Nexus OS forges deterministic operating systems from signed recipes: from sensors and robots to fleets, satellites, and industrial edge. Every artifact has provenance. Every driver is isolated. Every boot is auditable.
curl -fsSL https://get.nexus-os.org | sh && nexus run --profile=micro --demo
Whether you are building a robot controller, a satellite image, a secure gateway, or an industrial edge node — you define the recipe, the Forge builds the proof.
Deterministic control loops, sensor fusion, signed robot skills.
SCADA/energy control with auditability and TSN discipline.
Radiation-aware, no-heap, watchdog-first satellite builds.
Deterministic medical runtime with syscall-level audit trail.
You write what you need. The Forge resolves, builds, signs, and proves. No hand-rolled images. No "it works on my machine." Only deterministic, reproducible systems.
Write a KDL manifest declaring your edition, modules, and constraints.
Resolve dependencies, graft drivers, compile, and hash the output.
Ed25519 signature + Variant-CID + ProvChain attestation.
Flash to device, register to fleet, prove every bit at boot.
A recipe is a KDL manifest that declares your edition, target architecture, kernel configuration, modules, and runtime constraints.
The Forge resolves dependencies, validates constraints, compiles, hashes, and signs. You get a bootable image with a complete provenance chain.
Raw disk image ready to flash to SD card, NVMe, or network boot. Partitioned, formatted, and populated.
Self-contained NIP package with all dependencies bundled. Installable on any Nexus system.
Complete dependency tree with BLAKE3 inputs, build flags, and license summary. Supply-chain transparency.
Cryptographic attestation of the entire build: source → compiler → artifact. Anyone can verify.
App stores solve installation. Nexus solves trust. Linux real-time solves latency. Nexus solves survivability. Device portals show what is installed. Nexus proves what is running.
Every build, boot, and mutation is logged to an append-only ledger. The entire chain from source to runtime is auditable and tamper-evident.
Content-addressed packages: if the hash matches, the binary is identical. Rebuild anywhere, verify everywhere. No trust required — only math.
No root. No god-mode. Every fiber holds only what it needs. Pledge/unveil enforced at hardware level. A compromised driver cannot touch the kernel.
From individual hackers to defence contractors — every builder gets the same architecture, with support and guarantees scaled to their mission.
| Feature | Open Nexus Free |
Nexus Foundry $49 / build |
Nexus Citadel Contact |
|---|---|---|---|
| Stream | Rolling | Quarterly freeze | 10-year LTS |
| Recipe builder | CLI | Visual + CLI | On-prem visual |
| Build runners | Local only | Cloud + local | Cloud + on-prem |
| Signed output | Self-sign | Foundation sign | Foundation + audit |
| Indemnity | — | — | Included |
| Air-gap | Manual | Export bundle | Silo factory |
Nexus Silo — air-gapped government/critical infrastructure factory. Contact for classified environments.
Each edition enforces hard technical constraints at build time. You cannot accidentally ship a network stack to orbit.
Deterministic control loops, sensor fusion, signed robot skills.
SCADA/energy control with auditability and TSN discipline.
Automotive image factory with lockstep and safety constraints.
Radiation-aware, no-heap, watchdog-first aerospace builds.
Deterministic medical runtime with syscall-level audit trail.
Standard enterprise server. SMP enabled. Full TCP/IP stack.
Nexus is a complete sovereign computing ecosystem: package catalog, developer SDK, partner network, and fleet management — all built on cryptographic truth, not corporate trust.
Browse signed packages and recipes. Inspect the source. Rebuild the binary. Every package carries a Variant-CID and a provenance proof.
Browse Packages →Build proprietary NPKs without source disclosure. Your code, your IP. The SDK does not infect your work with GPL or copyleft.
Get the SDK →Hardware vendors, recipe contributors, and commercial vertical integrators building the sovereign ecosystem together.
Become a Partner →We are not looking for people who want to use an operating system. We are looking for people who want to build one. Kernel hackers. Systems programmers. Hardware engineers. Anyone who looked at the state of computing and thought: we can do better than this.