Architecture

Eydos is a Debian base with a Rust-native graphical stack on top, a single permission system shared by every kind of application, and a distribution model where applications arrive as Flatpaks and Android packages rather than as system packages. This section describes each part and how they fit together.

Pages describe the architecture as designed. Where a part is not built yet, a Status note at the top says what exists today.

• Stack

  The compositor, the shell and the toolkit.

• Overview

  The layers of the system, the kinds of application it runs and where the trust boundaries lie.

• Application classes

  Native, Flatpak, Android and local executables: how each is packaged, identified, confined and updated.

• Security model

  Permissions, consent, confinement and code provenance: what protects the user and what does not.

• Android runtime

  How Android packages run on Eydos through rustdroid, and how they meet the permission system.

• Application distribution

  Where applications come from, how they are signed and how the app store installs them.

• System image

  The Debian base, how it is installed, encrypted and updated.