial upgrades, no dependency sudoku, no “update failed at 37 %” nightmares.
The trade-off is immediate: 5 GB of storage and a UEFI bootloader are now minimum specs. That evicts the low-end MediaTek handsets that postmarketOS once kept on life support. “We’re trading reach for reliability,” project lead Martijn Braam told TechCurrent. “If the chip can’t verify itself, we’re not porting it.”
Developers, at least, are ecstatic. Because every device boots the identical signed image, bugs reproduce across continents. No more “works on my nightly” ghost stories. Braam’s team can SSH into a tester’s frozen phone, copy the exact bits, and push a patch hours later.
The catch hidden in the small print
Immutability is a fortress until you need to repaint a wall. Want a custom kernel module for your weird USB-C dock? Compile it yourself, resign the entire image, and reflash. The process is deliberate, like swapping the engine of a moving car. Power users call that freedom; casual owners will call it a headache.
Google’s Titan-M and Apple’s Secure Enclave already prove consumers will trade tinkering for trust. Duranium asks the same question outside the walled garden: will you surrender root to gain a decade of security patches?
Braam is betting yes. The first stable milestone lands this winter, and he’s already negotiating with European refurbishers who need a bulletproof OS for resale. If the experiment sticks, the drawer of cracked-screen relics turns into a fleet of unbrickable Linux soldiers—phones that get older but never weaker.
Obsolescence, in other words, just met an OS that refuses to age.