v0.4.0 x86_64 & i686 Rust • C99 • ASM GPL-2.0

Keira Kernel

A freestanding bare metal kernel for x86_64 and i686, written from scratch in Rust, C99, and Assembly and booting via Multiboot2.

Hyper modular with 12 crates, 58.0k plus LOC, and 13 documentation domains. Preemptive scheduling, 4 level paging, multi core SMP, and Ring 3 isolation with 81 syscall vectors, Syzkaller-Lite fuzzing, and 76 built in commands.

View on GitHub Quick Start

$ make test-all

dual architecture build verification

qemu - keira

Educational project by Moh. Ananda Firmansyah Putra — built from scratch as a systems learning journey.

58.0kLOC total

46.8kRust crates

12crates

81syscalls

13doc domains

2archs x86_64 & i686

Architecture

Hyper modular, not monolithic

Six focused subsystems with explicit crate boundaries and documented Safety contracts. Each crate has a dedicated docs domain.

◈

Memory & Task • crates/mem & task

Memory and Scheduling

Bitmap PMM, 4 level paging, heap, DMA, and swap. Preemptive scheduler with cgroups and POSIX signals and documented scheduler tick.

PMM • VMM • Swap • docs/memory

⬡

Security • crates/crypto & net

Network and Security

TCP/IP with native TLS 1.3, stateful firewall, in-kernel eBPF VM, TPM 2.0 PCRs, Seccomp sandboxing, and MAC Type Enforcement. AES GCM and Curve25519.

TLS 1.3 • eBPF • TPM 2.0 • MAC • Seccomp

▦

Storage • crates/fs & io

Filesystem

VFS with FAT12/16/32, bare-metal EXT4 extent tree parser, USTAR initrd, LVM, and Software RAID 0/1 with 16 slot LRU sector cache.

VFS • FAT • EXT4 • LVM • RAID • docs/fs

⬢

Hardware • crates/arch & io

Drivers & Virtualization

VGA and VBE, UART, PCI/PCIe with MSI, AHCI, NVMe, USB, KVM virtualization, LKM loader, and Intel e1000 with Virtio net. Multi core SMP topology and telemetry.

VGA • AHCI • NVMe • e1000 • KVM • LKM • docs/drivers

⬔

Core • crates/syscall

81 Syscalls

Validated user copying, Ring 3 isolation, ELF loader, Syzkaller-Lite fuzzing defense, and POSIX compatible dispatcher.

SYS_PUTC to SYS_DUP2 • docs/syscall

✦

DevEx • user & shell

Toolchain and Shell

In kernel C compiler kcc.elf, freestanding libc.a, shell with 76 built in commands, ksvc background daemons, and kvi editor for native development on bare metal.

kcc • SDK • ksvc • docs/userland and shell

Live Evidence

Real QEMU sessions

Not mockups — direct captures from Keira running on QEMU. Swipe or drag horizontally to view all captures.

Hardware telemetry and thermals — Telemetry and Thermals

VFS storage and redirection — VFS Storage

Process lifecycle and pipes — Process Lifecycle

Native KCC compiler and Ring 3 — Native KCC Compiler

Networking security and crypto — Networking and Crypto

Dual architecture i686 protected mode — i686 Protected Mode

↔ Swipe horizontally to explore 7 live captures

Documentation

13 documentation domains

Start from the docs map and dive into any subsystem. Every crate has a matching guide.

journey/6 milestones kernel/boot and HAL memory/PMM and VMM task/scheduler syscall/81 vectors ipc/pipes, epoll, mqueue fs/VFS and FAT/EXT4 drivers/VGA, NVMe, e1000 net/TCP/IP and TLS 1.3 crypto/TPM 2.0, Seccomp, MAC shell/76 built-in cmds userland/KCC, libc.a & SDK contributing/setup and style

Background

Built as an educational journey

Keira is an independent project by Moh. Ananda Firmansyah Putra, Systems Architect and Certified Security Researcher specializing in low level systems programming and post quantum cryptography. It was created to learn low-level systems and kernel internals from first principles and to share a reproducible, well documented bare metal kernel with the community.

Open source under GPL 2.0 only. Designed for study, experimentation, and collaboration.

Quick Start

Build in seconds

Dual arch ISO and disk images in one command. Tested on QEMU.

bash — quick start

git clone https://github.com/mrvlous/keira
cd keira
make test-all # x86_64 and i686
make run # QEMU

Copy with one click — code block is interactive

Source • README • GPL 2.0 only