于千+Vanilla+OS+3+2026-4-1+114457+1.pdf

1、Vanilla OS 3Immutable and Reproducible Operating SystemNN708,Vanilla OS DeveloperOS2ATC 2026-03-28 Beijing Language and Culture University,Beijing,ChinaAgendaWhat Kind of Operating System Do We Want?What Is Immutability?What Is Reproducibility?Who Is Vanilla OS Designed For?What Kind of Operating Sy

2、stem Do We Want?WindowsmacOSLinuxWhat Kind of Operating System Do We Want?As Compatible as WindowsAs Stable as macOSAs Free as LinuxWhat Is Immutability?Read-Only Root Filesystem(/)Core system is read-only while running,preventing accidental changes.Think of the host system as a container,with only

3、specific directories mounted as writable for persistent data.Atomic System UpdatesChanges are applied to the entire core system,with the ability to safely roll back if something goes wrong.Like a disk restore card,the system can always revert to a known good state.Containerized ApplicationsApplicati

4、ons are installed separately from the host system,typically containerized.How Vanilla OS Achieves Immutability?Core System as an OCI ImageThe entire OS is built as an OCI(Open Container Initiative)image,containing only essential components.Proven in cloud computing,OCI images offer both flexibility

5、in development and stability once published.A/B System UpdatesThe OS runs from a read-only present partition,while updates are installed to a separate future partition.After a successful update and reboot,the partitions are swapped.Flatpak FirstMost default applications are delivered as Flatpaks,giv

6、ing users the freedom to choose what they need.What Is Reproducibility?Same Source+Same Build Environment=Same BinaryReproducible builds allow any party to create bit-by-bit identical artifacts,given the exact same source and buildenvironment.How Vanilla OS Benefits From Reproducibility?CVE-2024-548