Awesome GitHub RepositoriesAtomic System Updates

Nix is a functional package manager, purely functional build system, and declarative configuration system. It serves as a reproducible environment manager designed to eliminate manual installation drift by defining software and operating system states through a configuration language. The project provides a means of managing software dependencies in isolated environments to prevent conflicts between different versions of the same tool. It enables the creation of consistent system configurations and development environments that replicate exactly across multiple machines. Its capabilities cov

Talos is a minimal, immutable Linux distribution designed specifically for deploying and managing Kubernetes clusters. It functions as an API-driven infrastructure manager that replaces traditional shell access with a declarative gRPC interface to control operating system state and configuration. The system is distinguished by its use of a read-only root filesystem and a security-hardened kernel, which removes standard GNU utilities to reduce the attack surface. It ensures environment consistency by distributing the operating system as versioned, signed images and utilizes TPM-backed verified

Home Manager is a declarative framework for managing user-specific packages, dotfiles, and services. It serves as a tool for maintaining reproducible home directory setups and user environments across multiple machines using the Nix package manager. The system functions as a declarative dotfile manager, defining application configuration files from a central source to ensure consistency. It allows for the management of user-level software packages and the automation of background processes and services that start upon user login.

Bottlerocket is a container-optimized operating system and minimal Linux distribution designed specifically for hosting container workloads. It functions as an immutable infrastructure OS, utilizing a read-only root filesystem and atomic partition swapping to ensure consistent and reversible system updates. The system is distinguished by an API-driven host manager that replaces traditional shell-based configuration with a local REST API for administrative tasks. To maintain security and stability, it employs a dual-runtime isolation model that separates workload runtimes from system operation

Brave is a privacy-focused desktop browser built on Chromium that blocks ads and trackers by default, and includes an integrated AI assistant and a built-in VPN client. It is available for Windows, macOS, and Linux, and can be deployed across organizations using enterprise group policies for managed configuration. The browser distinguishes itself by combining default ad and tracker blocking with a system-level VPN that encrypts all device traffic, and an AI assistant that answers questions and generates text content directly within the browsing interface. It also supports private browsing and

Bazzite is an immutable, atomic-image-based operating system designed for gaming performance and handheld hardware. It utilizes a read-only root filesystem and versioned images to provide atomic updates and instant system rollbacks, ensuring a stable core environment. The system is distinguished by its deep optimization for portable gaming devices, featuring dedicated handheld hardware management for CPU undervolting, fan control, and display refresh rate overclocking. It includes a specialized gaming mode that boots directly into a console-like interface with integrated input mapping and a t

Brunch هو إطار عمل إقلاع وطبقة تكييف أجهزة مصممة لتشغيل ChromeOS على أجهزة x86_64 غير أصلية. يستخدم محمل إقلاع EFI مخصص وحقن نواة لتمكين نظام التشغيل من العمل على معالجات Intel و AMD غير المدعومة أصلاً بواسطة الصور الرسمية. يتميز إطار العمل بتحويل صور الاسترداد الرسمية إلى إصدارات عامة قابلة للإقلاع من خلال استخدام نوى مخصصة وتمهيد قسم EFI. يسمح باستيراد مفاتيح الأمان إلى البرامج الثابتة للنظام لدعم الإقلاع الآمن ويوفر أدوات لتبديل تصحيحات الأجهزة وعلامات الميزات لبطاقات لاسلكية وأجهزة صوت وشاشات لمس محددة. يوفر المشروع قدرات لنشر ChromeOS كنظام إقلاع فردي أساسي، أو كتثبيت إقلاع مزدوج على قسم قرص مخصص، أو كوسيط USB قابل للإقلاع. يتضمن واجهة تثبيت رسومية ووضع تصحيح أخطاء مطول لتشخيص فشل الإقلاع.

This project provides a functional package manager and a reproducible build system designed to ensure identical build inputs always produce the same outputs. It serves as the foundation for a declarative Linux distribution where the entire system state is defined in a configuration file, enabling predictable deployments and full-system rollbacks. The system uses a deterministic functional language and a lazy-evaluation expression engine to manage software dependencies and isolate build environments. It distinguishes itself through a content-addressable store that allows multiple versions of s

fnnas is a Debian-based network attached storage operating system and deployment framework designed to transform x86 and Arm64 hardware into private storage servers. It provides a custom operating system image builder and a kernel compilation tool for building and packaging specific kernels and device tree blobs for various hardware platforms. The project includes a hardware-specific deployer that maps device models to required bootloaders and kernel tags. It features an eMMC backup and recovery tool to save factory system images from internal storage and restore them to revert system changes

This project is an Arch Linux-based operating system designed specifically for handheld gaming consoles. It functions as an immutable Linux distribution, utilizing a read-only root filesystem to protect core system files from accidental modification or corruption, which ensures consistent stability across device reboots. The distribution distinguishes itself through specialized configurations that prioritize gaming performance on portable hardware. It employs kernel-level hardware tuning to adjust power profiles and clock speeds, alongside containerized application runtimes that isolate softw