Awesome GitHub RepositoriesImmutable Operating Systems

Talos is a minimal, immutable Linux distribution designed specifically for deploying and managing Kubernetes clusters. It functions as an API-driven infrastructure manager that replaces traditional shell access with a declarative gRPC interface to control operating system state and configuration. The system is distinguished by its use of a read-only root filesystem and a security-hardened kernel, which removes standard GNU utilities to reduce the attack surface. It ensures environment consistency by distributing the operating system as versioned, signed images and utilizes TPM-backed verified

Bottlerocket is a container-optimized operating system and minimal Linux distribution designed specifically for hosting container workloads. It functions as an immutable infrastructure OS, utilizing a read-only root filesystem and atomic partition swapping to ensure consistent and reversible system updates. The system is distinguished by an API-driven host manager that replaces traditional shell-based configuration with a local REST API for administrative tasks. To maintain security and stability, it employs a dual-runtime isolation model that separates workload runtimes from system operation

Bazzite is an immutable, atomic-image-based operating system designed for gaming performance and handheld hardware. It utilizes a read-only root filesystem and versioned images to provide atomic updates and instant system rollbacks, ensuring a stable core environment. The system is distinguished by its deep optimization for portable gaming devices, featuring dedicated handheld hardware management for CPU undervolting, fan control, and display refresh rate overclocking. It includes a specialized gaming mode that boots directly into a console-like interface with integrated input mapping and a t

This project is a Buildroot-based Linux distribution and embedded home server operating system designed to host containerized home automation services. It serves as a dedicated platform that manages the hardware and software requirements of a local smart home hub. The system is built as an immutable operating system, utilizing a read-only root filesystem and image-based updates to ensure consistent versioning and prevent accidental changes. It employs container-based process isolation to decouple applications from the core operating system. The platform provides a supervised container manage

Rancher OS is a cloud-native, container-optimized Linux distribution designed to host and manage containerized workloads with a small host footprint. It functions as a Docker-based operating system that runs core system services and user applications as containers. The system implements an immutable infrastructure workflow by deploying the entire operating system as a set of read-only images. To prevent configuration drift and ensure a consistent boot state, the primary system partition is mounted as read-only, while persistent settings and user data are stored on a separate writable configur

Acest proiect este un sistem de operare bazat pe Arch Linux, conceput special pentru consolele de jocuri portabile. Funcționează ca o distribuție Linux imutabilă, utilizând un sistem de fișiere root read-only pentru a proteja fișierele de bază ale sistemului împotriva modificărilor accidentale sau a coruperii, ceea ce asigură o stabilitate consistentă la repornirea dispozitivului. Distribuția se distinge prin configurații specializate care prioritizează performanța jocurilor pe hardware portabil. Utilizează tuning hardware la nivel de kernel pentru a ajusta profilurile de putere și vitezele de ceas, alături de runtime-uri de aplicații containerizate care izolează dependențele software pentru a preveni conflictele. Datele utilizatorului sunt gestionate prin persistență bazată pe overlay, permițând modificări de configurare în timp ce se menține integritatea imaginii de sistem subiacente. Platforma susține o întreținere fiabilă prin actualizări atomice de sistem, care implementează sistemul de operare ca snapshot-uri complete, versionate. Această arhitectură facilitează recuperarea în urma instalărilor eșuate și oferă un mediu stabil pentru software-ul solicitant pe dispozitivele portabile.