Security-conscious, minimal, immutable Linux distribution with automatic updates.
Daniel Lundin
b784c94d42
An experiment to see if we can minimize the PatOS project even further, and not have to adapt NixOS packages and config for our needs. |
||
|---|---|---|
| .woodpecker | ||
| kernel | ||
| systemd | ||
| .envrc.recommended | ||
| .gitignore | ||
| .rgignore | ||
| flake.lock | ||
| flake.nix | ||
| justfile | ||
| LICENSE | ||
| README.adoc | ||
PatOS - Patagia OS
Table of Contents
PatOS is a minimal, immutable Linux distribution specialized for the Patagia Platform.
Features
-
Immutable read-only system
-
Trust chain verification using secure boot and dm-verity
-
Automatic updates and unattended rollbacks
-
Host/TPM bound data encryption by default
Roadmap and status
| Feature | Status |
|---|---|
A/B root partitions with discoverable partitions |
✅ |
Verity protection of root partitions |
✅ |
Encrypted state partition with tpm2 host binding |
✅ |
Factory reset / clearing of state partition |
✅ |
Automatic updates |
⚠️ |
Installer |
❌ |
Machine registration and provisioning |
❌ |
Boot assessment w/automatic rollback |
❌ |
Community
-
Source code: https://patagia.dev/Patagia/patos