Awesome GitHub RepositoriesPOSIX Interfaces

Linux 内核是一个单体操作系统核心，管理跨不同计算架构的硬件资源、内存和进程调度。它为应用程序执行提供了一个标准化的、符合 POSIX 的环境，同时维护了一个模块化的驱动程序框架，允许动态加载和移除硬件接口。 该项目以其高性能并发工具包而著称，该工具包利用无锁同步原语和读取-复制-更新（RCU）机制来管理多核环境中的共享数据访问。它包含了一套全面的内核跟踪和仪表化套件，能够对系统事件、函数执行和延迟指标进行非侵入式监控。此外，内核强制执行严格的接口稳定性保证和生命周期跟踪，以确保依赖应用程序的向后兼容性。 除了核心身份外，该系统还包括用于硬件抽象、网络协议实现和安全策略执行的广泛能力。它通过电源状态管理、嵌入式系统优化和基于固件的引导过程支持专业工程需求。该架构还具有用于内存分析、系统执行验证和并发编程模型验证的强大诊断框架。 源代码仓库提供了一个完整的构建系统，用于将代码转换为可执行的二进制镜像，包括用于内核功能选择和配置优化的工具，以针对特定硬件需求定制输出。

Wasmer is a high-performance runtime engine designed to execute sandboxed WebAssembly modules across server-side, edge, and browser environments. It functions as a comprehensive platform for building, distributing, and running isolated applications, providing a secure and portable execution layer that maintains consistency across diverse hardware architectures and operating systems. The platform distinguishes itself through a robust toolchain that enables cross-language interoperability and the transformation of code into portable binary packages. It supports ahead-of-time binary generation t

Redox is a POSIX-compliant, microkernel-based operating system written entirely in Rust. By utilizing a memory-safe language for the kernel and all system components, the project eliminates common vulnerabilities such as buffer overflows and use-after-free errors. Its architecture relies on a minimal kernel that manages only essential hardware and process isolation, delegating all other system services to unprivileged user-space processes. The system distinguishes itself through a modular design where hardware drivers and system services run as independent user-space daemons, allowing them to

Proxychains-ng is a utility for POSIX-compliant systems that redirects network traffic and domain name lookups through proxy chains. It functions by intercepting system calls and forcing outgoing TCP connections through a sequence of SOCKS4, SOCKS5, or HTTP proxies without requiring modifications to the target application source code. The tool distinguishes itself by utilizing dynamic library preloading to override standard network functions, allowing it to wrap socket-level traffic and route it through multiple intermediate servers. It supports various routing strategies, including strict, r

WinFSP is a framework for implementing custom file systems on Windows. It enables the creation of user-mode file systems that appear as standard disk drives or network shares to the operating system, allowing developers to implement file system logic in user space via a proxy architecture that avoids the need for custom kernel code. A primary differentiator is its FUSE compatibility layer, which maps POSIX-based file system calls to native Windows requests. This allows existing file systems written for the FUSE API to be ported to Windows and Cygwin environments. The project covers a wide ra

ShadowsocksR-Windows is a proxy client for Windows designed to route network traffic through ShadowsocksR proxy servers. It functions as a network proxy that establishes secure tunnels to bypass internet censorship and regional restrictions. The application manages system-wide network routing and provides SOCKS5 proxy client capabilities to hide origin IP addresses. It redirects local traffic through a remote server to maintain internet privacy and circumvent network-level blocks. The project incorporates traffic interception and encapsulation through a user-mode network wrapper and TAP-base

SSHFS-Win is a Windows implementation of SSHFS that mounts remote directories over SSH as local Windows drives, enabling seamless file access as if they were local network drives. It provides both command-line and graphical interfaces for creating, managing, and disconnecting SSHFS mounts, supporting password or SSH key authentication with optional credential storage in the Windows Credential Manager. The project extends beyond basic SSH mounting to support a wide range of remote file access scenarios, including mounting cloud storage services like Azure Blob or Amazon S3, distributed POSIX f

LXD is a unified platform for managing both system containers and virtual machines through a single REST API and command-line interface. It provides a programmatic HTTP interface for controlling the full lifecycle of instances, enabling automation and integration with external tools. The system runs unprivileged containers with per-instance UID/GID mappings, seccomp filters, and AppArmor profiles for kernel-level isolation, while supporting multiple storage backends including directory, Btrfs, LVM, ZFS, Ceph, LINSTOR, and TrueNAS through a unified driver interface. The platform distinguishes

Incus is a unified orchestration platform for managing system containers, OCI application containers, and virtual machines through a single control plane. It brings together cluster infrastructure management, secure multi-tenancy, software-defined networking, and pluggable storage backend orchestration into one cohesive system exposed via a full REST API and command-line interface. What distinguishes Incus is its ability to run multiple instance types side by side—full Linux system containers, OCI application containers, and QEMU virtual machines—all managed with consistent tooling. Networkin

NuttX 是一个符合 POSIX 标准的实时操作系统，专为从 8 位到 64 位架构的微控制器而设计。它提供了一个具有实时任务调度器和 POSIX 嵌入式内核的确定性执行环境，以确保跨不同硬件目标的可移植代码执行。 该项目通过全面的硬件抽象层脱颖而出，该层为各种半导体芯片组提供了 I2C、SPI、CAN 和 USB 的标准化驱动程序。它还具有支持 TCP、UDP、IPv4 和 IPv6 的嵌入式网络栈，以及 Modbus 和 DroneCAN 等工业协议。 该系统涵盖了广泛的功能，包括具有按需分页的高级内存管理、安全加密操作，以及用于管理不同存储类型的虚拟文件系统。它进一步集成了用于图形用户界面、音频合成以及执行多种脚本语言和 WebAssembly 工作负载的高级接口。 该环境使用 Make 或 CMake 构建，以针对特定的板卡配置和半导体芯片组。

NuttX 是一个符合 POSIX 标准的实时操作系统，专为资源受限的嵌入式环境而设计。它作为可扩展的微控制器操作系统，提供了一个类 Unix 环境，用于管理硬件并在从 8 位到 64 位的架构上运行应用程序。 该系统通过实现遵循 POSIX 和 ANSI 标准的内核来确保高软件可移植性。这允许开发者在不同的硬件架构上使用标准化的 API 调用创建可移植的嵌入式应用程序。 该项目包括模块化内核架构和硬件抽象层，以将系统与特定芯片外设解耦。它利用基于优先级的抢占式调度来实现确定性响应，并提供模拟硬件环境的工具，以便在没有物理板的情况下测试固件。

Util-linux is a collection of essential command-line tools and system administration binaries designed for managing core Linux operating system functions and hardware. It provides a suite of low-level programs that interact directly with the Linux kernel to configure system resources and perform standard administrative tasks on Unix-like operating systems. The project is built upon a modular architecture where independent, loosely coupled binaries share common libraries to minimize resource usage. It adheres to standard system programming interfaces to ensure portability and stability across

nix is a Unix system API library and Rust system programming interface that provides type-safe bindings for invoking low-level system calls. It serves as a low-level operating system wrapper and POSIX compatibility layer, allowing for kernel interactions and administrative tasks through safe wrappers around platform-specific APIs. The project provides a kernel device interface for controlling hardware devices, managing kernel modules, and configuring terminal interfaces. It differentiates itself by offering type-safe wrappers for memory mapping and zero-copy input-output operations to reduce

TCP-IP-NetworkNote is a comprehensive technical reference and guide for implementing network communication using TCP and UDP sockets in C and C++. It provides a detailed manual for using the POSIX socket API and covers the implementation of network protocols, synchronous and asynchronous I/O patterns, and concurrent programming models. The project is distinguished by its focus on cross-platform networking, offering a detailed comparison of socket implementation details and adaptation utilities between Linux and Windows Winsock environments. It specifically addresses the differences in header

This operating system microkernel is written in Rust, focusing on safety, modularity, and POSIX compatibility for modern hardware. It implements a microkernel architecture that separates hardware drivers and system services into isolated userspace processes for fault tolerance, while providing standard Unix-like system calls and process primitives on a memory-safe codebase. The system handles low-level hardware abstraction through a virtual memory management layer that maps virtual addresses to physical pages uniformly across disparate architectures, alongside hardware memory management opera

该项目作为在 C 语言中开发网络应用程序的综合教程和技术资源。它专注于 Berkeley 套接字接口的实际应用，指导用户实现底层网络协议并管理跨面向连接和无连接流的数据传输。 该材料通过涵盖网络通信的全生命周期脱颖而出，从初始化系统级协议栈和解析域名到管理复杂的连接行为。它提供关于构建利用非阻塞输入和输出操作来高效处理多个并发请求的并发服务的说明。 除了基本连接外，该仓库还解决了安全和诊断功能的集成。它演示了如何用加密层包装套接字流以进行安全通信，并提供检查网络流量以排查连接和性能问题的方法。内容被结构化为寻求直接针对操作系统接口理解和实现健壮网络服务的开发者的实用参考。