3 个仓库
Read-only root filesystems using signed images to prevent unauthorized modifications and ensure integrity.
Distinguishing note: No candidates cover the security and integrity aspect of a read-only, signed root filesystem.
Explore 3 awesome GitHub repositories matching operating systems & systems programming · Immutable Root Filesystems. Refine with filters or upvote what's useful.
Bottlerocket is a container-optimized operating system and minimal Linux distribution designed specifically for hosting container workloads. It functions as an immutable infrastructure OS, utilizing a read-only root filesystem and atomic partition swapping to ensure consistent and reversible system updates. The system is distinguished by an API-driven host manager that replaces traditional shell-based configuration with a local REST API for administrative tasks. To maintain security and stability, it employs a dual-runtime isolation model that separates workload runtimes from system operation
Protects the core system using signed read-only images to ensure filesystem integrity.
This project is a Buildroot-based Linux distribution and embedded home server operating system designed to host containerized home automation services. It serves as a dedicated platform that manages the hardware and software requirements of a local smart home hub. The system is built as an immutable operating system, utilizing a read-only root filesystem and image-based updates to ensure consistent versioning and prevent accidental changes. It employs container-based process isolation to decouple applications from the core operating system. The platform provides a supervised container manage
Utilizes a read-only root filesystem to prevent accidental or malicious changes to the core OS.
该项目是一个专为掌上游戏机设计的基于 Arch Linux 的操作系统。它作为一个不可变的 Linux 发行版,利用只读根文件系统来保护核心系统文件免受意外修改或损坏,从而确保设备重启后的一致稳定性。 该发行版通过优先考虑便携式硬件游戏性能的专门配置脱颖而出。它采用内核级硬件调优来调整电源配置文件和时钟速度,并结合容器化应用程序运行时来隔离软件依赖,防止冲突。用户数据通过基于覆盖层的持久化机制进行管理,允许在保持底层系统镜像完整性的同时进行配置更改。 该平台通过原子系统更新支持可靠的维护,将操作系统部署为完整的、版本化的快照。这种架构有助于从失败的安装中恢复,并为掌上设备上的高要求软件提供了稳定的环境。
Implements a system architecture that protects core operating files from corruption by maintaining a read-only partition for the root filesystem.