GEISA will use Linux as the core operating environment for applications. The operating system decision is based, in part, on approach to Application Isolation. If, for example, we used a virtual machine approach, we could potentially use a bare-metal hypervisor for the base operating system, with Linux virtual machines running on top. Given GEISA’s Hardware Requirements, the most efficient approach will be to use light weight containers in which applications can reuse as much of the base operating system as possible.
GEISA will use a Linux 6.x kernel (exact version TBD).
The GEISA kernel will be built to minimize attack surface and size. This means removing all unnecessary components and not shipping with extraneous modules.
TBD: Should the GEISA kernel support loadable modules at all, or should each kernel be specific to a particular hardware platform?
TBD: Does GEISA need real-time support?