10 KiB
Kinvolk to Microsoft to Amutable: The Corporate Pipeline
Kinvolk GmbH (2015-2021)
| Field | Detail |
|---|---|
| Founded | 2015, Berlin |
| Founders | Alban Crequy, Chris Kühl, Iago López Galeiras |
| Register | Amtsgericht Charlottenburg, HRB 171414 B |
| Address | Adalbertstrasse 6a, 10999 Berlin |
| Name meaning | "Extended family" in German |
Key Products
- Flatcar Container Linux (2018) - immutable, image-based container OS with dm-verity. Drop-in replacement for CoreOS Container Linux
- Lokomotive - self-hosted Kubernetes distribution
- Inspektor Gadget - eBPF-based inspection framework for Kubernetes
Microsoft Acquisition (April 29, 2021)
| Field | Detail |
|---|---|
| Date | April 29, 2021 |
| Terms | Not disclosed |
| Rationale | Bolster Azure Kubernetes Service (AKS) and Azure Arc |
| Integration | Kinvolk team joined Azure engineering organization |
| Commitments | Maintain open-source culture, continue Flatcar and Inspektor Gadget |
| Outcome | Flatcar became Azure Marketplace product; entered CNCF Incubator (October 2024) |
Sources:
Amutable GmbH - Corporate Registration
| Field | Detail |
|---|---|
| Legal name | Amutable GmbH |
| Legal form | Gesellschaft mit beschränkter Haftung (GmbH) |
| Registered address | Bornholmer Strasse 80 A, 10439 Berlin (Prenzlauer Berg / Pankow) |
| Register court | Amtsgericht Charlottenburg (Berlin) |
| Register number | HRB 278404 B |
| Share capital | 25,200 EUR (near the 25,000 EUR GmbH minimum) |
| Managing directors | Christian Brauner, Christopher Wilson Kühl, Lennart Poettering |
| Corporate purpose | Development, maintenance and distribution of software and related technical and management consulting services |
| Founded | 2025 (exact date not public; before October 2025 trademark filing) |
| Public announcement | January 29, 2026 |
US Trademark
| Field | Detail |
|---|---|
| Serial number | 99430458 |
| Filed | October 7, 2025 - 3+ months before public announcement |
| Mark | AMUTABLE (standard character) |
| Attorney | David A. Copland |
| Covers | Database management software, application software for building/developing/monitoring Linux-based systems, business administration/consulting services, data processing |
Key finding: The company was incorporated and trademarked months before the January 2026 public announcement. The trademark filing predates the birthDate PR by 5 months.
Funding
No public VC announcement or funding round has been disclosed. heise.de characterized the company as initially self-funded. The 25,200 EUR share capital (GmbH minimum) is consistent with bootstrapping or undisclosed stealth funding.
Sources:
- CompanyHouse.de - Amutable GmbH
- North Data - Amutable GmbH
- Justia Trademarks - AMUTABLE Serial 99430458
- heise.de - Amutable coverage
The Departure Sequence
| Person | Entered Microsoft | Left Microsoft | Route | Amutable Role |
|---|---|---|---|---|
| Chris Kühl | April 2021 (Kinvolk acquisition) | ~2025 | Kinvolk co-founder → MS Managing Director → Amutable | CEO |
| Lennart Poettering | ~July 2022 (from Red Hat) | Late January 2026 | Red Hat → MS → Amutable | Chief Engineer |
| Christian Brauner | ~2022 (from Canonical) | January 2026 | Canonical → MS Principal Engineer → Amutable | CTO |
| Kai Lüke | April 2021 (Kinvolk acquisition) | ~2025-2026 | Kinvolk → MS → Amutable | Founding Engineer |
| Joaquim Rocha | April 2021 (Kinvolk acquisition) | ~2025-2026 | Kinvolk → MS Principal SEM → Amutable | Founding Engineer |
At least 5 people went from Microsoft to Amutable. Others joined from different companies:
- Daan de Meyer joined from Meta (not Microsoft)
- Aleksa Sarai joined from SUSE (not Microsoft)
- Zbigniew Jedrzejewski-Szmek joined from Red Hat (not Microsoft)
- David Strauss - CPO, from Pantheon (co-founder/CTO), no confirmed MS employment
- Michael Vogt - from Canonical (Ubuntu Core/snap developer)
Christian Brauner's Path (NOT Kinvolk)
Brauner was not at Kinvolk. His path was separate:
- Canonical - Ubuntu Server team, core developer, LXC/LXD container maintainer
- Microsoft - Joined ~2022 as Principal Software Engineer, Linux kernel development (VFS, pidfds, idmapped mounts, user namespaces)
- Linux kernel - Maintains the VFS (Virtual File System) subsystem, submitted 12 pull requests for VFS in Linux 6.18
- Amutable - Left Microsoft January 2026 to co-found as CTO
IP and Technology Developed on Microsoft's Payroll
Key work done while at Microsoft:
| Technology | Developer | Significance |
|---|---|---|
| systemd trusted boot / measured boot / TPM2 | Poettering | "Brave New Trusted Boot World" proposal - the roadmap Amutable now productizes |
| "Fitting Everything Together" blog post | Poettering (May 2022) | Architectural vision for image-based Linux - published shortly after joining MS |
| mkosi | Poettering + Daan de Meyer | Image-based OS building tool, developed under systemd GitHub org |
| ParticleOS | Poettering, Daan de Meyer, Boccassi | Experimental image-based secure Linux distro in systemd's GitHub org |
| VFS kernel work | Brauner | idmapped mounts, pidfds, user namespace security - all done as MS Principal Engineer |
| Flatcar Container Linux | Kühl, Lüke, Rocha | Immutable container OS, continued under MS post-acquisition |
| systemd & TPM in 2025 | Poettering (FOSDEM 2025) | Roadmap talk: defaulting to Measured Boot, TPM2 disk encryption |
Key Nuance
All of the above was done as open-source contributions under LGPL/GPL licenses. The IP is not proprietary to Microsoft. The expertise, architectural vision, and productization roadmap were, however, developed on Microsoft's payroll.
Amutable's announced focus - "determinism and verifiable integrity for Linux workloads" - is a direct commercialization of the exact technology Poettering and Brauner built while at Microsoft.
ParticleOS
ParticleOS is an experimental image-based, secure Linux distro hosted under the systemd GitHub organization (not Microsoft's). It implements Unified Kernel Images (UKI), dm-verity, signed images, and the full "Fitting Everything Together" architecture.
ParticleOS is the reference implementation for what Amutable is now commercializing. The Amutable team explicitly lists experience with ParticleOS.
Non-Compete and IP Situation
Microsoft's Non-Compete Policy
Microsoft announced in June 2022 that it was eliminating non-compete clauses for most US employees (except Partners and Executives).
German Law
Amutable's team is Berlin-based. German labor law generally disfavors non-competes and requires compensation (typically 50% of salary) for any post-employment non-compete period. The Kinvolk team were German employees; Poettering and Brauner were also Germany-based.
Assessment
No public IP disputes, lawsuits, or cease-and-desist have surfaced from Microsoft. The core technology is open source and cannot be claimed as proprietary. Internal productization strategy could theoretically be confidential. ParticleOS is hosted under systemd (not Microsoft) GitHub org.
Community Criticism
Tux Machines and Techrights have characterized Amutable as a "Microsoft proxy" - arguing the founders spent years developing technology strategy on Microsoft's payroll and are now spinning it out, potentially serving Microsoft's interests in controlling Linux boot/security through trusted boot and remote attestation.
Sources:
- Tux Machines - Amutable criticism
- Techrights - Amutable criticism
- CSO Online - Amutable coverage
- It's FOSS - Amutable coverage
The Flatcar to Amutable Conceptual Connection
The connection runs through people and design philosophy, not direct technology reuse:
- Flatcar: immutable, image-based, dm-verity, auto-updates, read-only root - the same design principles Amutable promotes
- Flatcar adopted systemd-sysext (systemd 248+) for extending its immutable base - technology Poettering developed
- Flatcar remains a CNCF Incubator project and Amutable is not taking it
- Amutable's team brings deep experience building immutable Linux from Flatcar, and the same concepts are what Amutable aims to productize more broadly
Summary: The Pipeline
Kinvolk GmbH (Berlin, 2015)
│ Products: Flatcar Container Linux, Lokomotive, Inspektor Gadget
│
├──→ Acquired by Microsoft (April 2021)
│ Kühl, Lüke, Rocha → Azure engineering
│
│ Meanwhile:
│ Poettering (Red Hat → Microsoft ~July 2022)
│ Brauner (Canonical → Microsoft ~2022)
│
│ Work at Microsoft (2021-2026):
│ ├── Trusted boot / measured boot / TPM2 integration
│ ├── Image-based Linux vision ("Fitting Everything Together")
│ ├── ParticleOS reference implementation
│ ├── mkosi image building tool
│ ├── VFS kernel hardening
│ └── Flatcar Container Linux maintenance
│
├──→ Amutable GmbH incorporated (2025, before October)
│ Trademark filed October 7, 2025
│
├──→ Kühl leaves Microsoft (~2025)
├──→ Poettering leaves Microsoft (late January 2026)
├──→ Brauner leaves Microsoft (January 2026)
├──→ Lüke, Rocha leave Microsoft (~2025-2026)
│
└──→ Amutable publicly announced (January 29, 2026)
Mission: "Cryptographically verifiable integrity for Linux workloads"
= Commercializing the exact technology developed on Microsoft's payroll