Awesome GitHub RepositoriesMemory-Safe Systems Programming

Carbon is an experimental, compiled systems programming language designed as a successor to C++. It focuses on providing a high-performance environment for modern software development while prioritizing memory safety and expressive generic programming. The language is built to support performance-critical engineering, allowing for precise control over memory layout and execution flow. A primary differentiator of the project is its bidirectional interoperability with existing C++ codebases. This allows developers to call functions and share data between languages without manual wrappers, facil

This project is a comprehensive educational framework designed to guide learners through the complexities of systems engineering and low-level software development. It provides structured learning paths that integrate hardware simulation, source code analysis, and project-based exercises to help developers master the foundational concepts of computer architecture, operating systems, and firmware design. The curriculum distinguishes itself by emphasizing direct interaction with system internals, requiring learners to examine and modify existing open-source kernel and driver implementations. By

Youki is a low-level container runtime written in Rust that creates and manages isolated containers according to Open Container Initiative specifications. It serves as an execution engine that can function as a rootless container manager or a pluggable Kubernetes CRI runtime to manage pods and containers within a cluster. The project distinguishes itself by providing a Wasm container runtime capable of executing WebAssembly modules as isolated workloads compatible with standard orchestration tools. It further supports a rootless execution model, allowing isolated environments to start as non-

Carp is a statically typed Lisp compiler that compiles Lisp-like syntax directly to C source code, enabling seamless integration with existing C libraries and low-level system programming. It manages memory deterministically at compile time using ownership tracking and linear types, eliminating garbage collection pauses and runtime overhead while ensuring type safety through an inferred static type system. The language distinguishes itself through compile-time macro expansion and metaprogramming capabilities, allowing code generation and transformation before final binary output. It enforces

This project provides a framework and toolset for developing memory-safe kernel-mode and user-mode drivers for the Windows operating system. It enables developers to build drivers using safe programming patterns that prevent common memory errors and system crashes, while providing the necessary infrastructure to interface with low-level hardware and system APIs. The framework distinguishes itself by offering procedural macros and binding generation tools that translate complex C-style system headers into idiomatic, type-safe code. It includes a custom global allocator designed for the strict

Ce projet fournit un framework de développement pour écrire des modules de noyau Linux chargeables en utilisant le langage de programmation Rust. Il établit une méthodologie pour la programmation système sécurisée en imposant la sécurité de la mémoire et des threads au sein de l'environnement d'exécution restreint du noyau, permettant aux développeurs d'étendre les fonctionnalités du système d'exploitation tout en prévenant les erreurs courantes de corruption mémoire. Le framework se distingue par la génération automatisée d'interfaces de fonctions étrangères (FFI) typées, qui font le pont entre le code de haut niveau et les en-têtes et structures système du noyau de bas niveau. Il mappe les constructions de synchronisation de haut niveau directement sur les mécanismes de verrouillage natifs du noyau, garantissant que les données partagées restent protégées à travers de multiples threads d'exécution et contextes d'interruption. L'ensemble d'outils s'intègre aux pipelines de build natifs du noyau pour gérer la compilation et l'édition de liens du code source en objets binaires. En fournissant des abstractions sécurisées pour l'interfaçage matériel et les environnements aux ressources limitées, il prend en charge la création de pilotes de périphériques et de composants système fiables qui maintiennent des règles strictes de propriété et d'emprunt à la compilation.