1 Repo
Mechanisms to protect the core system image from unauthorized changes using integrity checks.
Distinct from Root Filesystem Bootstrapping: Focuses on the verification and protection of the immutable image rather than the bootstrapping process.
Explore 1 awesome GitHub repository matching operating systems & systems programming · Root Filesystem Integrity. Refine with filters or upvote what's useful.
Bottlerocket is a container-optimized operating system and minimal Linux distribution designed specifically for hosting container workloads. It functions as an immutable infrastructure OS, utilizing a read-only root filesystem and atomic partition swapping to ensure consistent and reversible system updates. The system is distinguished by an API-driven host manager that replaces traditional shell-based configuration with a local REST API for administrative tasks. To maintain security and stability, it employs a dual-runtime isolation model that separates workload runtimes from system operation
Protects the system against unauthorized changes using integrity checks to maintain a signed, immutable root image.