Skip to content

VixOS is a secure app launcher, inspired by QubesOS and jollheef/appvm.

License

Notifications You must be signed in to change notification settings

Patient-Engineering/vixos

Repository files navigation

VixOS

VixOS is a secure app launcher, inspired by QubesOS and jollheef/appvm.

VixOS is in an early development stage, and should not be used in production (obviously).

Goals and non-goals

The goal of the project is to create a practical virtualisation tool. I want to move most of my workloads into VMs, but I want this to be mostly seamless (no manual VM management). Nixos sounds like a perfect tool for that job.

Usage

Enter development shell:

$ nix develop
[vixos]$

Top-level:

[vixos]$ python3 -m vixos --help
usage: __main__.py [-h] {run,list,shell} ...

VixOS is a secure application launcher.

optional arguments:
  -h, --help        show this help message and exit

subcommands:
  {run,list,shell}
    run             Run a nixpkgs program
    list            List available vixos VMs
    shell           Run a shell in a running VM

Run:

usage: __main__.py run [-h] [--gui] [--background] [--executable EXECUTABLE] package

Example:

[vixos]$ python3 -m vixos run firefox --gui
OK, running firefox...

List:

[vixos]$ python3 -m vixos list
vixos_firefox

Shell:

python3 -m vixos shell firefox

Dev plan

  • P0: GUI wayland + sway (host)
  • P1: File share - (/nix/store)
  • P1: Net sharing - host ethernet
  • P1: RO VMs, mountable folders RO/RW
  • P2: Clipboard sharing, additional command
  • P2: Networking later NAT/bridge / without
  • P2: NixOS flake
  • P2: Add/passthrough USB devices (especially yubikey) (P2 because this is a blocker for me)
  • P3: Integrate with https://github.com/talex5/wayland-proxy-virtwl
  • P3: Randomized shared folders per run
  • P3: Automatically manage VM memory (autobaloon)
  • P4: Add stuff to VM at runtime (like nix-shell -p)
  • P4: Workspaces?
  • P4: "docker cp"
  • P4: Check linux kernel is new enough (5.16+)
  • P5: Nixos hardening

Docs

Currently there is no real user-facing documentation, but developers sometimes share useful information in the docs directory.

About

VixOS is a secure app launcher, inspired by QubesOS and jollheef/appvm.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published