asterinas

Built entirely in Rust, it eliminates entire classes of vulnerabilities like buffer overflows and use-after-free errors that are common in C-based kernels, as highlighted in its focus on a minimal trusted codebase.

Combines monolithic-kernel performance with microkernel-inspired separation, confining unsafe Rust code to a small, auditable framework (OSTD) while keeping the rest in safe Rust for enhanced security.

Ships with OSDK (OS Development Kit), which simplifies kernel building, testing, and running, making development as fluid as writing standard Rust applications and reducing traditional OS engineering friction.

Supports 230+ Linux system calls, enabling many existing applications to run without modification, as demonstrated by the experimental Asterinas NixOS distribution for early adopters.