- Add sixth capability word (bits6), STOCK_V6, FEATURE6_* in bare-os-protocol; seed caps, channel.js, seed-rpc-methods registry, replication/handshake fields - Booter: Wave 6 /proc JSON surfaces, ctx 1.15.0, Pear/DHT hooks, subprocess snapshot v3, audit v3, extension registry v3 edges, hrpc stub, worker/sandbox - Kernel: boot.policy v6 enforcement (requireFeatureBits6, booter semver, ctx min, extension deny/hash pins, offline LKG strict); example policy + seeder kernel sync - Schemas: boot.policy v6, OTel JSONL v3 + example; validate-example-schemas pairs - CI: verify-kernel-roadmap-wave6 (100 rows), verify-pear-no-static-node-import, extend wave3/compat-matrix/ctx verifiers; pretest wiring - Docs: ADR 001 v6, kernel-capabilities-index Word 6, kernel-extensions, feature-roadmap Wave 6 table, compatibility matrix, handbook ch.11, developer-guide (privacy, bare-boot alignment, bare-fetch), http-curl, scripts/README, DOCUMENTATION - Tests: booter /proc readdir expectations for new bare_os_* nodes
kernel — system image sources
Files in this directory are read from disk by the seeder (or copied into packages/bare-os-seeder/kernel/ for Pear) and written into the system Hyperdrive with no temporary directory on the host.
This README.md file only documents the tree layout in the repository; the seeder does not install it as /README.md on the image (so the guest root directory stays free of repo docs).
Staging map (seeder)
| Source | Drive path |
|---|---|
init.js |
/boot/init.js |
bin/<name> |
/bin/<name> |
etc/... |
/etc/... |
share/man/... |
/share/man/... |
lib/bare/... |
/lib/bare/... (optional ctx.bare bundles; see bare-os-bare-libs) |
| Any other file | /<relative path> |
README.md (this file) |
(skipped — not copied to /README.md) |
Contents
init.js— Kernel entry: must defineasync function start(ctx). Boot order:/etc/os-release→/etc/motd→ optional/etc/bare-os/rc.profile.<profile>(profile fromBARE_OS_BOOT_PROFILEor first line of/etc/bare-os/profile; the booter mirrors the resolved name inctx.env.BARE_OS_BOOT_PROFILE_RESOLVEDand/run/bare-os/boot_profile) →/etc/bare-os/rc→/etc/bare-os/rc.d/*(sorted; digit-prefixed names only; skip dotfiles,*~,README*,*.md; optionalBARE_OS_RC_D_SKIPcomma list andprefix*patterns) → optional/etc/bare-os/rc.local→/etc/bare-os/kernel.d/*(same rules asrc.d) → banner → whenBARE_OS_SKIP_REPL, optional onboot lines fromBARE_OS_ONBOOTor/etc/bare-os/onboot→readLine/execLineloop. BootexecLineerrors in trusted snippets are logged; withBARE_OS_BOOT_STRICT=1ortrue, the first throw callsrequestBooterExit(1)and stops later boot phases. Custom kernels may callctx.registerKernelShutdownHook(fn)before initd disposers; usectx.bareOsRuntimeCapsfor limits, pseudo paths, andfeatures(developer-guide/02-the-context-object.md).bin/— Tier-1 utilities built by bare-os-coreutils (~113 commands; list inpackages/bare-os-coreutils/lib/commands.mjs). Each file isruntime.js+ optional preamble (lib/md5.jsformd5sum,lib/*-engine.jsforsed/awk,jq-engine.js,lib/man-render.js,lib/edit-*.jsforedit/nano, lscolors forls/dircolors, …) +async function run(ctx, argv)(no ESMimportinsrc/)./bin/nanoduplicates/bin/editfor familiarity; the shell’s defaultnano→editalias uses theeditcommand name after expansion.dir/vdirinvokelsviactx.runBinCommand.lib/bare/— Optional IIFE bundles +manifest.jsonforctx.baredrive merge, built by bare-os-bare-libs. Same trust model asbin/(trusted seeded image).share/man/man.json— Merged manual database for/bin/man(built bybare-os-coreutils; see handbook ch.10).etc/os-release— Static OS metadata (NAME,VERSION, …).etc/motd— Optional message printed afteros-release(distributors can customize).etc/bare-os/banneror/etc/issue— If present on the system drive, the default kernel prints one of these instead of the built-in session hint (unlessBARE_OS_SKIP_REPLshortens the banner). SetBARE_OS_BOOT_TRACE=1ortruefor[boot] phase: Nmslines on stderr,jsonfor{"phase":"…","ms":n}per phase, orndjsonfor machine-readable lines withsessionId. Recovery:BARE_OS_BOOT_MINIMAL, granularBARE_OS_BOOT_SKIP, optionalBARE_OS_KERNEL_SELFTEST(TAP viaBARE_OS_SELFTEST_FORMAT=tap; includes/proc/bare_os_resources//proc/bare_os_featureschecks), readiness viactx.bareOsPublishBootReady→/run/bare-os/readyand/run/bare-os/boot.json(phasesfrom the stock kernel plusbooterPhasesfrom the booter — see developer guide ch.2).etc/bare-os/rc— Optional boot snippet: oneexecLineper non-comment line (trusted).etc/bare-os/rc.d/— Optional extra snippets (basename must start with a digit), same line rules, run afterrcin filename order. Human-oriented notes live in.README(a dotfile so legacyinit.jsnever executes it).
Editing workflow
- Change sources under
kernel/orpackages/bare-os-coreutils/src/. - Run
npm run build -w bare-os-coreutilsto refreshkernel/bin/*. - Run
npm run build -w bare-os-bare-libswhenpackages/bare-os-booter/lib/bare-module-manifest.jsonor bundle entries change. - Run seeder again to re-stage the drive (or use a fresh Corestore for a clean image).
Pear bundles use the vendored tree under packages/bare-os-seeder/kernel/; keep it in sync by running the same builds before pear stage. npm test runs scripts/verify-kernel-seeder-parity.mjs, scripts/verify-ctx-api-feature-bits.mjs, and scripts/validate-example-schemas.mjs (after bare-os-coreutils and bare-os-bare-libs builds) so the two trees match byte-for-byte, ctx semver / feature words stay wired, example JSON matches docs/schemas/, and every kernel/bin/* file contains the BARE_OS_BIN_API pragma (coreutils runtime.js and hand-written stubs such as systemctl / journalctl).
Optional system image examples: etc/bare-os/boot.allow.example (copy to boot.allow when using host BARE_OS_BOOT_ALLOWLIST=1), etc/bare-os/boot.policy.example.json (install as boot.policy.json when using BARE_OS_BOOT_POLICY=1; v2 fields maxExecLineDepth, denyEnvKeys, requireProcNodes; v3 requireFeatureBits2, requireFeatureBits3, allowedPearIpcChannels, denyVfsPrefixes, maxInitdRestartsPerUnit; v4 requireFeatureBits4, denyExecLineBuiltins, allowedCtxMethods; JSON Schema: docs/schemas/boot.policy.schema.json), etc/bare-os/kernel.extensions.registry.example.json (shape for /proc/bare_os/extensions.json schema 2), etc/bare-os/boot-trace-line.example.json and etc/bare-os/telemetry-ndjson.example.json (shape checks for CI), etc/bare-os/rc.profile.full (sample full profile referenced from profile), etc/bare-os/crontab.example (system-wide cron lines merged ahead of user ~/.crontab), etc/bare-os/timers/*.timer.example (copy to ~/.config/bare-os/timers/*.timer for OnCalendar=, EveryMs=, or OnInactiveSec= jobs). kernel.ext.d scripts register into /proc/bare_os/extensions.json when the booter provides ctx.bareOsRegisterKernelExtensionRecord.