Zero-OS

The operating system a node boots into on a decentralised cloud — a lightweight userland for distributed cloud nodes, built to accept scheduled work and report on it. Source on GitHub.

Skills

Go · Linux · Networking · Virtualization · NFTables · RPC

Contributions

• Migrated the node networking stack from macvlan to veth and network namespaces across the fleet, staged with a rollback at every step so tenant workloads stayed online through the cutover.
• Hardened multi-tenant isolation with NFTables rule sets scoping guest-VM egress, closing a class of cross-tenant exposure without breaking public-service reachability.
• Killed a recurring namespace-leak problem with a cleanup worker that reclaims orphaned netns and veth pairs on long-running nodes.
• Shipped a node health-check service exposing CPU, memory, network and disk SLIs over RPC for fleet-wide triage.
• Built a Lens-style RPC inspector that runs on-demand VM, network and storage probes against tenant workloads.
• Built a local image-validation harness that boots rootfs images under cloud-hypervisor before they reach the fleet.
• Built an S3 backend for the content-addressable filesystem that distributes images across nodes.