Duranium turns your old android into a vault that refuses to die
Your Pixel 3a just
got a second life, and this time it boots with a cryptographic middle finger to planned obsolescence. Duranium, the immutable offspring of postmarketOS, is already flashing onto Fairphone 5s, OnePlus 6s and ThinkPad X13s, turning yesterday’s e-waste into read-only fortresses that update like a Russian doll: whole-image swaps or nothing at all.
The read-only rebellion inside your pocket
Forget overlays. Duranium’s rootfs is welded shut while it runs, every block verified by dm-verity at boot. Tamper with a single bit and the kernel walks away, rolling back to the last known-good image. It’s NixOS-level paranoia squeezed into a phone, minus the package manager cruft. The userland lives in /home; everything else is cast in stone. Developers love it—bug reports now come with a perfect snapshot of the OS, not a shopping list of half-upgraded packages.
The price of that purity is silicon hunger. The UEFI requirement boots most 2019-era Qualcomm boards out of bed; 2 GB RAM feels cramped once the immutable image balloons with firmware blobs. postmarketOS maintainers admit the hardware bar is “noticeably higher” than vanilla pmOS, but the payoff is nightly atomic upgrades that either succeed atomically or vanish without trace.
Systemd’s sysupdate.d transports the payloads, signed and chunked, straight into the A/B partition dance borrowed from ChromeOS. No apt upgrade, no dnf distro-sync, just a reboot roulette that either lands you on a fresh build or back where you started. Power users who miss vi /etc can layer a writable overlay at install time, but doing so forfeits the cryptographic halo.
Right now the roster is short and quirky: Fairphone 5 for the ethics crowd, Pixel 3a for the bargain hunters, ThinkPad X13s for the ARM laptop cult. Flashing demands an unlocked bootloader, a nerve of steel and—irony of ironies—a Windows or Linux box to run the fastboot shim. Google’s Titan M is sidelined; the trust anchor is now the Duranium signing key, burned into the vbmeta partition.
The project mails unsigned images to volunteer beta testers, asking only for serial console logs in return. No telemetry, no Google Play Services, no SafetyNet tantrums. The only analytics are the IRC timestamps where devs paste crash hashes.
Obsolescence fought back with sealed batteries and soldered storage; Duranium answers by sealing the OS tighter than ever, then giving the keys to whoever still cares to look. If the experiment holds, the landfill loses another cohort of phones—and manufacturers lose another excuse to stop patching.