Open-source alternatives to OpenCorePkg

netboot.xyz is a network-based system management platform that enables automated operating system deployment and remote system maintenance. By leveraging iPXE and standard network protocols like DHCP and TFTP, it provides a centralized infrastructure for booting installers and utility tools directly over a local network. The system is designed to facilitate unattended installations and live environment execution, allowing users to manage hardware without the need for physical installation media. The project distinguishes itself through a highly flexible, template-driven approach to boot menu

Ventoy is a cross-platform boot manager that enables users to launch multiple operating system installers and live environments from a single portable storage device. By intercepting the BIOS or UEFI startup sequence, it provides a unified menu that allows for the direct execution of disk image files without requiring file extraction or manual reformatting of the drive. The tool distinguishes itself through a modular, plugin-driven architecture that maps raw image files directly into system memory as block devices. Users can navigate local directories to select bootable files and utilize a we

KernelSU is a kernel-based root management framework for Android that provides administrative access to applications by operating directly within the operating system kernel. By integrating management logic into the kernel source, it enables system-wide permission control through syscall interception and function patching. This approach allows for the enforcement of fine-grained mandatory access control, assigning custom security domains to root processes to restrict their capabilities and prevent unauthorized actions. The project distinguishes itself through a systemless modification archite

systemd is a comprehensive system and service manager for Linux that orchestrates the entire operating system lifecycle. It functions as the primary init system, managing the transition from firmware to a fully initialized user space while providing a unified framework for service orchestration, hardware management, and resource control. The project distinguishes itself through its declarative, unit-based configuration model and dynamic dependency resolution, which allow for efficient, on-demand service activation and socket-based process management. It integrates deep system observability th

This project is a Linux distribution build system and deployment framework designed to compile tailored Debian and Ubuntu server images for Amlogic ARM hardware. It functions as an operating system deployer and kernel builder, providing the tools necessary to flash system images to internal or external storage and manage boot configurations on ARM boards. The system includes a specialized build pipeline for compiling Linux kernels with hardware-specific patches and out-of-tree driver modules. It also features a dual-boot partition manager that enables the backup and restoration of original An

edk2 is a development project for creating system firmware that complies with the UEFI specification. It provides the necessary infrastructure to initialize hardware platforms and boot operating systems across multiple CPU architectures. The project utilizes a modular firmware architecture that decouples high-level management protocols from physical transport layers. It implements critical security features, including a measured boot chain, cryptographic primitives for image authentication, and support for Trusted Platform Module hardware and software implementations. Its capability surface

Lilu is a kernel patching engine and runtime code injection framework designed to modify kernel drivers and libraries in memory. It functions as an operating system customization framework that intercepts function calls and redirects execution flow within the kernel to resolve hardware compatibility issues and adjust system stability. The project employs a modular platform that allows for the injection of code and the modification of system libraries during the boot process without altering files on disk. It utilizes a plugin-based extension architecture and a standardized API interface to lo

Foreman is a lifecycle infrastructure management platform used for automating the provisioning, configuration, and monitoring of physical, virtual, and cloud servers. It serves as a central hub for managing the entire lifespan of a server, from initial deployment and operating system upgrades to decommissioning and auditing. The platform functions as a hybrid cloud manager and bare-metal provisioning tool, providing a unified interface to control virtual machine lifecycles across diverse hypervisors and public cloud providers. It automates hardware discovery and operating system deployment us

Redox is a POSIX-compliant, microkernel-based operating system written entirely in Rust. By utilizing a memory-safe language for the kernel and all system components, the project eliminates common vulnerabilities such as buffer overflows and use-after-free errors. Its architecture relies on a minimal kernel that manages only essential hardware and process isolation, delegating all other system services to unprivileged user-space processes. The system distinguishes itself through a modular design where hardware drivers and system services run as independent user-space daemons, allowing them to

This utility provides a centralized administrative framework for managing and optimizing Windows environments. It functions by executing system-level primitives, including registry modifications, service management, and file system operations, to enforce performance, privacy, and security policies. The project distinguishes itself through its template-driven automation, which allows users to apply predefined configuration profiles to ensure consistent system states across machines. It integrates low-level adjustments—such as memory balancing, startup control, and hardware parameter tuning—wit

This project is a comprehensive technical manual for installing macOS on non-Apple x86 hardware using the OpenCore bootloader. It serves as a configuration guide for emulating Apple hardware and patching system firmware to achieve operating system compatibility on PCs. The documentation provides detailed instructions for SMBIOS hardware emulation, including the generation of system identifiers and model profiles. It covers the application of ACPI table patches to enable native power management and the modification of UEFI runtime services to resolve memory map and write protection issues. Th

Talos is a minimal, immutable Linux distribution designed specifically for deploying and managing Kubernetes clusters. It functions as an API-driven infrastructure manager that replaces traditional shell access with a declarative gRPC interface to control operating system state and configuration. The system is distinguished by its use of a read-only root filesystem and a security-hardened kernel, which removes standard GNU utilities to reduce the attack surface. It ensures environment consistency by distributing the operating system as versioned, signed images and utilizes TPM-backed verified

Excelize is a library for reading and writing spreadsheet files in the Office Open XML format. It provides a comprehensive suite of tools for programmatically creating, modifying, and analyzing workbooks, worksheets, and cell data, ensuring compatibility across various office software suites through structured XML serialization. The library distinguishes itself with a built-in formula calculation engine that evaluates complex mathematical and logical expressions directly against workbook data. It also features a memory-mapped streaming architecture, which allows for the efficient processing o

U-Boot is an embedded bootloader that initializes hardware components and loads operating system kernels into memory. It functions as a hardware abstraction layer providing standardized access to networking, storage, and peripheral buses, while also serving as a secure boot loader and a firmware update interface. The project distinguishes itself through the implementation of secure boot sequences that verify cryptographic signatures and interface with TPM modules to establish hardware-rooted trust. It further provides specialized capabilities for updating device firmware via standardized prot

m1n1 is a low-level bootloader for ARM64-based Apple Silicon hardware. It serves as a firmware tool and experimentation environment for loading external kernels and non-native operating systems. The project enables the execution of concatenated binary payloads containing kernels, device trees, and ramdisks. It provides a platform for firmware experimentation and the deployment of custom kernels on Apple Silicon chips. The system covers low-level hardware abstraction, including memory-mapped register access, device tree transmission, and stage-based bootloading. It also includes UART-based se

This repository contains the pre-compiled firmware, bootloader binaries, device tree overlay files, and Linux kernel modules that power Raspberry Pi single-board computers. It provides the foundational system firmware that initializes the hardware and loads an operating system. The boot architecture relies on a proprietary VideoCore GPU that co-processes early initialization, memory partitioning, device tree overlay loading, and mailbox-based peripheral configuration before handing control to the main CPU. This multi-stage boot process uses a chain of small binary stages and loads a raw kerne

Harden-Windows-Security is a security hardening tool and framework designed to reduce the attack surface of the Windows operating system through policy enforcement. It provides a collection of security presets and templates to implement official hardening standards across multiple devices. The project distinguishes itself through a comprehensive execution control system, featuring a manager for Windows Application Control and a kernel protection suite. It implements strict trust models, including kernel-mode driver whitelisting, signed policy implementation on the EFI partition, and code inte

GodMode9 is a system-level utility for Nintendo 3DS hardware designed for booting unsigned firmware, managing files, and modifying internal memory. It serves as a custom firmware tool for booting specialized payloads and unlocking restricted system features and hardware capabilities. The project provides a low-level hardware interface for interacting with I2C registers, extracting system keys, and managing raw memory partitions. It functions as a game image dump tool to extract retail cartridges and system images, while also acting as a binary patching utility to alter software behavior via r

Atmosphere is a custom firmware for the Nintendo Switch that provides core system components for loading custom kernels, managing modified operating systems, and redirecting hardware storage. It functions as a customized operating system designed to enable deep system modification and functional extensions. The project distinguishes itself through a system module injector and an application patching engine that allow for the loading of custom binary modules and patches to add features to the console. It also includes a virtual storage manager that redirects internal hardware writes to a virtu

Magisk is an Android rooting framework designed to manage system-level modifications and grant administrative access to mobile devices. It functions by patching boot and recovery images to inject custom code into the operating system initialization sequence, allowing for system-wide control while maintaining compatibility with the underlying hardware. The project distinguishes itself through a systemless modification layer that overlays a virtual file system on top of read-only partitions, enabling changes without altering core system files. It includes a policy daemon to manage security cont

Reinstall is an automated operating system deployer and bare metal provisioning tool designed for virtual private servers and remote hardware. It functions as a remote disk imaging utility and OS management tool, enabling the deployment and reinstallation of Linux and Windows operating systems without requiring physical access to the machine. The project distinguishes itself by automating complex installation hurdles, such as bypassing hardware requirements for RAM, TPM, and SecureBoot. It manages critical low-level tasks including hardware-aware driver injection, raw disk image deployment wi

SukiSU-Ultra is a kernel-level privilege management tool for Android that grants and controls administrative access by patching kernel functions and loading custom modules. It functions as a kernel module framework that overwrites kernel function addresses to enhance system capabilities, and as a kernel patching utility for building device-specific rooted kernel images that preserve root access after system updates. The project enforces fine-grained superuser permission management directly in the kernel, with per-application root privilege locking that restricts elevated access to a controlle

This project is a shell-scripted utility designed for cloning and synchronizing Linux system disks. It enables the creation of bootable copies of active storage devices, allowing users to maintain functional backups or prepare new storage media for embedded computing environments. The tool performs partition-aware cloning by analyzing the source drive structure to recreate identical layouts on destination disks. It distinguishes itself by modifying boot configuration files and partition identifiers on the target drive, which ensures that cloned media remain bootable when moved to new hardware

This project is an AI model API gateway and proxy server designed to provide a unified interface for interacting with diverse artificial intelligence service providers. It functions as a centralized middleware platform that routes, load balances, and translates API requests across multiple models, enabling developers to access text, image, audio, and video generation capabilities through a single, standardized integration. The gateway distinguishes itself through comprehensive administrative and financial controls, including event-driven usage accounting, real-time token consumption tracking,

Bottlerocket is a container-optimized operating system and minimal Linux distribution designed specifically for hosting container workloads. It functions as an immutable infrastructure OS, utilizing a read-only root filesystem and atomic partition swapping to ensure consistent and reversible system updates. The system is distinguished by an API-driven host manager that replaces traditional shell-based configuration with a local REST API for administrative tasks. To maintain security and stability, it employs a dual-runtime isolation model that separates workload runtimes from system operation

This is a Unix-based dotfiles repository providing a version-controlled collection of configuration files, environment variables, and shell aliases. Its primary purpose is to optimize macOS for software development by applying a curated set of system defaults and Zsh shell workflow enhancements. The project distinguishes itself through a comprehensive collection of macOS system defaults and specific configurations for the Zsh shell. It includes specialized Git workflow configurations and whitespace settings designed to standardize and accelerate version control operations across different env

This is a virtualization tool designed to run macOS guest operating systems, such as Catalina, Mojave, and High Sierra, inside VirtualBox on Windows, Linux, or Mac hardware. It provides a system for deploying these operating systems on x86 CPUs using official installation files. The project includes specialized utilities to manage EFI and NVRAM settings, enabling the emulation of device serial numbers and board identifiers to allow connectivity for cloud services and messaging. It also features a configurator for adjusting CPUID profiles and display resolutions to ensure hardware compatibilit