-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy pathindex.html
More file actions
260 lines (237 loc) · 12.8 KB
/
Copy pathindex.html
File metadata and controls
260 lines (237 loc) · 12.8 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<meta name="description" content="OS.1 Technical Whitepaper" />
<meta name="author" content="OS.1 Engineering Group" />
<title>OS.1</title>
<link rel="stylesheet" href="https://n2o.dev/blank.css" />
<link rel="stylesheet" href="https://n2o.dev/nato.css" />
<link rel="shortcut icon" type="image/x-icon" href="img/favicon.ico" />
<link rel="apple-touch-icon" sizes="180x180" href=".img/apple-touch-icon.png" />
<link rel="icon" type="image/png" sizes="32x32" href="img/favicon-32x32.png" />
<link rel="icon" type="image/png" sizes="16x16" href="img/favicon-16x16.png" />
<link rel="manifest" href="img/site.webmanifest" />
</head>
<body>
<nav>
<a href="https://github.com/bitedits/">BITEDITS</a>
<a href="#" style="background:#ededed;">OS.1</a>
</nav>
<header>
<a href="https://github.com/bitedits"><img src="https://openmoji.org/data/color/svg/1F510.svg" /></a>
<h1>OS.1</h1>
</header>
<aside>
<article>
<section>
<h3>SYNOPSIS</h3>
<div>OS.1 (internally designated as <b>zencrypted/os</b>) is a monolithic, zero-trust operating infrastructure designed for high-assurance computing.
It synthesizes an ultra-lightweight independent rootfs framework, an immutable Unified Kernel Image (UKI),
declarative hardware sandboxing, and strict privilege isolation, eliminating legacy attack vectors.
</div><br/>
<div>
2026 © <a href="https://github.com/bitedits">OS.1</a><br />
Status: Architecture Specification
</div>
</section>
</article>
</aside>
<main>
<article>
<section>
<a name="story"></a><h3>The Architecture</h3>
<p>OS.1 is built as a fortress from the ground up. Our environment is defined by carefully selected modules that synthesize to form an unassailable high-assurance computing layout. Here are the core components governing our zero-trust system:</p>
</section>
<section>
<a name="boot"></a><h3>Secure Boot</h3>
<p>OS.1 eliminates legacy bootloaders (like GRUB) which are inherently vulnerable to tampering. Instead, the firmware directly executes an immutable Unified Kernel Image (UKI) via UEFI Secure Boot. This mechanism handles runtime decryption and initialization seamlessly.</p>
<ul>
<li><b>Mechanism</b> — UEFI, signed UKI, direct kernel loading, dm-crypt (initramfs)</li>
<li><b><a href="https://github.com/bitedits/limine">bitedits/limine</a></b> — Limine Bootloader</li>
<li><b><a href="https://github.com/bitedits/edk2">bitedits/edk2</a></b> — TianoCore EDK II</li>
</ul>
</section>
<section>
<a name="rootfs"></a><h3>Root File-system</h3>
<p>At the core of the user environment is an ultra-minimalist root filesystem derived from Alpine Linux. By managing a dedicated downstream fork, we strictly control and minimize the surface area of the base distribution.</p>
<ul>
<li><b><a href="https://www.alpinelinux.org">Alpine Linux</a></b> — Upstream Project</li>
<li><b><a href="https://github.com/bitedits/alpine">bitedits/alpine</a></b> — OS.1 Custom Fork</li>
</ul>
</section>
<section>
<a name="power"></a><h3>C Library</h3>
<p>An implementation of the standard library functionality described in the ISO C and POSIX standards, plus common extensions,
built on top of the Linux system calls API. MUSLC is used in NuttX, Alpine, Chimera, ans OS.1.</p>
<ul>
<li><b><a href="https://musl.libc.org/about.html">MUSL C</a></b> — Upstream Project</li>
</ul>
</section>
<section>
<a name="power"></a><h3>Berkley Userland</h3>
<p>All vital system utilities are provided by Alpine Toybox or Chimeratils BSD Userland.
This establishes a hard breakpoint that separates the core system from monolithic
dependencies while retaining absolute POSIX compliance.</p>
<ul>
<li><b><a href="http://landley.net/toybox/">Toybox</a></b> — Upstream Project</li>
<li><b><a href="https://codeberg.org/bitedits/toybox">bitedits/toybox</a></b> — OS.1 Custom Fork</li>
<li><b><a href="https://github.com/bitedits/chimerautils">bitedits/chimerautils</a></b> — Chimera BSD Userland</li>
</ul>
</section>
<section>
<a name="power"></a><h3>Power Tools</h3>
<p>Hardware power states and performance governors are managed directly through native logic, eschewing heavy system daemons in favor of predictable, direct tuning mechanisms.</p>
<ul>
<li><b>Tooling</b> — acpi + cpupower</li>
</ul>
</section>
<section>
<a name="time"></a><h3>Time Server</h3>
<p>Accurate, cryptographic synchronization is paramount to securing a zero-trust architecture.
Chrony serves as an isolated NTP client ensuring that system timestamps remain rigorously validated against network tampering.
Chrony is used in Alpine, Chimera and OS.1.</p>
<ul>
<li><b><a href="https://chrony-project.org">Chrony</a></b> — Upstream Project</li>
<li><b><a href="https://github.com/mlichvar/chrony">mlichvar/chrony</a></b> — Source Code</li>
</ul>
</section>
<section>
<a name="packages"></a><h3>Package Management</h3>
<p>Software lifecycle integrity is maintained via Alpine Package Keeper.
By utilizing deterministic builds and local offline signatures, we ensure a highly defensive supply chain architecture.
APKv3 is used by Alpine, Chimera and OS.1.</p>
<ul>
<li><b><a href="https://wiki.alpinelinux.org/wiki/Alpine_Package_Keeper">Alpine Package Keeper</a></b> — Documentation</li>
<li><b><a href="https://github.com/alpinelinux/apk-tools">alpinelinux/apk-tools</a></b> — Source Code</li>
</ul>
</section>
<section>
<a name="auditing"></a><h3>Auditing</h3>
<p>System call profiling and anomaly detection are captured dynamically by a localized,
minimal auditing layer, entirely bypassing bloated centralized logging paradigms.</p>
<ul>
<li><b><a href="https://github.com/bitedits/audit-userpace">bitedits/audit-userpace</a></b> — Userspace Auditing</li>
</ul>
</section>
<section>
<a name="tracing"></a><h3>Tracing</h3>
<p>Advanced, non-invasive system observability is delivered natively through eBPF.
Security policies monitor kernel tracepoints dynamically without requiring structural alterations or intrusive kernel hooks.</p>
<ul>
<li><b><a href="https://ebpf.io">eBPF</a></b> & <b><a href="https://bpftrace.org">bpftrace.org</a></b> — Upstream Projects</li>
<li><b><a href="https://github.com/bpftrace/bpftrace">bpftrace/bpftrace</a></b> — Source Code</li>
</ul>
</section>
<section>
<a name="firewall"></a><h3>Network Firewall</h3>
<p>The network boundary is fiercely guarded by a strict default-drop nftables stack.
Routing policies are verified at load, ensuring only explicitly permitted, encrypted traffic traverses the network sockets.</p>
<ul>
<li><b><a href="https://www.netfilter.org/projects/nftables/index.html">nftables</a></b> — Upstream Project</li>
<li><b><a href="https://git.netfilter.org/nftables/tree/">git.netfilter.org/nftables</a></b> — Source Code</li>
</ul>
</section>
<section>
<a name="mac"></a><h3>Mandatory Access Control</h3>
<p>Moving beyond convoluted policy frameworks, OS.1 deploys thread-level unprivileged sandboxing via Landlock.
Processes must securely restrict their own filesystem access through strict declarative profiles.</p>
<ul>
<li><b><a href="https://landlock.io">Landlock</a></b> — Upstream Project</li>
<li><b><a href="https://github.com/landlock-lsm/landlockconfig/">landlock-lsm/landlockconfig</a></b> — Configuration Engine</li>
</ul>
</section>
<section>
<a name="rc"></a><h3>Init Supervisor</h3>
<p>Process initialization follows a strictly deterministic dependency graph.
OpenRC eliminates parallel background bloat by mapping service dependencies cleanly and predictably during boot orchestration.
OpenRC is supported on Alpine, Chimera snd OS.1.</p>
<ul>
<li><b><a href="https://docs.alpinelinux.org/user-handbook/0.1a/Working/openrc.html">OpenRC Handbook</a></b> — Upstream Documentation</li>
<li><b><a href="https://github.com/bitedits/openrc">bitedits/openrc</a></b> — OS.1 Custom Fork</li>
</ul>
</section>
<section>
<a name="users"></a><h3>User Privileges</h3>
<p>Privilege transitions are governed by OpenDoas.
This minimalist framework enforces strict execution constraints with a footprint of less than 5% compared to legacy sudo,
entirely preventing cross-shell context persistence. Doas is used in Alpine, Chimera and OS.1.</p>
<ul>
<li><b><a href="https://github.com/bitedits/OpenDoas">bitedits/OpenDoas</a></b> — OpenBSD User Management for Linux</li>
</ul>
</section>
<section>
<a name="seat"></a><h3>Seat Devices</h3>
<p>Input routing and hardware mediation are controlled by seatd.
It securely permits graphical workspaces to access shared devices without elevating permissions to complex display manager suites.
Seat Daemon is used in Alpine, Chimera and OS.1.</p>
<ul>
<li><b><a href="https://man.sr.ht/~kennylevinsen/seatd/">seatd</a></b> — Upstream Documentation</li>
<li><b><a href="https://github.com/bitedits/seatd">bitedits/seatd</a></b> — OS.1 Custom Fork</li>
</ul>
</section>
<section>
<a name="wm"></a><h3>Window Manager</h3>
<p>The visual desktop layout is anchored by Claude's Tab Window Manager from NetBSD.
By bypassing complex message brokers and notification loops,
cwm drastically reduces the rendering attack surface, providing a highly productive, ultra-light interface.</p>
<ul>
<li><b><a href="https://www.ctwm.org/index.html">ctwm</a></b> — Upstream Project</li>
<li><b><a href="https://github.com/bitedits/ctwm">bitedits/ctwm</a></b> — OS.1 Custom Fork</li>
</ul>
</section>
<section>
<a name="gstreamer"></a><h3>GStreamer</h3>
<p>Handling complex multimedia pipelines is delegated to GStreamer.
Running within strictly isolated contexts, it ensures robust audio
and video processing while preventing codec-level exploits from compromising the broader system.
GStreamer/PipeWire is supported in Chimera and OS.1.</p>
<ul>
<li><b><a href="https://gstreamer.freedesktop.org/">GStreamer</a></b> — Upstream Project</li>
<li><b><a href="https://pipewire.org/">PipeWire</a></b> — Upstream Project</li>
</ul>
</section>
<section>
<a name="erlang"></a><h3>Erlang</h3>
<p>For resilient, fault-tolerant network services and daemons, OS.1 embraces Erlang.
Its battle-tested actor model and extreme concurrency provide an uncompromising foundation
for highly available distributed architectures.</p>
<ul>
<li><b><a href="https://www.erlang.org/">erlang/otp</a></b> — Upstream Project</li>
<li><b><a href="https://erlangonxen.org/">cloudozer/ling</a></b> — Erlang on Xen (made in Ukraine)</li>
</ul>
</section>
<section>
<a name="elixir"></a><h3>Elixir</h3>
<p>Building atop the Erlang Virtual Machine, Elixir introduces modern developer tooling and extensibility.
It accelerates the development of secure, scalable system services while inheriting the raw reliability
of the underlying VM.</p>
<ul>
<li><b><a href="https://elixir-lang.org/">Elixir</a></b> — Upstream Project</li>
</ul>
</section>
<section>
<p>
<a href="os.pdf" target="_blank" style="display:inline-flex;align-items:center;text-decoration:none;transition:transform 0.2s,color 0.2s;color:var(--text-secondary);"
onmouseover="this.style.transform='translateY(-2px)';this.style.color='white';"
onmouseout="this.style.transform='translateY(0)';this.style.color='var(--text-secondary)';">
<img src="https://anders.groupoid.space/images/pdf.jpg" style="margin-right:10px;" width="20" height="20" alt="PDF">
Namdak Tonpa. OS.1: A Monolithic, Zero-Trust Architecture for Hardened Edge and Desktop Systems. 2026.</a>
</p>
<p>
<a href="beam-os.pdf" target="_blank" style="display:inline-flex;align-items:center;text-decoration:none;transition:transform 0.2s,color 0.2s;color:var(--text-secondary);"
onmouseover="this.style.transform='translateY(-2px)';this.style.color='white';"
onmouseout="this.style.transform='translateY(0)';this.style.color='var(--text-secondary)';">
<img src="https://anders.groupoid.space/images/pdf.jpg" style="margin-right:10px;" width="20" height="20" alt="PDF">
Namdak Tonpa. Erlang OS.1: Bytecode Virtualized POSIX Systems Architecture and Engineering. 2026.</a></p>
<p>
<br>
</section>
<br>
</article>
</main>
<footer>Made with <span class="heart">❤</span> for High-Assurance Computing</footer>
</body>
</html>