Zainium OS launches as independent immutable Linux distro with COSMIC desktop

Zainium OS is a newly announced independent Linux distribution built around an immutable base system called syshub, designed to separate core operating system files from applications and user modifications. The distribution employs a layered filesystem architecture using OverlayFS, stores the OS beneath /overlayer instead of conventional root directories, and uses the COSMIC desktop environment with systemd as its init system.

The project targets x86_64 platforms with a rolling-release model managed by its own zex package manager. Notable technical characteristics include atomic upgrades that are staged and applied at next boot, rollback functionality with journalled operations, simultaneous musl and glibc application support, and multiple security mechanisms including fs-verity, AppArmor, Landlock, Yama, kernel lockdown, and signed kernel modules. A sys_resolver compatibility layer helps applications expecting traditional Linux filesystem paths, while an elevate privilege management tool restricts destructive operations against protected system files.

Architecture and filesystem design

• Immutable base system (syshub): The core OS is protected from modification by installed applications, with the base system stored under /overlayer rather than conventional Linux root directories.
• OverlayFS layering: The distribution combines its immutable system base with userland through OverlayFS, enabling separation between protected core files and user modifications.
• Atomic upgrade mechanism: System upgrades are verified, staged, and applied during the next boot cycle, with rollback capability and journalled operations to assist recovery from failed updates.
• Dual C library support: musl serves as the primary C library while the system accommodates glibc-dependent applications without library conflicts, broadening software compatibility.
• Security stack: The distribution implements fs-verity, AppArmor, Landlock, Yama, kernel lockdown, and signed kernel modules, plus an elevate tool for privilege management and independent boot of the protected base for recovery.

Why it matters

Zainium OS enters an increasingly crowded immutable distribution space alongside Fedora Silverblue, openSUSE MicroOS, and Vanilla OS, but distinguishes itself through independent development rather than deriving from an existing major distribution. Its dual musl/glibc support and sys_resolver compatibility layer address practical barriers that have limited musl-based distributions on the desktop, while the choice of System76's Rust-based COSMIC desktop signals continued momentum for that emerging environment outside System76's own Pop!_OS.