Resilient Linux is a Debian-based distribution for workstations and servers which features a read-only filesystem for the operating system to protect against attacks and corruption. The filesystem may be encrypted at install time for additional privacy.
https://www.resilientlinux.com/