Redox

Redox is a POSIX-compliant, microkernel-based operating system written entirely in Rust. By utilizing a memory-safe language for the kernel and all system components, the project eliminates common vulnerabilities such as buffer overflows and use-after-free errors. Its architecture relies on a minimal kernel that manages only essential hardware and process isolation, delegating all other system services to unprivileged user-space processes.

The system distinguishes itself through a modular design where hardware drivers and system services run as independent user-space daemons, allowing them to be updated or restarted without a full system reboot. Communication between these components is handled through structured message-passing rather than shared memory, ensuring strict isolation. Furthermore, Redox employs a unique scheme-based resource access model, where hardware, services, and system resources are exposed as file-like objects accessed through a unified URI-based naming convention.

The operating system provides a comprehensive environment for general-purpose computing and development, including a standard library that enables the execution of existing Unix-like software with minimal modification. It supports multiple CPU architectures and includes a robust suite of tools for build automation, package management, and system image generation. These utilities allow developers to cross-compile software, manage dependencies, and test system variants within virtualized environments.

The project is maintained as an open-source repository with extensive documentation and tooling to support custom kernel builds and system-level development.

Features

Kernel Build Systems - Orchestrates the compilation, cleaning, and updating of the entire operating system, including kernel components and toolchains.
System Image Generators - Compiles system recipes into bootable disk images for deployment to physical or virtual hardware.
Inter-Process Communication Schemes - Route system calls to user-space daemons by associating file paths and descriptors with specific schemes that handle requests through message passing.
POSIX Interfaces - Provides a standard C library interface to allow the execution of POSIX-compliant software.
Memory Safety - Implements a memory-safe architecture to eliminate common vulnerabilities like buffer overflows and use-after-free errors.
Scheme-Based Resource Managers - Exposes hardware, network, and system services as unified file-like resources managed by drivers or daemons.
Operating System Kernel Build Tools - Build a microkernel-based operating system from source code using a specialized toolchain to produce a functional computing environment.
Operating System Development - Focuses on building a memory-safe, microkernel-based operating system from the ground up.
Virtual Filesystem Schemes - Exposes user-defined logic as a virtual filesystem by registering a handler that processes kernel-dispatched file operations like open, read, and write.
Operating Systems - Provides a Unix-like computing environment developed in Rust to enforce memory safety and security across the kernel and userspace.
Memory-Safe Systems Languages - Implements the entire operating system in a memory-safe language to eliminate common vulnerabilities.
Microkernel Architectures - Utilizes a microkernel architecture to decouple drivers and system services for improved stability and security.
File System Access - Exposes system resources, devices, and files through a unified path-based interface for consistent interaction.
Firmware Boot Interfaces - Initializes hardware and boots the operating system environment.
Process and Memory Management - Manages hardware resources and system tasks through a microkernel architecture.
Inter-Process Communication - Uses structured message-passing for communication between system components to ensure strict isolation.
Filesystem Mounts - Supports creation and management of copy-on-write filesystems with transparent encryption and data integrity features.
Command Line Interfaces - Exposes a compatible command-line toolset and programming interface to enable the execution of existing Unix-like software.
Desktop Development Environments - Provides a complete graphical desktop environment with integrated development tools for a self-hosted computing experience.
Package Management Systems - Maintains software collections using a secure archive format that ensures atomic updates and verified integrity.
Unix Compatibility Layers - Runs standard computing workloads by maintaining compatibility with POSIX standards.
Build Recipes - Create build recipes for external software by specifying source locations and build templates to integrate new applications into the operating system environment.
Software Packaging - Provides tools to define and compile user-provided source code into installable packages for the operating system.
Driver Update Managers - Runs hardware drivers as independent user-space daemons that can be updated without system reboots.
Process Isolation - Runs hardware drivers as isolated user-space processes to prevent system-wide corruption and unauthorized memory access.
System Resource Management - Exposes system resources and hardware through a unified path-based scheme interface for consistent access.
Multi-Architecture Support - Executes on common 64-bit and 32-bit processor architectures including x86, ARM, and RISC-V to provide a functional computing environment.
Cross-Compilation Toolchains - Build software projects by providing cross-compilation toolchains and integrating with standard build systems like Cargo, Make, and CMake.
Embedded Operating Systems - Offers a full-featured operating system for internet-connected appliances that protects user privacy by reducing the attack surface.
Package Management Systems - Automate the downloading and compilation of software components from various source types to integrate them into the operating system image.
File System Interfaces - Maps system devices and kernel parameters to file paths for unified resource access.
System Services - Runs drivers and core services as independent, unprivileged user-space processes to improve system stability and security.
System Build Recipes - Add new user-defined programs to the operating system by creating a recipe that defines how the software is built and included.
Terminal and Command-Line Environments - Provide an interactive environment for users to run commands, manage processes, and navigate the operating system.
Userspace Kernels - Delegates non-core system services to unprivileged user-space processes to minimize the kernel footprint.
Message Passing Channels - Facilitates interaction between kernel components and user-space services through a structured message-passing interface.
Filesystem Implementations - Provides a modular, advanced filesystem architecture designed for high-level data integrity and persistent storage management.
File Storage Systems - Organizes data on storage media using a specialized filesystem designed for reliability and performance.
Cross-Platform Build Systems - Orchestrates compilation of system images and packages across architectures using a recipe-based system.
System Configuration Variants - Allows selecting predefined system configurations to include specific tools and environments tailored for different hardware.
Source Builds - Build the operating system image from source files to enable custom modifications and facilitate contributions to the development of the platform.
Bootable Image Executors - Enables booting the operating system from removable media images to facilitate testing without modifying internal disks.
Disk Installers - Writes the system image to internal storage media and configures an encrypted filesystem for persistent use.
System Calls - Invokes kernel-level operations from user-mode applications by triggering a mode switch that executes privileged tasks.
Hardware Interfaces - Communicates with standard system components including ACPI, PCI, and USB buses to manage hardware resources.
Virtual Machines - Executes the operating system within virtualized environments by configuring hardware emulation for storage and networking.
Standard Library Implementations - Provides a language-native implementation of the C standard library to ensure platform-specific functionality.
Data Persistence and Storage - Manages persistent storage across various hardware interfaces including IDE, SATA, and NVMe.
Local Filesystem Storage - Provides persistent filesystem storage designed for integrity and performance within the operating system.
Build Automation Scripts - Run arbitrary shell commands during the build process to handle non-standard software configurations or complex installation requirements.
Build Toolchains - Provides integrated sets of tools for compiling, linking, and managing the build process of software projects.
Development Environment Emulators - Replicates production-like environments for local development and testing of ARM64 configurations.
Software Package Repositories - Installs, updates, and removes software components and their dependencies from the system.
Integrity Validators - Runs automated test suites to detect regressions and ensure compliance with POSIX standards.
Self-Hosted Applications - Provides a secure foundation for hosting server applications on private hardware by leveraging memory-safe architecture.
Virtualization Environments - Provides isolated virtualized environments for running the operating system to test functionality without dedicated hardware.
OS Installation Support - Writes the operating system directly to hard drives or solid state drives to enable persistent use.
General-Purpose Computing Environments - Provides a comprehensive environment for general-purpose computing and application execution.
Image Flashers - Generates and flashes bootable disk images to physical storage devices for testing and installation.
File System I/O - Blocks execution until activity occurs on registered file descriptors to handle concurrent I/O efficiently.
System Emulators - Launches the operating system image within a virtualized environment to allow testing and interaction with the graphical user interface.
Virtualized Desktop Environments - Runs the operating system within a virtual machine to test system changes and verify package installations.
Kernel Error Handling - Enforces strict error handling within the kernel to prevent system-wide failures by limiting unrecoverable error states.
Process Sandboxing - Isolates applications using schemes and namespaces to restrict access to system resources and enhance security.
Process Restriction Policies - Isolates processes within specific namespaces to prevent unauthorized access to system resources and schemes.
Subject Access Restrictions - Enforces security boundaries between programs using namespaces and user-based permissions to control access to hardware and system resources.
Software Porting Tools - Facilitates compiling applications into native binaries by applying patches and maintaining forks for compatibility.
Namespace Isolation - Organizes system resources into distinct namespaces to enforce sandboxing and restrict access between operating system components.
System Resource Monitors - Displays real-time information about process activity, memory usage, and system uptime.
System Recipe Managers - Updates specific components or files within the operating system image to test changes without performing a full system rebuild.
Graphical User Interfaces - Manages window layout, application launching, and authentication within the graphical desktop interface.
Initialization Drivers - Load modular drivers and daemons from a RAMdisk to configure storage, logging, and hardware interfaces before mounting the root filesystem.
Build Performance Optimizers - Implements techniques and tools for reducing build times through resource management and parallel execution.
Source Code Retrieval Utilities - Retrieve software source code from remote repositories or compressed archives to facilitate the inclusion of third-party applications.
Compilers - Translate programming languages into executable binaries using integrated compiler toolchains to support software development and system maintenance.
Debugging and Inspection Tools - Provides tools for inspecting package contents, analyzing dependencies, and retrieving backtraces.
Automated Test Execution - Provides systems that trigger and run test suites within virtualized environments to verify software functionality.
Desktop Utilities - Includes essential graphical utilities like text editors, file browsers, and terminal emulators for standard desktop tasks.
Window Managers - Coordinates window creation and event handling through a user-space window manager.
Static Linking Configurations - Bundle library dependencies directly into executable binaries to improve runtime performance and isolate memory address spaces for enhanced security.
ARM64 Deployment Profiles - Configures bootable images for ARM64-based single-board computers by integrating necessary firmware and device tree structures.
Compiled Binaries - Run programs formatted as executable files that interact with the operating system through direct system calls or linked standard libraries.
System Headless Modes - Disables graphical output and display drivers to allow the system to run as a server-only instance.
Host Networking Services - Provides infrastructure for running network-facing applications to manage remote access and data delivery.
Network Stacks - Implements a dedicated network stack for processing TCP and UDP packets to maintain connectivity.
Window Management Systems - Provides a display server and compositor for window placement and visual composition.
Bootloader Configurators - Initializes disk images with bootloader support to enable system startup from custom storage volumes.
System Call Interceptors - Logs system calls made by programs to assist with debugging and behavioral investigation.
Bridge Networking Configurations - Configures virtual network adapters to bridge guest systems with local networks for connectivity testing.
Virtualization Platforms - Provides infrastructure for running isolated virtualized operating systems to contain security threats.
Security Isolation Mechanisms - Restricts GUI programs from accessing input events or visual data belonging to other windows to ensure process security.
Error Management - Enforces explicit error handling to ensure system resilience and meaningful feedback.
Namespace Management - Assigns specific sets of schemes to each process to define available resources and prevent unauthorized access to system-wide file descriptors.
System Configuration - Provides mechanisms for modifying system services and drivers at runtime without requiring reboots.
Kernel Execution Profilers - Generates visual flamegraphs to identify and analyze frequent kernel operations.
Graphical Display Servers - Manages graphical interfaces through a dedicated display server and windowing system.

سجل النجوم

redox-osredox

Name: redox-os/redox
Author: redox-os

View on GitHub

16,054 نجوم978 تفرعاتRustmit12 مشاهدات

Redox

The project is maintained as an open-source repository with extensive documentation and tooling to support custom kernel builds and system-level development.

Features

Kernel Build Systems - Orchestrates the compilation, cleaning, and updating of the entire operating system, including kernel components and toolchains.
System Image Generators - Compiles system recipes into bootable disk images for deployment to physical or virtual hardware.
Inter-Process Communication Schemes - Route system calls to user-space daemons by associating file paths and descriptors with specific schemes that handle requests through message passing.
POSIX Interfaces - Provides a standard C library interface to allow the execution of POSIX-compliant software.
Memory Safety - Implements a memory-safe architecture to eliminate common vulnerabilities like buffer overflows and use-after-free errors.
Scheme-Based Resource Managers - Exposes hardware, network, and system services as unified file-like resources managed by drivers or daemons.
Operating System Kernel Build Tools - Build a microkernel-based operating system from source code using a specialized toolchain to produce a functional computing environment.
Operating System Development - Focuses on building a memory-safe, microkernel-based operating system from the ground up.
Virtual Filesystem Schemes - Exposes user-defined logic as a virtual filesystem by registering a handler that processes kernel-dispatched file operations like open, read, and write.
Operating Systems - Provides a Unix-like computing environment developed in Rust to enforce memory safety and security across the kernel and userspace.
Memory-Safe Systems Languages - Implements the entire operating system in a memory-safe language to eliminate common vulnerabilities.
Microkernel Architectures - Utilizes a microkernel architecture to decouple drivers and system services for improved stability and security.
File System Access - Exposes system resources, devices, and files through a unified path-based interface for consistent interaction.
Firmware Boot Interfaces - Initializes hardware and boots the operating system environment.
Process and Memory Management - Manages hardware resources and system tasks through a microkernel architecture.
Inter-Process Communication - Uses structured message-passing for communication between system components to ensure strict isolation.
Filesystem Mounts - Supports creation and management of copy-on-write filesystems with transparent encryption and data integrity features.
Command Line Interfaces - Exposes a compatible command-line toolset and programming interface to enable the execution of existing Unix-like software.
Desktop Development Environments - Provides a complete graphical desktop environment with integrated development tools for a self-hosted computing experience.
Package Management Systems - Maintains software collections using a secure archive format that ensures atomic updates and verified integrity.
Unix Compatibility Layers - Runs standard computing workloads by maintaining compatibility with POSIX standards.
Build Recipes - Create build recipes for external software by specifying source locations and build templates to integrate new applications into the operating system environment.
Software Packaging - Provides tools to define and compile user-provided source code into installable packages for the operating system.
Driver Update Managers - Runs hardware drivers as independent user-space daemons that can be updated without system reboots.
Process Isolation - Runs hardware drivers as isolated user-space processes to prevent system-wide corruption and unauthorized memory access.
System Resource Management - Exposes system resources and hardware through a unified path-based scheme interface for consistent access.
Multi-Architecture Support - Executes on common 64-bit and 32-bit processor architectures including x86, ARM, and RISC-V to provide a functional computing environment.
Cross-Compilation Toolchains - Build software projects by providing cross-compilation toolchains and integrating with standard build systems like Cargo, Make, and CMake.
Embedded Operating Systems - Offers a full-featured operating system for internet-connected appliances that protects user privacy by reducing the attack surface.
Package Management Systems - Automate the downloading and compilation of software components from various source types to integrate them into the operating system image.
File System Interfaces - Maps system devices and kernel parameters to file paths for unified resource access.
System Services - Runs drivers and core services as independent, unprivileged user-space processes to improve system stability and security.
System Build Recipes - Add new user-defined programs to the operating system by creating a recipe that defines how the software is built and included.
Terminal and Command-Line Environments - Provide an interactive environment for users to run commands, manage processes, and navigate the operating system.
Userspace Kernels - Delegates non-core system services to unprivileged user-space processes to minimize the kernel footprint.
Message Passing Channels - Facilitates interaction between kernel components and user-space services through a structured message-passing interface.
Filesystem Implementations - Provides a modular, advanced filesystem architecture designed for high-level data integrity and persistent storage management.
File Storage Systems - Organizes data on storage media using a specialized filesystem designed for reliability and performance.
Cross-Platform Build Systems - Orchestrates compilation of system images and packages across architectures using a recipe-based system.
System Configuration Variants - Allows selecting predefined system configurations to include specific tools and environments tailored for different hardware.
Source Builds - Build the operating system image from source files to enable custom modifications and facilitate contributions to the development of the platform.
Bootable Image Executors - Enables booting the operating system from removable media images to facilitate testing without modifying internal disks.
Disk Installers - Writes the system image to internal storage media and configures an encrypted filesystem for persistent use.
System Calls - Invokes kernel-level operations from user-mode applications by triggering a mode switch that executes privileged tasks.
Hardware Interfaces - Communicates with standard system components including ACPI, PCI, and USB buses to manage hardware resources.
Virtual Machines - Executes the operating system within virtualized environments by configuring hardware emulation for storage and networking.
Standard Library Implementations - Provides a language-native implementation of the C standard library to ensure platform-specific functionality.
Data Persistence and Storage - Manages persistent storage across various hardware interfaces including IDE, SATA, and NVMe.
Local Filesystem Storage - Provides persistent filesystem storage designed for integrity and performance within the operating system.
Build Automation Scripts - Run arbitrary shell commands during the build process to handle non-standard software configurations or complex installation requirements.
Build Toolchains - Provides integrated sets of tools for compiling, linking, and managing the build process of software projects.
Development Environment Emulators - Replicates production-like environments for local development and testing of ARM64 configurations.
Software Package Repositories - Installs, updates, and removes software components and their dependencies from the system.
Integrity Validators - Runs automated test suites to detect regressions and ensure compliance with POSIX standards.
Self-Hosted Applications - Provides a secure foundation for hosting server applications on private hardware by leveraging memory-safe architecture.
Virtualization Environments - Provides isolated virtualized environments for running the operating system to test functionality without dedicated hardware.
OS Installation Support - Writes the operating system directly to hard drives or solid state drives to enable persistent use.
General-Purpose Computing Environments - Provides a comprehensive environment for general-purpose computing and application execution.
Image Flashers - Generates and flashes bootable disk images to physical storage devices for testing and installation.
File System I/O - Blocks execution until activity occurs on registered file descriptors to handle concurrent I/O efficiently.
System Emulators - Launches the operating system image within a virtualized environment to allow testing and interaction with the graphical user interface.
Virtualized Desktop Environments - Runs the operating system within a virtual machine to test system changes and verify package installations.
Kernel Error Handling - Enforces strict error handling within the kernel to prevent system-wide failures by limiting unrecoverable error states.
Process Sandboxing - Isolates applications using schemes and namespaces to restrict access to system resources and enhance security.
Process Restriction Policies - Isolates processes within specific namespaces to prevent unauthorized access to system resources and schemes.
Subject Access Restrictions - Enforces security boundaries between programs using namespaces and user-based permissions to control access to hardware and system resources.
Software Porting Tools - Facilitates compiling applications into native binaries by applying patches and maintaining forks for compatibility.
Namespace Isolation - Organizes system resources into distinct namespaces to enforce sandboxing and restrict access between operating system components.
System Resource Monitors - Displays real-time information about process activity, memory usage, and system uptime.
System Recipe Managers - Updates specific components or files within the operating system image to test changes without performing a full system rebuild.
Graphical User Interfaces - Manages window layout, application launching, and authentication within the graphical desktop interface.
Initialization Drivers - Load modular drivers and daemons from a RAMdisk to configure storage, logging, and hardware interfaces before mounting the root filesystem.
Build Performance Optimizers - Implements techniques and tools for reducing build times through resource management and parallel execution.
Source Code Retrieval Utilities - Retrieve software source code from remote repositories or compressed archives to facilitate the inclusion of third-party applications.
Compilers - Translate programming languages into executable binaries using integrated compiler toolchains to support software development and system maintenance.
Debugging and Inspection Tools - Provides tools for inspecting package contents, analyzing dependencies, and retrieving backtraces.
Automated Test Execution - Provides systems that trigger and run test suites within virtualized environments to verify software functionality.
Desktop Utilities - Includes essential graphical utilities like text editors, file browsers, and terminal emulators for standard desktop tasks.
Window Managers - Coordinates window creation and event handling through a user-space window manager.
Static Linking Configurations - Bundle library dependencies directly into executable binaries to improve runtime performance and isolate memory address spaces for enhanced security.
ARM64 Deployment Profiles - Configures bootable images for ARM64-based single-board computers by integrating necessary firmware and device tree structures.
Compiled Binaries - Run programs formatted as executable files that interact with the operating system through direct system calls or linked standard libraries.
System Headless Modes - Disables graphical output and display drivers to allow the system to run as a server-only instance.
Host Networking Services - Provides infrastructure for running network-facing applications to manage remote access and data delivery.
Network Stacks - Implements a dedicated network stack for processing TCP and UDP packets to maintain connectivity.
Window Management Systems - Provides a display server and compositor for window placement and visual composition.
Bootloader Configurators - Initializes disk images with bootloader support to enable system startup from custom storage volumes.
System Call Interceptors - Logs system calls made by programs to assist with debugging and behavioral investigation.
Bridge Networking Configurations - Configures virtual network adapters to bridge guest systems with local networks for connectivity testing.
Virtualization Platforms - Provides infrastructure for running isolated virtualized operating systems to contain security threats.
Security Isolation Mechanisms - Restricts GUI programs from accessing input events or visual data belonging to other windows to ensure process security.
Error Management - Enforces explicit error handling to ensure system resilience and meaningful feedback.
Namespace Management - Assigns specific sets of schemes to each process to define available resources and prevent unauthorized access to system-wide file descriptors.
System Configuration - Provides mechanisms for modifying system services and drivers at runtime without requiring reboots.
Kernel Execution Profilers - Generates visual flamegraphs to identify and analyze frequent kernel operations.
Graphical Display Servers - Manages graphical interfaces through a dedicated display server and windowing system.

بدائل مفتوحة المصدر لـ Redox

مشاريع مفتوحة المصدر مشابهة، مرتبة حسب عدد الميزات المشتركة مع Redox.

systemd/systemd
systemd/systemd
15,324عرض على GitHub
systemd is a comprehensive system and service manager for Linux that orchestrates the entire operating system lifecycle. It functions as the primary init system, managing the transition from firmware to a fully initialized user space while providing a unified framework for service orchestration, hardware management, and resource control. The project distinguishes itself through its declarative, unit-based configuration model and dynamic dependency resolution, which allow for efficient, on-demand service activation and socket-based process management. It integrates deep system observability th
Ccinitlinux
عرض على GitHub15,324
torvalds/linux
torvalds/linux
237,355عرض على GitHub
The Linux kernel is a monolithic operating system core that manages hardware resources, memory, and process scheduling across diverse computing architectures. It provides a standardized, POSIX-compliant environment for application execution while maintaining a modular driver framework that allows for the dynamic loading and removal of hardware interfaces. The project is distinguished by its high-performance concurrency toolkit, which utilizes lockless synchronization primitives and read-copy-update mechanisms to manage shared data access in multi-core environments. It incorporates a comprehen
C
عرض على GitHub237,355
rust-lang/book
rust-lang/book
17,930عرض على GitHub
The Rust Programming Language Book is the official technical guide and educational resource for the Rust language. It provides a comprehensive walkthrough of the language's design, focusing on its core identity as a systems programming language that enforces memory safety and high-performance execution without the need for a garbage collector. The project is distinguished by its focus on ownership, borrowing, and lifetime tracking, which allow the compiler to verify memory safety and thread safety at compile time. It covers the language's unique approach to zero-cost abstractions, including t
Rustbookmdbookrust
عرض على GitHub17,930
reactos/reactos
reactos/reactos
17,661عرض على GitHub
ReactOS is an open-source operating system designed to be binary compatible with Windows applications and drivers. It consists of a low-level system kernel that manages hardware resources and a binary compatibility layer that enables the execution of software designed for the Windows binary interface. The project implements a cross-platform build system and toolchain for compiling and deploying bootable operating system images across different hardware architectures. This includes the use of cross-compilation toolchains and a hardware-abstraction layer to support various processor and motherb
Ccdriversgpl
عرض على GitHub17,661

عرض جميع البدائل الـ 30 لـ Redox

الأسئلة الشائعة

ما هي وظيفة redox-os/redox؟

ما هي الميزات الرئيسية لـ redox-os/redox؟

الميزات الرئيسية لـ redox-os/redox هي: Kernel Build Systems, System Image Generators, Inter-Process Communication Schemes, POSIX Interfaces, Memory Safety, Scheme-Based Resource Managers, Operating System Kernel Build Tools, Operating System Development.

ما هي البدائل مفتوحة المصدر لـ redox-os/redox؟

تشمل البدائل مفتوحة المصدر لـ redox-os/redox: systemd/systemd — systemd is a comprehensive system and service manager for Linux that orchestrates the entire operating system… torvalds/linux — The Linux kernel is a monolithic operating system core that manages hardware resources, memory, and process scheduling… rust-lang/book — The Rust Programming Language Book is the official technical guide and educational resource for the Rust language. It… reactos/reactos — ReactOS is an open-source operating system designed to be binary compatible with Windows applications and drivers. It… armbian/build — This repository is the Armbian build framework — an embedded Linux build system for generating custom operating system… tock/tock — Tock is a secure embedded operating system and microcontroller kernel designed to isolate untrusted applications and…