{"id":151407,"date":"2025-12-12T23:11:55","date_gmt":"2025-12-12T21:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/najs-os-minimalistichnyj-distributiv-sobrannyj-s-nulya-i-optimizirovannyj-dlya-kontejnerov"},"modified":"2025-12-12T23:11:55","modified_gmt":"2025-12-12T21:11:55","slug":"najs-os-minimalistichnyj-distributiv-sobrannyj-s-nulya-i-optimizirovannyj-dlya-kontejnerov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/najs-os-minimalistichnyj-distributiv-sobrannyj-s-nulya-i-optimizirovannyj-dlya-kontejnerov","title":{"rendered":"NICE.OS \u2014 a minimalist distribution built from scratch and optimized for containers","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

The NAIS.OS project develops an independent Linux distribution, built from the ground up from source code and supporting its own package base, without borrowing package build scripts from other distributions. The project develops its own tools, patch set, and build policy. An ISO image (603 MB) is available for download, intended for installation on virtual machines (KVM, Proxmox, VMware, VirtualBox, etc.). <\/p>\n

The distribution is freely distributed for both private and commercial use without restrictions on the number of devices. The license agreement prohibits \"modifying, adapting, translating, decompiling, disassembling, or otherwise attempting to obtain the source code, except in cases explicitly permitted by current legislation or the terms of licenses of open components.\" It is also prohibited to \"transfer, sell, lease, provide for use, publish, or otherwise distribute the software product without the written consent of the copyright holder.\" <\/p>\n

\tNAIS.OS is positioned as a server system with a long-term support (LTS) focus, optimized for of virtual machines<\/a>, cloud systems, and edge nodes. The kernel, compilers, base libraries, and cryptographic stack are all assembled according to unified reproducibility and security requirements. The project is included in the registry of Russian software (registration means it can meet the requirements for \"domestic software\" in the government segment and with some corporate clients). <\/p>\n

Two approaches are supported: the atomically updatable (immutable based on OSTree) and the classic RPM (dnf\/dnf5). In the atomic variant, the \/usr partition is mounted in read-only mode, updates are applied in full to the entire system, and Btrfs snapshots are used for rolling back failed updates; versions of the base system are treated as artifacts that can be managed and rolled out across nodes via the OSTree repository. The classic RPM variant uses package management through dnf and dnf5, supports manual and automatic updates, and provides a console installer \"niceos-installer.\" <\/p>\n

The distribution offers a minimal and predictable base for containers, with no graphical environment; only basic services (systemd, networking utilities, SSH, firewall using nftables\/firewalld, basic monitoring utilities) are running, and all application software is meant to be installed in containers (Docker\/Podman\/Kubernetes) or as separate services on top of the base. <\/p>\n

Official container images are available on Docker Hub. These images are built on the same minimal NiceOS Base, operate under a non-privileged user, contain embedded SBOMs (CycloneDX\/SPDX) and vulnerability reports (Trivy, Grype), and are equipped with built-in reports for offline auditing right inside the container. <\/p>\n

There is support for domestic cryptography (a compiled and tested stack for those who need GOST requirements and audits): <\/p>\n