fsprotect review

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

fsprotect is a GPLv3 Debian toolset that protects root and additional filesystems with an AUFS overlay backed by tmpfs. It keeps changes in memory while the original filesystems remain read-only, then restores the protected state on reboot. The project is intended for public-access computers such as library and laboratory systems, making it a fit for Debian administrators managing small or mid-market self-hosted deployments.

The published model is open source, with fsprotect distributed as a Debian package installable through apt. Root protection runs from an initramfs script during boot and can be enabled with the fsprotect=size kernel parameter, which also sets the tmpfs size. Administrators can list additional filesystems in /etc/default/fsprotect. Sizing accepts bytes, percentages, or auto mode, giving configuration control over the memory-backed layer without introducing paid plan tiers.

Its scope is deliberately focused: the restore trigger is reboot and the rollback scope is the full volume. That approach suits systems where each restart should return protected filesystems to their underlying state, but it does not provide restore-management features. Operation is configuration-led, centered on Debian packaging, initramfs behavior, AUFS, tmpfs, and read-only remounts. Choose fsprotect when immutable session behavior and explicit filesystem configuration are the priority; consider another system restore product when you need managed restore workflows or a platform beyond Linux.

fsprotect pros and cons

• Where it wins
  • AUFS overlays protected filesystems with a memory-backed tmpfs layer
  • Initramfs integration protects the root filesystem during boot
  • Tmpfs sizing supports bytes, percentages, or automatic mode
• Where it doesn't
  • Configuration relies on Debian files and kernel parameters
  • Restore occurs on reboot rather than through management controls
  • Linux-focused deployment limits platform coverage

fsprotect fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 29 Oct 2026 · How we research and update