System Plane (NetBSD)

The native environment utilizing NetBSD for robust networking and classic BSD semantics.

NetBSD Guest Environment

For systems prioritizing legendary portability and clean architectural design, OS.1 offers a NetBSD System Plane. By utilizing NetBSD's `veriexec` for strict MAC sandboxing and `kauth` for granular authority, the system plane ensures impenetrable defenses even for untrusted legacy binaries.

NETBSD-BASE & BSD-LIBC

The standard Network Berkley Software Distribution base system paired with the highly audited BSD C library.

RC.D Initialization

Classic `rc.conf` and `rc.d` startup semantics providing declarative network and daemon configurations.

# /etc/rc.conf
rc_configured=YES
dhcpcd=YES
sshd=NO
npf=YES

KAUTH & VERIEXEC

Kernel Authorization framework combined with verified execution capabilities to enforce strict Mandatory Access Control on the filesystem level.

# /etc/signatures
/bin/sh sha256 0a1b2c3d...
/sbin/init sha256 4f5e6d7c...

Utilities & Networking

  • NPF — network packet filter
  • OPENDOAS — privilege management
  • CHRONY — secure NTP via pkgsrc
  • PGKIN — binary package manager
  • NETBSD.UEFI — NetBSD UEFI bootloader
  • BSD-UTILS — Standard BSD userland tools

Specification & Architecture

0. NetBSD Architecture

The NetBSD guest environment provides authentic BSD userland tools, Veriexec signature checking, and Kauth mandatory access control:

NETBSD SPEC

NETBSD CODE POLICY

1. VirtIO & Hypervisor Handoff

When running as a System Plane image in Synrc VE OS.1, NetBSD boots via TianoCore EDK II, Multiboot2, or native NetBSD Bootloader inside raw seL4 Protection Domains (PDs). Storage and network devices route through VirtIO-Block (ld_virtio) and VirtIO-Net (vioif) drivers under Kauth capability authorization.