Role based Enterprise OS
Ruckos Linux
Highly scalable and secure Linux foundation for enterprise workloads.
- No SSH
- No package manager
- Highly Scalable
- eBPF security
- Runs anywhere
Role based Enterprise OS
Highly scalable and secure Linux foundation for enterprise workloads.
Runs anywhere. Policy enforced, observable, from the kernel up, Ruckos Linux is a minimal, immutable OS that runs enterprise workloads.
Ruckos boots from a read-only image; nothing to patch, nothing to drift, nothing open to attack.
Built for exactly one job, it leaves out the configuration sprawl, patch cycles, and attack surface that come with a general-purpose distro. Minimal by design, practical in production, and it runs anywhere. Linux kernel does.
eBPF lets small, verified programs attach to kernel hook points — syscalls, sockets, the network path — and make decisions there. No kernel module to load, no agent in every pod, no proxy to hop through.
Policy is evaluated at the hook point — the socket, the syscall, the packet — so the decision is made before the action completes, not reported after.
The kernel verifier proves every program terminates and stays in bounds before it attaches. A bad program is rejected; it cannot crash the node.
Ruckos ships a pure nftables + eBPF kernel. Cilium replaces kube-proxy entirely, so there is no iptables chain to walk and no per-pod proxy to pay for.
Raw kernel events are joined to pod, namespace, and label metadata in user space, so every policy and every event speaks Kubernetes, not PIDs and IPs.
Power on and Ruckos Linux installs to disk, then boots into a hardened, read-only kernel.
Provision it with rctl.exe or lighthouse — same declarative API, cluster in under 5 minutes.
Install to bare metal or install to a VM.
rctl assign etcd, control-plane and worker roles.
rctl write-config renders the cluster manifest from site.yaml.
rctl bootstrap forms etcd and the control plane, then rolls out the platform.