Awesome GitHub RepositoriesImmutable Operating Systems

Talos is a minimal, immutable Linux distribution designed specifically for deploying and managing Kubernetes clusters. It functions as an API-driven infrastructure manager that replaces traditional shell access with a declarative gRPC interface to control operating system state and configuration. The system is distinguished by its use of a read-only root filesystem and a security-hardened kernel, which removes standard GNU utilities to reduce the attack surface. It ensures environment consistency by distributing the operating system as versioned, signed images and utilizes TPM-backed verified

Bottlerocket is a container-optimized operating system and minimal Linux distribution designed specifically for hosting container workloads. It functions as an immutable infrastructure OS, utilizing a read-only root filesystem and atomic partition swapping to ensure consistent and reversible system updates. The system is distinguished by an API-driven host manager that replaces traditional shell-based configuration with a local REST API for administrative tasks. To maintain security and stability, it employs a dual-runtime isolation model that separates workload runtimes from system operation

Bazzite is an immutable, atomic-image-based operating system designed for gaming performance and handheld hardware. It utilizes a read-only root filesystem and versioned images to provide atomic updates and instant system rollbacks, ensuring a stable core environment. The system is distinguished by its deep optimization for portable gaming devices, featuring dedicated handheld hardware management for CPU undervolting, fan control, and display refresh rate overclocking. It includes a specialized gaming mode that boots directly into a console-like interface with integrated input mapping and a t

This project is a Buildroot-based Linux distribution and embedded home server operating system designed to host containerized home automation services. It serves as a dedicated platform that manages the hardware and software requirements of a local smart home hub. The system is built as an immutable operating system, utilizing a read-only root filesystem and image-based updates to ensure consistent versioning and prevent accidental changes. It employs container-based process isolation to decouple applications from the core operating system. The platform provides a supervised container manage

Rancher OS is a cloud-native, container-optimized Linux distribution designed to host and manage containerized workloads with a small host footprint. It functions as a Docker-based operating system that runs core system services and user applications as containers. The system implements an immutable infrastructure workflow by deploying the entire operating system as a set of read-only images. To prevent configuration drift and ensure a consistent boot state, the primary system partition is mounted as read-only, while persistent settings and user data are stored on a separate writable configur

Ce projet est un système d'exploitation basé sur Arch Linux conçu spécifiquement pour les consoles de jeux portables. Il fonctionne comme une distribution Linux immuable, utilisant un système de fichiers racine en lecture seule pour protéger les fichiers système centraux contre toute modification ou corruption accidentelle, ce qui garantit une stabilité constante lors des redémarrages de l'appareil. La distribution se distingue par des configurations spécialisées qui privilégient les performances de jeu sur matériel portable. Elle utilise un réglage matériel au niveau du noyau pour ajuster les profils de puissance et les vitesses d'horloge, ainsi que des environnements d'exécution d'applications conteneurisés qui isolent les dépendances logicielles pour éviter les conflits. Les données utilisateur sont gérées via une persistance basée sur des superpositions (overlay), permettant des changements de configuration tout en maintenant l'intégrité de l'image système sous-jacente. La plateforme prend en charge une maintenance fiable grâce à des mises à jour système atomiques, qui déploient le système d'exploitation sous forme de snapshots complets et versionnés. Cette architecture facilite la récupération après des installations échouées et fournit un environnement stable pour les logiciels exigeants sur les appareils portables.