# Immutable infrastructure

> An operational model in which servers are never modified after deployment; changes ship as a new image and a replacement.

**Immutable infrastructure** is the practice of never changing a server after it is deployed. To patch, upgrade, or reconfigure, you build a new image, deploy new instances from it, and destroy the old ones. Nothing is updated in place.

The problem it solves is configuration drift. When servers are modified in place — a hotfix here, a manual package install there — the fleet slowly diverges, and each machine accumulates a history nobody has recorded. Eventually no two servers are quite the same, "works on that box" becomes a real diagnosis, and rebuilding a server exactly is impossible. Immutability removes the mechanism: if instances are never modified, they cannot drift.

It also makes rollback ordinary. The previous image still exists, so reverting is a deployment rather than an act of reconstruction.

The tradeoffs are real. Every change — including a one-line config edit — requires an image build and a replacement cycle, which is why the practice depends on that build being automated and reasonably fast. State has to live somewhere that survives instance replacement, which forces a discipline about what belongs on a server at all. And the image itself becomes a critical artifact: a fleet built on a [golden image](https://primcoat.app/glossary/golden-image) is only as current as its last rebuild.

## Related

- https://primcoat.app/glossary/golden-image.md
- https://primcoat.app/glossary/ami.md
- https://primcoat.app/glossary/qcow2.md

---

Source: https://primcoat.app/glossary/immutable-infrastructure
Primcoat — a managed VM image factory. https://primcoat.app