AstrOS is an immutable, secure-by-default Linux distribution built on Arch Linux and the COSMIC desktop.
Hashed/signed /usr and signed uki images protect system integrity, and it supports installable extensions using similar tooling as gnomeos or KDE Linux (sysupdate)