Projects sharing features with NixOS WSL

nix-darwin is a declarative system configuration tool for macOS that uses the Nix package manager to define and manage the entire system state—including users, services, networking, and security—through a single reproducible Nix expression. It integrates Nix’s purely functional package model to install, update, and remove software, supporting multiple versions and atomic rollbacks. The tool composes system configuration from modular, typed, overridable options. It evaluates these Nix expressions to produce an immutable description of the desired state, then generates activation scripts that a

Asterinas is a memory-safe operating system kernel designed to prevent data races and memory corruption. It functions as a Linux-ABI compatible kernel, enabling the execution of existing Linux binaries and container workloads while providing a declarative operating system distribution model. The project distinguishes itself by acting as a virtual machine container host and a confidential computing guest OS, allowing it to run within hardware-isolated Trusted Execution Environments such as Intel TDX. It implements a minimal trusted computing base by isolating unsafe low-level operations and se

wslu is a collection of integration tools and command-line utilities designed to manage the interaction between the Windows Subsystem for Linux and the Windows host. It provides a suite of tools for path translation, host interop, and system maintenance to bridge the gap between the Linux shell and the host operating system. The project enables the launching of host applications and the creation of Windows desktop shortcuts to trigger Linux commands. It features a programmable interface for executing system tasks, accessing host environment variables, and integrating with the Windows clipboar

Nixpkgs is a comprehensive repository of declarative software definitions used to build and manage reproducible system environments. It functions as a framework for assembling operating system components and application dependencies into consistent, versioned, and verifiable software collections. By utilizing a functional derivation graph and a lazy evaluation model, the project ensures that software environments are defined as pure expressions, resulting in absolute reproducibility across different machines. The repository distinguishes itself through its ability to manage complex software l

systemd is a comprehensive system and service manager for Linux that orchestrates the entire operating system lifecycle. It functions as the primary init system, managing the transition from firmware to a fully initialized user space while providing a unified framework for service orchestration, hardware management, and resource control. The project distinguishes itself through its declarative, unit-based configuration model and dynamic dependency resolution, which allow for efficient, on-demand service activation and socket-based process management. It integrates deep system observability th

This project is a library for generating visual architecture diagrams and network topologies directly from infrastructure-as-code templates and configuration specifications. It functions as a programmatic interface that transforms infrastructure definitions into visual documentation, allowing users to maintain system diagrams as version-controlled text files. The tool distinguishes itself through an automated layout engine that uses graph algorithms to calculate spatial positioning, connection routing, and link paths without manual coordinate configuration. It supports complex visual hierarch

Concourse is a container-based continuous integration and delivery platform that functions as a distributed build system. It operates as a declarative pipeline orchestrator, using a central controller and multiple worker nodes to execute concurrent tasks within isolated containers. The system distinguishes itself by executing every build step in a separate container to ensure environment consistency and by defining software delivery sequences through portable, versionable configuration files. It provides a web-based pipeline visualizer to display the real-time status and progress of automated

Puppet is an infrastructure as code tool and configuration management framework used to automate the provisioning and state orchestration of server fleets. It functions as a declarative state orchestrator that manages server configurations and system settings to ensure consistency and reproducibility across a fleet of machines. The system utilizes a declarative state modeling approach and an idempotent execution engine to maintain configuration state and prevent environment drift. It employs resource-based abstraction and a client-server architecture to translate high-level specifications int

This repository contains the comprehensive documentation for a code editor focused on AI-assisted software development and remote development workflows. It covers the implementation of AI agents and language models used for autonomous code generation, large-scale refactoring, and task iteration. The project is distinguished by its deep integration of autonomous AI agents capable of web navigation, application logic validation, and orchestrating multi-step development processes. It provides specialized frameworks for tailoring AI behavior through custom instructions, model context protocols, a

This project is a cross-platform privacy hardening tool and declarative system tweaking framework. It provides a suite of scripts designed to disable telemetry, remove data leaks, and enforce security best practices across Windows, macOS, and Linux. The tool functions as a state-aware configuration manager, allowing users to apply security tweaks and subsequently restore system settings to their original default values. It utilizes a templating system to define and apply custom system configurations for improved privacy and security. The capability surface covers operating system privacy har

Register is a GitOps domain registrar and subdomain registration service that uses version-controlled configuration files to manage domain ownership and mappings. It functions as a DNS management system and record orchestrator, utilizing JSON-based declarative configurations to programmatically update A, CNAME, MX, and TXT records. The project distinguishes itself through a registration process where domain ownership and subdomain assignments are stored as the source of truth within Git repositories. It includes an automated SSL provisioning tool to configure web servers and security certific

Nix is a functional package manager, purely functional build system, and declarative configuration system. It serves as a reproducible environment manager designed to eliminate manual installation drift by defining software and operating system states through a configuration language. The project provides a means of managing software dependencies in isolated environments to prevent conflicts between different versions of the same tool. It enables the creation of consistent system configurations and development environments that replicate exactly across multiple machines. Its capabilities cov

Rocky is an open-source enterprise operating system designed for server and cloud infrastructure. It is a community-maintained Linux server distribution that provides a platform focused on stability and security. The project is fundamentally a Red Hat Enterprise Linux compatible operating system, maintaining bug-for-bug binary compatibility to ensure identical software behavior. This allows it to serve as an enterprise-grade platform without proprietary licensing. The distribution covers a broad range of system administration capabilities, including package management via modular repository

pyinfra is a Python-based infrastructure automation framework that turns Python code into shell commands for managing servers, Docker containers, and local machines. It operates as a declarative, idempotent deployment tool, applying desired system states by comparing target configurations against current states and making only the necessary changes. The framework provides a connector-based transport abstraction that unifies SSH, Docker, and local execution behind a common interface, with a parallel execution engine that manages concurrent operations across hosts. The tool distinguishes itself

Talos is a minimal, immutable Linux distribution designed specifically for deploying and managing Kubernetes clusters. It functions as an API-driven infrastructure manager that replaces traditional shell access with a declarative gRPC interface to control operating system state and configuration. The system is distinguished by its use of a read-only root filesystem and a security-hardened kernel, which removes standard GNU utilities to reduce the attack surface. It ensures environment consistency by distributing the operating system as versioned, signed images and utilizes TPM-backed verified

This project is a collection of Unix dotfiles and a custom desktop environment configuration for Linux. It provides a standardized set of configuration files to ensure consistent shell and application behavior, centering on a tiling window manager setup and a personalized user interface. The environment features a desktop dashboard with modular widgets and sidebars that display system performance, weather, and media controls. It includes a comprehensive keyboard shortcut map using global and mode-specific keybindings to launch applications and control system actions. The configuration covers

Noctalia Shell is a modular Wayland desktop shell that provides a user interface consisting of status bars, launchers, and notifications for Wayland compositors. It is built as a plugin-based desktop environment that utilizes declarative configuration for managing system defaults, wallpapers, and plugin installations. The project features a dynamic desktop theming engine that extracts color palettes from wallpapers to theme the shell and external applications. This is supported by an inter-process communication bridge that exposes endpoints, allowing external scripts and keybindings to trigge

This project is a technical setup guide for installing and configuring Docker within a Windows Subsystem for Linux 2 environment. It serves as a walkthrough for creating a virtualized Linux workspace on Windows to build and run software with native performance. The guide focuses on integrating container engines for isolated application deployment and establishing a cross-platform workflow. It provides instructions for linking external code editors to the subsystem, running graphical Linux applications on the host, and executing host binaries within the Linux terminal. It covers the managemen

vim-plug is a plugin manager for the Vim text editor that functions as a git-based dependency manager and configuration bootstrapper. It downloads and organizes external plugin packages from remote repositories to extend the editor's functionality. The project acts as a lazy-loading orchestrator to reduce editor startup time by deferring the loading of plugins until specific commands or file types are encountered. It enables version pinning by allowing plugins to be fetched using specific git branches, tags, or commit hashes. The manager provides a framework for plugin installation, lifecycl

Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and SQL resources. It functions as a secure gateway that validates human and workload identities using OIDC, SAML, and FIDO2 passkeys before granting access to internal applications and SaaS APIs. The system is distinguished by its secretless access broker, which injects credentials—such as API keys, passwords, and AWS Sigv4 signatures—at the gateway level so users can access databases and cloud resources without managing secrets. It further specializes in AI gateway administration,

Disko is a declarative configuration system for managing Linux disk partitioning, filesystem formatting, and LUKS encryption setup. It functions as a disk provisioner that allows users to define disk layouts and mount points through configuration files rather than manual commands. The project focuses on providing reproducible system installations by defining storage provisioning as code. It specifically automates the creation of partition tables, the setup of encrypted storage containers, and the configuration of filesystem layouts for NixOS systems. The toolset includes a command-line inter

Drone is a container-based continuous integration and delivery platform, source control management system, and artifact registry. It functions as a hosted workspace provider for cloud-based developer environments and a system for hosting and versioning code repositories. The platform executes build and deployment pipelines within isolated containers, using declarative configurations to automate software delivery. It includes a centralized registry for managing and versioning compiled binaries and build outputs to ensure consistent deployments across environments. The system covers a broad ca

LxRunOffline is a command line utility for managing the lifecycle of Windows Subsystem for Linux environments. It functions as a distribution manager and orchestrator used to install, register, and configure Linux environments. The tool provides capabilities for exporting, importing, and duplicating filesystems and configurations. It enables the relocation of environments to different drive locations or directories and allows for the creation of compressed archives to facilitate backup and portability. Beyond migration, the utility covers environment orchestration through the execution of co

Homebrew is a command-line package management tool designed to automate the installation, configuration, and maintenance of software on local development environments. It functions as a cross-platform software distributor, enabling users to install tools from pre-compiled binary archives or source code without requiring administrative privileges. By managing complex dependency trees and versioning, it ensures that software remains consistent and compatible across different system architectures. The project distinguishes itself through a declarative approach to system configuration, allowing u

Glazewm is a tiling window manager and desktop automation framework designed to organize application windows into non-overlapping layouts. It functions as a keyboard-driven controller, allowing users to manage window focus, workspace navigation, and layout configurations entirely through custom keybindings. By intercepting system-level events, the software overrides default window placement and behavior to maximize screen space and maintain a structured workspace. The project distinguishes itself through a highly configurable environment that supports complex multi-monitor setups and dynamic

This project is a configuration suite for the Hyprland Wayland compositor, providing a set of automated scripts and files to deploy a consistent desktop environment across Linux distributions. It functions as an automation tool that synchronizes system settings, software packages, and interface themes to ensure a uniform workspace state. The environment distinguishes itself through deep integration with language models, allowing users to access local or cloud-based AI assistants directly from the desktop interface for tasks such as text translation and content generation. Visual consistency i

ihp is a type-safe web framework and full-stack application orchestrator designed for PostgreSQL. It functions as a server-side rendering framework and a type-safe ORM that automatically generates record types from SQL schemas to ensure compile-time query validation. The platform distinguishes itself by verifying routing, database queries, and templates at compile time to prevent runtime crashes. It implements real-time web interfaces using WebSockets for instant data synchronization and employs server-driven hypermedia for partial DOM patching. The framework covers a broad range of integrat