From Bare Metal to Userspace: Ginux Pivots to Become Linux's Customizable Gatekeeper

Ginux, a project originally built as an independent Rust kernel that could boot via UEFI and run a full Linux userspace, has completed its research phase and pivoted to become a 'userspace kernel.' Instead of competing with the Linux kernel, it now runs as an ordinary Linux process, acting as a configurable intermediary. Its core purpose is to place an explicit, versioned contract between managed, isolated Linux compatibility instances and the host kernel, allowing for deliberate control over what system calls an instance can perform.

The project's founder, Greg Kurtzer, explains that while the experiment proved an AI coding agent could construct a working kernel, Linux's true value lies in its ecosystem, stable interface, and decades of compatibility. Ginux now leverages this by sitting above Linux, deciding whether to emulate, mediate, or deny each syscall before it reaches the host. This allows administrators to deliberately break the full Linux ABI guarantee for each instance, granting only the specific capabilities a workload needs, in a versioned and reviewable way. The takeaway is a novel approach to workload isolation that trades universal compatibility for precise, auditable security and control.