App Sandbox enables you to describe how your app interacts with the system. The system then grants your app the access it needs to get its job done, and no more. App Sandbox provides a last line of defense against the theft, corruption, or deletion of user data if an attacker successfully exploits security holes in your app or the frameworks it is linked against.

— Apple About App Sandbox

Docker is a tool that can package an application and its dependencies in a virtual container that can run on any Linux server," Lyman explained.

— 451 Research

• Fast: Unlike a virtual machine, a container does not need to boot the operating system kernel, so containers can be created in less than a second.

• Near-native performance: Since container-based virtualization adds little or no overhead to the host machine, container-based virtualization has near-native performance

Containers Are the Next Package Manager

— CoreOS CTO

• Kernel
• OS
• Frameworks & Dependencies
  • Java
  • Python
  • X11
  • ...
• Application

Package Manager

A package manager or package management system is a collection of software tools that automates the process of installing, upgrading, configuring, and removing computer programs for a computer's operating system in a consistent manner.

A stateless server is a server that treats each request as an independent transaction that is unrelated to any previous request.

— Wikipedia

• Minimal Gentoo
• PXE, OpenStack, Azure, AWS, GCE, Vagrant
• Systemd, btrfs
• Read-only rootfs (writable overlay)
• Automatic updates by 2 partitions

Latice OS

├── Compose
├── Data         <-- Your project here
├── Workspace Manger
├── System Containers
│   ├── API
│   ├── Dbus
│   ├── Desktop Enviroment
│   └── Xorg
└── Others...

A simple setup to deploy Lattice GUI environment.

# docker-compose create
# docker-compose up -d

OR

# docker run -d \
   -v /var/run/docker.sock:/var/run/docker.sock \
   --name latticeos gitai/latticeos

Nodejs + VUE + VS Code

Latice OS

├── Compose
├── Data         <-- Your project here
├── Workspace Manger
├── System Containers
│   ├── API
│   ├── Dbus
│   ├── Desktop Enviroment
│   └── Xorg
├── VUE
└── VSCode

Golang + VS Code

Latice OS

├── Compose
├── Data         <-- Your project here
├── Workspace Manger
├── System Containers
│   ├── API
│   ├── Dbus
│   ├── Desktop Enviroment
│   └── Xorg
├── Golang
└── VSCode

• Runtime Container

• Union File System

• Remote Volume

• Active/Pssive Kernel Partition

• Fleet (OS only)

• More Workspaces

• Promotion In Distance Education

• Minimal Boot Media

• Cloud Education Solutions