Skip to content

InferNode is a security-focused 64-bit Inferno® OS (ARM64/AMD64) for embedded systems, servers, and AI agents. GPL-free, headless-capable, with 280+ utilities and 9P filesystem protocol. Providing a namespace-based alternative to MCP servers. Namespace-bounded security has been formally verified.

License

Notifications You must be signed in to change notification settings

NERVsystems/infernode

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1,227 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

NERV InferNode

CI Security Analysis OSSF Scorecard OpenSSF Scorecard

64-bit Inferno® OS for embedded systems, servers, and AI agents

InferNode is a lightweight Inferno® OS designed for modern 64-bit systems. Built for efficiency and minimal resource usage, it provides a complete Plan 9-inspired operating environment. A portable GUI (Xenith) may be compiled in, if desired.

Features

  • Lightweight: 15-30 MB RAM, 2-second startup
  • Headless: Console-only operation, no X11 dependency
  • Complete: 630+ utilities, full shell environment
  • Networked: TCP/IP stack, 9P filesystem protocol
  • Portable: Host filesystem access via Plan 9 namespace

Quick Start

# Linux x86_64 (Intel/AMD)
./build-linux-amd64.sh
./emu/Linux/o.emu -r.

# Linux ARM64 (Jetson, Raspberry Pi, etc.)
./build-linux-arm64.sh
./emu/Linux/o.emu -r.

# macOS ARM64 (Apple Silicon)
./emu/MacOSX/o.emu -r.

The -r. option tells the emulator to use the current directory as the Inferno root filesystem (the path is concatenated directly to -r with no space). This lets you run directly from the source tree without installing.

You'll see the ; prompt:

; ls /dis
; pwd
; date

See QUICKSTART.md for details.

GUI Support (Optional)

InferNode supports an optional SDL3 GUI backend with Xenith as the default graphical interface.

Xenith - AI-Native Text Environment

Xenith is an Acme fork optimized for AI agents and AI-human collaboration:

  • 9P Filesystem Interface - Agents interact via file operations, no SDK needed
  • Namespace Security - Capability-based containment for AI agents
  • Observable - All agent activity visible to humans
  • Multimodal - Text and images in the same environment
  • Dark Mode - Modern theming (Catppuccin) with full customization

See docs/XENITH.md for details.

UI Improvements

Xenith addresses several usability issues in traditional Acme:

  • Async File I/O - Text files, images, directories, and saves run in background threads
  • Non-Blocking UI - UI remains responsive during file operations
  • Progressive Display - Text appears incrementally; images show "Loading..." indicator
  • Buffered Channels - Non-blocking sends prevent deadlocks during nested event loops
  • Unicode Input - UTF-8 text entry with Plan 9 latin1 composition (e.g., a'á)
  • Keyboard Handling - Ctrl+letter support, macOS integration, compose sequences

Classic Acme freezes during file operations. On high-latency connections (remote 9P mounts, slow storage) or with large files, this blocks all interaction. The async architecture allows users to open windows, switch focus, or cancel operations while background tasks run.

Building with GUI

# Install SDL3 (macOS)
brew install sdl3 sdl3_ttf

# Build with GUI support
cd emu/MacOSX
mk GUIBACK=sdl3 o.emu

# Run Xenith (AI-native interface)
./o.emu -r../.. xenith

# Run Acme (traditional)
./o.emu -r../.. acme

# Run window manager
./o.emu -r../.. wm/wm

Features:

  • Cross-platform (macOS Metal, Linux Vulkan, Windows D3D)
  • GPU-accelerated rendering
  • High-DPI support (Retina displays)
  • Zero overhead when GUI not used

Default is headless (no SDL dependency). See docs/SDL3-GUI-PLAN.md for details.

Veltro - AI Agent System

Veltro is an AI agent that operates within InferNode's namespace. The namespace IS the capability set — if a tool isn't mounted, it doesn't exist. The caller controls what tools and paths the agent can access.

Quick Start

# Inside Inferno (terminal or Xenith)
mount -A tcp!127.0.0.1!5640 /n/llm       # Mount LLM provider
tools9p read list find search exec &       # Start tool server with chosen tools
veltro "list the files in /appl"           # Single-shot task
repl                                       # Interactive REPL

Single-Shot Mode (veltro)

Runs a task to completion and exits. The agent queries the LLM, invokes tools, feeds results back, and repeats until done.

veltro [-v] [-n maxsteps] "task description"

Interactive REPL (repl)

Conversational agent sessions with ongoing context. Runs in two modes:

  • Xenith mode (automatic when Xenith is running) — Window with tag buttons: Send Clear Reset Delete. Read-only transcript above, user input below.
  • Terminal mode (fallback) — Line-oriented stdin/stdout with veltro> prompt. Commands: /reset, /quit.
repl [-v] [-n maxsteps]

Architecture

Caller                    Agent
  |                         |
  |-- tools9p (grants) ---> /tool/read, /tool/exec, ...
  |-- mount llm9p --------> /n/llm/
  |-- veltro "task" ------> queries LLM, invokes tools, loops
  |                         |
  |                    spawn subagent (NEWNS isolation)
  |                         |-- own LLM session
  |                         |-- subset of tools
  • tools9p serves tools as a 9P filesystem at /tool. Each tool (read, list, find, search, write, edit, exec, spawn, etc.) is a loadable Limbo module.
  • Subagents created via the spawn tool run in isolated namespaces (pctl(NEWNS)) with only the tools and paths the parent grants.
  • Security flows caller-to-callee: the agent cannot self-grant capabilities.

See appl/veltro/SECURITY.md for the full security model.

Use Cases

  • Embedded Systems - Minimal footprint (10-20 MB)
  • Server Applications - Lightweight, efficient
  • AI Agents - Namespace-isolated agents with capability-based security
  • Development - Fast Limbo compilation and testing
  • 9P Services - Filesystem export/import over network

What's Inside

  • Shell - Interactive command environment
  • 630+ Utilities - Standard Unix-like tools
  • Limbo Compiler - Fast compilation of Limbo programs
  • 9P Protocol - Distributed filesystem support
  • Namespace Management - Plan 9 style bind/mount
  • TCP/IP Stack - Full networking capabilities

Performance

  • Memory: 15-30 MB typical usage
  • Startup: 2 seconds cold start
  • CPU: 0-1% idle, efficient under load
  • Footprint: 1 MB emulator + 10 MB runtime

See docs/PERFORMANCE-SPECS.md for benchmarks.

Platforms

All platforms support the Dis interpreter and JIT compiler. Run with emu -c1 to enable JIT (translates Dis bytecode to native code at module load time).

Platform CPU JIT Speedup Notes
AMD64 Linux AMD Ryzen 7 H 255 14.2x Containers, servers, workstations
ARM64 macOS Apple M4 9.6x SDL3 GUI with Metal acceleration
ARM64 Linux Cortex-A78AE (Jetson) 8.3x Jetson AGX, Raspberry Pi 4/5

Speedups are v1 suite (6 benchmarks, best-of-3). Category highlights (AMD64, v2 suite): 36x branch/control, 20x integer arithmetic, 22x memory access, 15x mixed workloads.

Cross-language benchmarks (C, Java, Limbo) in benchmarks/. Full data in docs/BENCHMARKS.md.

Documentation

Building

# Linux x86_64 (Intel/AMD)
./build-linux-amd64.sh

# Linux ARM64
./build-linux-arm64.sh

# macOS ARM64
export PATH="$PWD/MacOSX/arm64/bin:$PATH"
mk install

Development Status

Working

  • Dis Virtual Machine - Interpreter and JIT compiler on all platforms. See docs/arm64-jit/.
  • SDL3 GUI Backend - Cross-platform graphics with Metal/Vulkan/D3D
  • Xenith - AI-native text environment with async I/O
  • Veltro - AI agent system with namespace-based security, interactive REPL, and sub-agent spawning
  • Modern Cryptography - Ed25519 signatures, updated certificate generation and authentication
  • Limbo Test Framework - Unit testing with clickable error addresses
  • All 630+ utilities - Shell, networking, filesystems, development tools
  • GitHub Actions CI - Build verification, security scanning, supply chain scorecard

Roadmap

  • Linux ARM64 SDL3 GUI support
  • Windows port

About

InferNode is a GPL-free Inferno® OS distribution developed by NERV Systems, focused on headless operation and modern 64-bit platforms. It provides a complete Inferno® OS environment optimized for embedded systems, servers, and AI agent applications. InferNode's namespace model provides a capability-based security architecture well-suited for AI agent isolation.

Inspired by the concept of standalone Inferno® environments, InferNode builds on the MIT-licensed Inferno® OS codebase to deliver a lightweight, headless-capable system.

License

MIT License (as per original Inferno® OS).


NERV InferNode - Lightweight Inferno® OS for ARM64 and AMD64

Inferno® is a distributed operating system, originally developed at Bell Labs, but now maintained by trademark owner Vita Nuova®.

About

InferNode is a security-focused 64-bit Inferno® OS (ARM64/AMD64) for embedded systems, servers, and AI agents. GPL-free, headless-capable, with 280+ utilities and 9P filesystem protocol. Providing a namespace-based alternative to MCP servers. Namespace-bounded security has been formally verified.

Topics

Resources

License

Security policy

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Limbo 61.9%
  • C 33.7%
  • Shell 1.2%
  • Yacc 1.1%
  • Pascal 0.7%
  • Makefile 0.4%
  • Other 1.0%