Component description / functionalities
Garden Linux is a minimal, immutable, API-driven operating system layer for automated, Kubernetes-centric platforms. It is not a general-purpose Operating System targeting all possible use-cases & scenarios.
- Lightweight & Optimized Container OS: Minimal footprint container OS designed for Kubernetes nodes and container base images, with an easy-to-use build system.
- Advanced Security & Auditability: Features immutable root filesystems, a hardened LTS kernel, secure boot, remote attestation, and built-in security modules like SELinux and AppArmor.
- Compliance & Future-Ready: Meets industry standards including CIS and DISA STIG, and integrates emerging Post-Quantum Cryptography algorithms.
- Cross-Platform & Multi-Cloud: Provides ready-made images for major cloud providers and on-premises environments, reducing integration effort.
- State-of-the-Art Technology: Fully systemd-based architecture ensuring modern, robust system management and repeatable, auditable builds.
- Qualified Baseline: All ApeiroRA components will be streamlined and qualified on Garden Linux only, providing a single, fully supported OS baseline across the entire stack.