Skip to main content

The Immutable OS to Operate at Scale.

Kairos is a Linux Framework managing the full lifecycle of machines — from installation to upgrades and recovery. It makes large numbers of machines predictable, reproducible, and easy to operate over time. Kairos brings strong operational guarantees to Linux — from the edge to the datacenter.

Kairos
CNCF logoSandbox Project

The Cloud Native OS forEdgeBaremetalPublic CloudVMs

Download

Kairos comes with Hadron LinuxHadron logo

What makes Kairos unique

Kairos is the only immutable Linux framework in this category that can run across Linux distributions via BYOI while keeping one repeatable lifecycle model.

What's Inside

Under the hood, Kairos uses OCI image-based deployments, immutable root filesystems, and atomic upgrades distributed via image registries — without locking you to a specific Linux or Kubernetes distribution.

* Optional components, enabled only when selected.

Kairos vs Others

Kairos combines the operational model of an immutable image-based OS with the openness of a distro-agnostic build system and the ergonomics of Kubernetes-native lifecycle management.

CapabilityKairosConfiguration Management SystemsOther Special-Purpose OSes
Immutable root filesystemYesNoYes
Atomic image upgrades / rollbackYesNoYes
Reuse existing Linux imagesYesYes*No +
Persistent config layering after installYesYesYes ^
Kubernetes-native OS lifecycle managementYesNoPartial ~
Choice of Kubernetes distroYesYesNo #

* Yes for CMS because they can manage many distros and apply ongoing config, but they do it by mutating the running host rather than by shipping a new immutable machine image. Puppet and Salt describe keeping systems in a predetermined state by reading actual state and changing the target system in place. Ansible is documented as configuring most operating systems and deploying software, and Red Hat describes it as agentless automation over SSH/APIs.

+ Some image-based systems such as bootc support custom bootable images, but they require adopting the bootc-compatible image model. This is different from reusing an existing distro image pipeline directly under the same assumptions.

^ Support varies by system. Talos supports updating machine configuration on running nodes, and Bottlerocket has a persistent API/settings model. Flatcar and Fedora CoreOS primarily rely on Ignition-style first-boot provisioning rather than the same kind of post-install layered config workflow.

~ Bottlerocket provides Kubernetes-coordinated updates via Brupop, and Talos provides strong day-2 lifecycle operations through talosctl, but these approaches do not generally expose the same breadth of operator-driven OS lifecycle management through Kubernetes resources as Kairos.

# Some SPOS offer different prebuilt variants or orchestrator targets, but that is not the same as choosing which Kubernetes distribution to run on the same operating system model. Bottlerocket, for example, ships environment-specific variants rather than a bring-your-own Kubernetes distro approach.

Smaller footprint, stronger baseline security, better operational consistency

Technically, Hadron provides a purpose-built minimal Linux base optimized for immutable deployments, secure boot paths, and efficient image distribution in modern cloud-native operations.

Hadron Linux

We are a Cloud Native Computing Foundation sandbox project.

CNCF

The Linux Foundation (TLF) has registered trademarks and uses trademarks. For a list of TLF trademarks, see Trademark Usage.

Enterprise support

Need a hand? For enterprise support, get in touch with companies ready to help you tackle the toughest challenges.

Do you offer Enterprise Support for Kairos? Reach out so we can add you to the list.