Minix–Flatcar hybrid OS prototype for immutable, microkernel-driven container hosting.
FlatRacoon OS combines the reliability principles of Minix’s microkernel architecture with Flatcar Container Linux’s immutable infrastructure approach.
Part of the FlatRacoon Network Stack.
┌─────────────────────────────────────────────────────────────┐
│ User Space │
│ ┌─────────────┐ ┌─────────────┐ ┌─────────────────────┐ │
│ │ Containers │ │ ZeroTier │ │ FlatRacoon Stack │ │
│ │ (podman) │ │ Agent │ │ Services │ │
│ └──────┬──────┘ └──────┬──────┘ └──────────┬──────────┘ │
│ │ │ │ │
│ ┌──────▼────────────────▼────────────────────▼──────────┐ │
│ │ System Services (isolated) │ │
│ │ ┌─────────┐ ┌─────────┐ ┌─────────┐ ┌─────────┐ │ │
│ │ │ Network │ │ Storage │ │ Process │ │ Update │ │ │
│ │ │ Server │ │ Server │ │ Server │ │ Server │ │ │
│ │ └────┬────┘ └────┬────┘ └────┬────┘ └────┬────┘ │ │
│ └───────┼────────────┼────────────┼────────────┼────────┘ │
└──────────┼────────────┼────────────┼────────────┼───────────┘
│ │ │ │
┌──────────▼────────────▼────────────▼────────────▼───────────┐
│ Microkernel (Minix-inspired) │
│ ┌─────────────────────────────────────────────────────┐ │
│ │ IPC │ Scheduling │ Memory │ Capability Gates │ │
│ └─────────────────────────────────────────────────────┘ │
└─────────────────────────────────────────────────────────────┘
│
┌─────────────────────────────▼───────────────────────────────┐
│ Hardware │
└─────────────────────────────────────────────────────────────┘-
Microkernel architecture - Minimal kernel, services in userspace
-
Fault isolation - Driver crashes don’t bring down system
-
Self-healing - Automatic service restart
-
Capability-based security - Fine-grained permissions
-
Microkernel - Minix-inspired minimal kernel
-
System servers - Network, storage, process management
-
Container runtime - Podman with rootless support
-
Update system - OSTree-based atomic updates
-
Network stack - ZeroTier and IPv6-native
flatracoon-os/
├── kernel/
│ ├── src/ # Microkernel source (Rust/Ada)
│ ├── ipc/ # Inter-process communication
│ └── capability/ # Capability system
├── servers/
│ ├── network/ # Network server
│ ├── storage/ # Storage server
│ ├── process/ # Process server
│ └── update/ # Update server
├── userland/
│ ├── init/ # Init system
│ ├── container-runtime/ # Podman integration
│ └── flatracoon-agent/ # Stack integration agent
├── images/
│ ├── Containerfile.base # Base image build
│ ├── Containerfile.dev # Development image
│ └── scripts/
├── configs/
│ ├── kernel.ncl # Kernel configuration
│ ├── servers.ncl # Server settings
│ └── update.ncl # Update policy
├── Justfile
├── README.adoc
├── STATE.scm
├── META.scm
└── ECOSYSTEM.scm| Input | Description | Source |
|---|---|---|
Base image |
Flatcar Container Linux base |
Flatcar upstream |
Kernel config |
Microkernel build settings |
configs/kernel.ncl |
Server configs |
System server parameters |
configs/servers.ncl |
Update channel |
Stable/beta/alpha |
configs/update.ncl |
| Output | Description |
|---|---|
Bootable OS image |
FlatRacoon OS installer/image |
OCI base image |
Container base for stack services |
VM template |
QEMU/KVM/libvirt template |
Cloud images |
AWS AMI, GCP image, Azure VHD |
-
All modules - Native deployment target
-
zerotier-k8s-link - ZeroTier agent built-in
-
ipfs-overlay - IPFS daemon as system server
-
ipv6-site-enforcer - IPv6-only networking default
# 1. Build development image
just build-dev
# 2. Run in QEMU
just run-qemu
# 3. SSH into instance
just ssh
# 4. Build production image
just build-prod| Feature | FlatRacoon | Flatcar | Minix |
|---|---|---|---|
Architecture |
Microkernel |
Monolithic |
Microkernel |
Immutability |
Yes |
Yes |
No |
Container-native |
Yes |
Yes |
No |
Self-healing |
Yes |
Partial |
Yes |
Fault isolation |
Full |
Partial |
Full |