Core Features
Anchor Linux is built with an emphasis on security, reliability, and simplicity. Its design focuses on minimalism and resilience, ensuring that each part of the system from package management to service orchestration works consistently and predictably.
Figure 1. Anchor Linux Architecture
System Components
The core of Anchor Linux is built around minimalism, security, and predictability. Every component is designed to work together seamlessly, from the package management system to the service orchestration layer.
Anchor Linux Packages
Minimal Base
A stripped-down core OS with only essential tools to reduce attack surface and improve performance.
Rust-based Toolchain
All core packages are built with Rust for memory safety and concurrency.
Custom Init System
A purpose-built init system designed for fast, reliable boot-up and service management.
Immutable RootFS
The core operating system is read-only, ensuring system integrity and preventing accidental corruption.
Persistent Storage
GPT-Based Partitioning
Modern and flexible disk partitioning for secure and scalable storage layouts.
EFI-Managed Partitions
Key configuration and boot files are stored on a dedicated EFI partition, making them accessible and recoverable.
Application Config Persistence
Service-specific configuration files are automatically backed up and restored across system updates.
Snapshotting and Rollback
Integrated tools to capture system snapshots and quickly revert to a previous state.
Network Manager
Integrated DHCP/Static IP
Automatically configure network interfaces via DHCP or apply a predefined static IP.
PCIe Path Binding
Configure network interfaces by their hardware PCIe path, ensuring consistent naming regardless of boot order.
Dynamic Link Control
Monitor and manage network link state and protocols for optimal connectivity.
Minimal Footprint
A low-overhead network daemon that avoids unnecessary services.
Configuration System
TOML-based Configuration
All system and application settings use the TOML format for human-readable and versionable files.
Hierarchical Settings
A layered configuration model that allows for easy overrides and granular control.
Single-Point Management
A centralized tool to manage and validate system settings.
Automated Backups
Configuration changes are automatically saved to a persistent storage location.
Service Manager
Declarative Service Definitions
Services are defined using simple TOML files, making them easy to understand and manage.
Multiple Service Modes
Supports services that run Once, Restart on failure, run at a set Every interval, Pause between runs, or follow a custom Schedule (cron-like).
Process Isolation
Services are started with minimal privileges and isolated from the host system.
Live Service Status
Real-time monitoring and logging for all running services.
Storage Manager
Efficient Tar.bz Compression
Uses tar and bzip2 for efficient and reliable package handling.
Content-Addressed Storage
Packages are identified by their hash, ensuring integrity and preventing tampering.
Deduplication and Caching
Smart storage management to reduce disk space usage and speed up package downloads.
File-level Snapshots
Allows fine-grained control over file versions and provides a safety net for critical data.
Anchor Linux Architecture
The architecture of Anchor Linux is built on a foundation of immutability, efficiency, and predictability. Every component is designed to simplify the development lifecycle, from the moment a device powers on to the ongoing management of its services.
Boot Process
The boot process is a meticulously orchestrated sequence designed for speed and reliability. Each step is handled by a custom init system, ensuring a minimal, secure, and rapid startup.
Initial Boot
The system boots directly into a minimal, read-only environment to ensure a rapid and secure start.
Network Setup
Network interfaces are configured either with a static IP address or by running a DHCP client.
System Initialization
All fundamental Linux filesystems (/proc, /sys, /dev) are dynamically mounted and populated.
Disk Setup
Storage devices are automatically partitioned and formatted, and the root filesystem is mounted.
ESP Discovery
The EFI System Partition is automatically discovered and mounted, providing access to system-level and application configuration files.
Package Extraction
The core operating system and all declared application packages (Anchors) are extracted from their compressed archives.
Configuration Loading
The latest hardware (hw.cfg) and OS (os.cfg) configurations are loaded from the ESP, configuring the system for its environment.
Service Initialization
The Service Manager reads all service definitions and begins starting them in their defined mode.
Service Lifecycle
Our declarative service manager simplifies the process of defining how an application should run. You choose the mode, and the system handles the rest, ensuring your application behaves exactly as intended.
Once
For services that perform a single task and exit. Useful for scripts and one-time setup jobs.
Restart
For mission-critical, long-running services that need to be automatically restarted if they ever fail or stop.
Every
For tasks that need to run at a consistent, predefined interval, regardless of their previous run time.
Pause
For services that require a cooldown period between executions, providing a simple way to manage resource usage.
Schedule
For complex, time-based tasks that follow a cron-like expression, offering complete control over execution timing.
Configuration Persistence
Configuration is a first-class citizen in Anchor Linux. Our architecture ensures that application settings are not lost during updates and can be easily managed.
Runtime Storage
Applications store their configuration files in a well-defined, temporary location on the system while they are running.
Periodic Backup
A service can be configured to periodically back up its configuration to a dedicated location on the persistent EFI partition.
Startup Restoration
On boot, the system checks for a backed-up configuration file and automatically restores it to the runtime location before starting the service.
Developer Experience
Anchor Linux is a purpose-built platform that eliminates the complexities of traditional systems. We have replaced legacy components with modern, memory-safe alternatives to give you a platform that is predictable, efficient, and reliable for your custom distributions.
For Development
Anchor Linux is a purpose-built platform that eliminates the complexities of traditional systems. We have replaced legacy components with modern, memory-safe alternatives to give you a platform that is predictable, efficient, and reliable for your custom distributions.
For Operations
By providing a minimal, immutable core and a declarative configuration system, Anchor Linux frees your team from the complexities of constant maintenance and patching. It provides a simple, versionable way to define and manage your services, empowering your team to spend less time on system administration and more time on product innovation.
Secure foundation for modern appliances and systems built for reliability.
Simplify operations, enhance security, and ensure consistency across your infrastructure.