Spectrum: Virtualisation Platform
A secure OS with app isolation
Spectrum is an implementation of a security through compartmentalization based operating system, built on top of the Linux kernel. Unlike other such implementations, user data and application state will be managed centrally, while remaining isolated, meaning that the system can be backed up and managed as a whole, rather than mixed up in several dozen virtual machines.
This project will continue the implementation of important features in Spectrum. In most cases, this work will also include the implementation of new primitives in Spectrum's underlying technologies — in particular the rust-vmm ecosystem — to enable those features. In addition, we aim to grow the ecosystem further in response to clear demand from developers, by extracting more reusable components from the monolithic Spectrum system, and by providing comprehensive documentation to teach developers how to create their own virtualization solutions from the growing universe of available components. By investing in growth of the free virtualization ecosystem, we expect we will expand the pool of potential future contributors to Spectrum and its components, increasing the speed at which the project can move in the future.
- The project's own website: https://spectrum-os.org
This project was funded through the NGI0 Commons Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet programme, under the aegis of DG Communications Networks, Content and Technology under grant agreement No 101135429. Additional funding is made available by the Swiss State Secretariat for Education, Research and Innovation (SERI).