The Architecture
OS.1 is built as a fortress from the ground up. Our environment is defined by carefully selected modules that synthesize to form an unassailable high-assurance computing layout. Here are the core components governing our zero-trust system:
Secure Boot
OS.1 eliminates legacy bootloaders (like GRUB) which are inherently vulnerable to tampering. Instead, the firmware directly executes an immutable Unified Kernel Image (UKI) via UEFI Secure Boot. This mechanism handles runtime decryption and initialization seamlessly.
- Mechanism — UEFI, signed UKI, direct kernel loading, dm-crypt (initramfs)
- bitedits/limine — Limine Bootloader
- bitedits/edk2 — TianoCore EDK II
Root File-system
At the core of the user environment is an ultra-minimalist root filesystem derived from Alpine Linux. By managing a dedicated downstream fork, we strictly control and minimize the surface area of the base distribution.
- Alpine Linux — Upstream Project
- bitedits/alpine — OS.1 Custom Fork
C Library
An implementation of the standard library functionality described in the ISO C and POSIX standards, plus common extensions, built on top of the Linux system calls API. MUSLC is used in NuttX, Alpine, Chimera, ans OS.1.
- MUSL C — Upstream Project
Berkley Userland
All vital system utilities are provided by Alpine Toybox or Chimeratils BSD Userland. This establishes a hard breakpoint that separates the core system from monolithic dependencies while retaining absolute POSIX compliance.
- Toybox — Upstream Project
- bitedits/toybox — OS.1 Custom Fork
- bitedits/chimerautils — Chimera BSD Userland
Power Tools
Hardware power states and performance governors are managed directly through native logic, eschewing heavy system daemons in favor of predictable, direct tuning mechanisms.
- Tooling — acpi + cpupower
Time Server
Accurate, cryptographic synchronization is paramount to securing a zero-trust architecture. Chrony serves as an isolated NTP client ensuring that system timestamps remain rigorously validated against network tampering. Chrony is used in Alpine, Chimera and OS.1.
- Chrony — Upstream Project
- mlichvar/chrony — Source Code
Package Management
Software lifecycle integrity is maintained via Alpine Package Keeper. By utilizing deterministic builds and local offline signatures, we ensure a highly defensive supply chain architecture. APKv3 is used by Alpine, Chimera and OS.1.
- Alpine Package Keeper — Documentation
- alpinelinux/apk-tools — Source Code
Auditing
System call profiling and anomaly detection are captured dynamically by a localized, minimal auditing layer, entirely bypassing bloated centralized logging paradigms.
- bitedits/audit-userpace — Userspace Auditing
Tracing
Advanced, non-invasive system observability is delivered natively through eBPF. Security policies monitor kernel tracepoints dynamically without requiring structural alterations or intrusive kernel hooks.
- eBPF & bpftrace.org — Upstream Projects
- bpftrace/bpftrace — Source Code
Network Firewall
The network boundary is fiercely guarded by a strict default-drop nftables stack. Routing policies are verified at load, ensuring only explicitly permitted, encrypted traffic traverses the network sockets.
- nftables — Upstream Project
- git.netfilter.org/nftables — Source Code
Mandatory Access Control
Moving beyond convoluted policy frameworks, OS.1 deploys thread-level unprivileged sandboxing via Landlock. Processes must securely restrict their own filesystem access through strict declarative profiles.
- Landlock — Upstream Project
- landlock-lsm/landlockconfig — Configuration Engine
Init Supervisor
Process initialization follows a strictly deterministic dependency graph. OpenRC eliminates parallel background bloat by mapping service dependencies cleanly and predictably during boot orchestration. OpenRC is supported on Alpine, Chimera snd OS.1.
- OpenRC Handbook — Upstream Documentation
- bitedits/openrc — OS.1 Custom Fork
User Privileges
Privilege transitions are governed by OpenDoas. This minimalist framework enforces strict execution constraints with a footprint of less than 5% compared to legacy sudo, entirely preventing cross-shell context persistence. Doas is used in Alpine, Chimera and OS.1.
- bitedits/OpenDoas — OpenBSD User Management for Linux
Seat Devices
Input routing and hardware mediation are controlled by seatd. It securely permits graphical workspaces to access shared devices without elevating permissions to complex display manager suites. Seat Daemon is used in Alpine, Chimera and OS.1.
- seatd — Upstream Documentation
- bitedits/seatd — OS.1 Custom Fork
Window Manager
The visual desktop layout is anchored by Claude's Tab Window Manager from NetBSD. By bypassing complex message brokers and notification loops, cwm drastically reduces the rendering attack surface, providing a highly productive, ultra-light interface.
- ctwm — Upstream Project
- bitedits/ctwm — OS.1 Custom Fork
GStreamer
Handling complex multimedia pipelines is delegated to GStreamer. Running within strictly isolated contexts, it ensures robust audio and video processing while preventing codec-level exploits from compromising the broader system. GStreamer/PipeWire is supported in Chimera and OS.1.
Erlang
For resilient, fault-tolerant network services and daemons, OS.1 embraces Erlang. Its battle-tested actor model and extreme concurrency provide an uncompromising foundation for highly available distributed architectures.
- erlang/otp — Upstream Project
- cloudozer/ling — Erlang on Xen (made in Ukraine)
Elixir
Building atop the Erlang Virtual Machine, Elixir introduces modern developer tooling and extensibility. It accelerates the development of secure, scalable system services while inheriting the raw reliability of the underlying VM.
- Elixir — Upstream Project
Namdak Tonpa. Erlang OS.1: Bytecode Virtualized POSIX Systems Architecture and Engineering. 2026.
