Bare metal Go kernel for Linux binaries
Building Linux kernel on macOS natively
earendil-works/gondolin
Experimental Linux microvm setup with a TypeScript Control Plane as Agent Sandbox
Thorsten Ball - Why threads can't fork
There is an interesting thread on the Go issue tracker about daemonizing processes. Most of the thread is not about daemonizing processes though, but more about why Go has no Fork() function which you can call directly in your code. The first time I read through it I was wondering and saying to myself: “Yeah, why is there no Fork()? It surely can’t be that hard to implement.” After all you can already call system calls with the syscall package. As I read more and more I realized that the problem is not implementing Fork() per se, but rather implementing Fork() to work safely in a multi-threaded environment, which most Go programs are. So I tried to find out why.
nix-community/nixos-apple-silicon
Resources to install NixOS bare metal on Apple Silicon Macs [maintainers=@tpwrules,@flokli,@yuyuyureka]
I can haz smoller NixOS ISOs? | natkr's ramblings
In which I painstakingly remove functionality from a Linux live image. Like a normal person.
linuxkit/linuxkit
A toolkit for building secure, portable and lean operating systems for containers
GopherCon 2017: A Go Programmer's Guide to Syscalls - Liz Rice
We rebuilt the Linux microVM stack on Apple Silicon
Firecracker needs KVM and therefore a Linux host, and the image tooling around it needs loop mounts and Linux userland. We rebuilt the stack on Apple's Virtualization.framework to boot the same OCI images as microVMs on macOS and on Linux.
The Linux kernel is just a program
Most books and courses introduce Linux through shell commands, leaving the kernel as a mysterious black box doing magic behind the scenes. In this post, we will run some experiments to demystify it: the Linux kernel is just a binary that you can build and run.
[oss-security] Fwd: Protecting against CVE-2026-98432 when using Go programs [LWN.net]
Linux kernel will support $ORIGIN, sort of
For some reason, during TacoSprint 2026 I decided to see if we could tackle relocatable binaries in Nix.
12 eBPF-Powered CLI Utilities That Every Modern Linux Sysadmin Should Master
Classic Linux tools are always there, but eBPF is the natural upgrade as it looks directly in the kernel. Once you start using these tools, it’s hard to imagine managing Linux systems without them.
Tock OS A Rust Based Open Platform for Transparent and Secure Root of Trust Devices
proposal: cmd/cgo: cgo without a C toolchain · Issue #81450 · golang/go
Cgo Without C Toolchain Background Cgo provides a mechanism to incorporate C code into Go programs. Currently, it requires a C toolchain to be present on the host system whenever building code with...