I remember some people booting firewalls off CD-R's. Burn a new one when it needed an update. Booting with no writable media at all, truly an immutable distro.