asterinas

Asterinas is a secure, fast, and general-purpose OS kernel, written in Rust and providing Linux-compatible ABI.

Go to file

Jakob Hellermann 84b235d3dd Fix invalid environment name escaping in Makefile This would print 'Error: this \ environment variable must be given' previously.		2025-12-29 19:41:00 +08:00
.github	Bump docker ref to 0.17.0-20251228	2025-12-29 19:37:02 +08:00
.vscode	Use rust-analyzer for riscv64 and loongarch64 target	2025-08-29 16:57:06 +08:00
book	Add SCML for ioprio_get and ioprio_set	2025-12-29 19:39:17 +08:00
distro	Make configuration.nix in ISO editable	2025-12-13 13:18:08 +08:00
kernel	Adjust `blocks_count` field to `sector_count` in `InodeDesc` and `RawInode`.	2025-12-29 10:26:48 +08:00
osdk	Upgrade mdBook to 0.5.2	2025-12-28 10:21:58 +08:00
ostd	Remove WeakRef and NonNullPtr impl for Weak<T>	2025-12-26 17:00:11 +08:00
test	Correct ELF alignment settings	2025-12-29 10:09:58 +08:00
tools	Remove push_git_tag workflow	2025-12-23 10:29:08 +08:00
.code-workspace	Enable the rust-analyzer for OSDK	2024-04-25 09:44:46 +08:00
.dockerignore	Rename regression to test	2024-06-28 20:33:21 +08:00
.gitignore	Add cachix binary cache	2025-12-12 00:19:00 +08:00
.licenserc.yaml	Remove local tdx-guest crate	2024-04-29 10:13:04 +08:00
.typos.toml	Fix some typos	2025-11-28 19:10:16 +08:00
CODEOWNERS	Rename `syscall-feature-coverage` to `syscall-flag-coverage`	2025-12-04 12:51:45 +08:00
COPYRIGHT	Update the license to MPLv2	2023-12-26 17:43:45 +08:00
Cargo.lock	Bump the project version to 0.17.0	2025-12-14 00:08:33 +08:00
Cargo.toml	Add `i8042.exist` to override ACPI flags	2025-12-07 09:52:42 +08:00
Components.toml	Add `i8042.exist` to override ACPI flags	2025-12-07 09:52:42 +08:00
DOCKER_IMAGE_VERSION	Bump the Docker image version to 0.17.0-20251228	2025-12-28 10:21:58 +08:00
LICENSE-MPL	Update the license to MPLv2	2023-12-26 17:43:45 +08:00
Makefile	Fix invalid environment name escaping in Makefile	2025-12-29 19:41:00 +08:00
OSDK.toml	Fix missing virtio-blk-device configuration for riscv64	2025-11-20 10:43:24 +08:00
README.md	Bump docker ref to 0.17.0-20251228	2025-12-29 19:37:02 +08:00
RELEASES.md	Add 0.17.0 release notes	2025-12-19 18:01:59 +08:00
VERSION	Bump the project version to 0.17.0	2025-12-14 00:08:33 +08:00
rust-toolchain.toml	Upgrade the Rust toolchain to 20251208	2025-12-09 09:23:58 +08:00
rustfmt.toml	Implement new ioctl infrastructure	2025-12-07 12:01:05 +08:00
triagebot.toml	Manage S-waiting-on-author and S-waiting-on-review automatically	2024-10-24 19:12:04 +08:00

README.md

asterinas-logo
A secure, fast, and general-purpose OS kernel written in Rust and compatible with Linux

https://github.com/user-attachments/assets/26be2d18-994d-4658-a1b8-f8959bd88b75

News:

2025-12-08: FAST 2026 accepted a paper on a novel secure storage solution having been integrated into Asterinas: MlsDisk: Trusted Block Storage for TEEs Based on Layered Secure Logging.
2025-10-17: ICSE 2026 accepted yet another paper about Asterinas: RusyFuzz: Unhandled Exception Guided Fuzzing for Rust OS Kernel.
2025-10-14: CortenMM: Efficient Memory Management with Strong Correctness Guarantees received the Best Paper Award at SOSP 2025.
2025-07-23: SOSP 2025 accepted another Asterinas paper: CortenMM: Efficient Memory Management with Strong Correctness Guarantees.
2025-06-18: USENIX ;login: magazine published Asterinas: A Rust-Based Framekernel to Reimagine Linux in the 2020s.
2025-04-30: USENIX ATC 2025 accepted two Asterinas papers:
1. Asterinas: A Linux ABI-Compatible, Rust-Based Framekernel OS with a Small and Sound TCB;
2. Converos: Practical Model Checking for Verifying Rust OS Kernel Concurrency.

Congratulations to the Asterinas community🎉🎉🎉

Introducing Asterinas

Asterinas is a secure, fast, and general-purpose OS kernel that provides Linux-compatible ABI. It can serve as a seamless replacement for Linux while enhancing memory safety and developer friendliness.

Asterinas prioritizes memory safety by employing Rust as its sole programming language and limiting the use of unsafe Rust to a clearly defined and minimal Trusted Computing Base (TCB). This innovative approach, known as the framekernel architecture, establishes Asterinas as a more secure and dependable kernel option.
Asterinas surpasses Linux in terms of developer friendliness. It empowers kernel developers to (1) utilize the more productive Rust programming language, (2) leverage a purpose-built toolkit called OSDK to streamline their workflows, and (3) choose between releasing their kernel modules as open source or keeping them proprietary, thanks to the flexibility offered by MPL.

While the journey towards a production-grade OS kernel is challenging, we are steadfastly progressing towards this goal. Over the course of 2024, we significantly enhanced Asterinas's maturity, as detailed in our end-year report. In December 2025, we launched Asterinas NixOS, an Asterinas distribution based on NixOS. This release marks Asterinas reaching the Minimum Viable Product (MVP) milestone. In 2026, we aim to make Asterinas production-ready on x86-64 virtual machines and attract real users.

Getting Started

For End Users

We provide Asterinas NixOS ISO Installer to make the Asterinas kernel more accessible for early adopters and enthusiasts. We encourage you to try out Asterinas NixOS and share feedback. Instructions on how to use the ISO installer can be found here.

Disclaimer: Asterinas is an independent, community-led project. Asterinas NixOS is not an official NixOS project and has no affiliation with the NixOS Foundation. No sponsorship or endorsement is implied.

For Kernel Developers

Follow the steps below to get Asterinas up and running.

Download the latest source code on an x86-64 Linux machine:
```
git clone https://github.com/asterinas/asterinas
```

Run a Docker container as the development environment:

docker run -it --privileged --network=host -v /dev:/dev -v $(pwd)/asterinas:/root/asterinas asterinas/asterinas:0.17.0-20251228

Inside the container, go to the project folder (/root/asterinas) and run:
```
make kernel
make run_kernel
```
This results in a VM running the Asterinas kernel with a small initramfs.
To install and test real-world applications on Asterinas, build and run Asterinas NixOS in a VM:
```
make nixos
make run_nixos
```
This boots into an interactive shell in Asterinas NixOS, where you can use Nix to install and try more packages.

The Book

See The Asterinas Book to learn more about the project.

License

Asterinas's source code and documentation primarily use the Mozilla Public License (MPL), Version 2.0. Select components are under more permissive licenses, detailed here. For the rationales behind the choice of MPL, see here.