Complete rewrite of kappa from a sequential build tool into a
system-agnostic package manager with runtime init switching.
Core additions:
- 5 init system backends: systemd, openrc, s6, runit, dinit
(service file generation, enable/disable, init_paths)
- 2 bootloader backends: grub, limine (config generation, fallback entries)
- Parallel scheduler with worker pool, depth-based priority (Beta/Alpha/Zeta),
atomic claiming, dependency tracking, deduplication, and failure propagation
- Init-switch impact analysis: only rebuild packages using ${enabledinit}
- Init-agnostic service definitions: flat NamedService blocks replace
per-init nesting
- Package conflicts: mutual incompatibility detection in resolver
- System groups: init-agnostic group creation in DSL
- Init-agnostic hostname/timezone: direct /etc/hostname and /etc/localtime writes
- Source tarball caching at /kappa/cache/ with atomic write-then-rename
- Package recipe caching with remote fetching and version comparison
- remotes = [...] block in system config for package repositories
- Auto-fetch: rebuild resolves missing packages from remotes
- uninstall phase in package definitions
- ${enabledinit} eval variable for init-conditional builds
- Shared util module (to_lower, shell_escape)
- 54 integration tests across two shell test suites
- Comprehensive README and CONTRIBUTING guide
Bug fixes from review:
- CRITICAL: Replace std::system() with fork+execvp (command injection)
- CRITICAL: Fix scheduler deadlock on successful completion
- CRITICAL: Fix rebuild init/kernel/bootloader change detection
- HIGH: Fix path traversal via unsanitized package names in cache
- HIGH: Fix TOCTOU race in cache write with atomic rename
- HIGH: Fix formatter dropping remotes/imports blocks
- HIGH: Fix formatter stripping empty-string assert values
- HIGH: Fix formatter non-idempotent output (sorted key iteration)
- HIGH: Populate ${enabledinit} from boot.init in BuildStep
- MEDIUM: Fix data race on non-atomic scheduler stop flag
- MEDIUM: Fix compute_depths() traversal direction
- MEDIUM: Add runit to doctor supported-init warning
- MEDIUM: Extract to_lower/shell_escape to shared kappa::util
- MEDIUM: Consolidate generator declarations in headers
kappa
Anywhere, any init, anytime.
A declarative, source-based package manager that doesn't care what init system you run. Or what bootloader. Or what CPU architecture. Kappa builds your entire system from source — and lets you swap the init system like you'd swap a wallpaper.
Why
Every other package manager picked a side. apt married systemd. pacman
shackled itself to Arch's ecosystem. emerge gave you choice but at the cost
of your weekend. Nix gave you reproducibility but took your filesystem with it.
Kappa is what you get when you stop negotiating. You declare what your system is, and kappa figures out how to build it. Change your mind about the init system? Rebuild only the packages that care — the other 800 stay put.
What it does
# Your system, in one file:
boot {
kernel = "linux"
init = "s6" # swap to "systemd" anytime
bootloader = "limine" # or "grub"
root = "/dev/sda1"
}
packages {
nginx { version = ">=1.24" }
postgresql {}
zlib {}
}
services {
nginx { enable = true }
}
Then:
kappa rebuild config.kap # builds everything, generates service files
kappa rebuild config.kap # boot.init = "openrc" — only 5 packages actually rebuild
Features that nobody else has
-
Init-system-as-configuration.
boot.init = "s6"→ generates s6 service directories. Change it to"systemd"→ regenerates.serviceunits. Change it to"openrc"→ generates init.d scripts. The package definitions don't know or care which init you picked. That's kappa's problem. -
Post-install init switching. Change
boot.init, runkappa rebuild, reboot. You're now on a different init system. Only packages that actually use${enabledinit}in their build scripts need recompiling. Everything else just gets new service files generated. -
Bootloader rollback. Every rebuild creates a fallback boot entry pointing at the previous generation's init. If the new one doesn't boot, the old one is one reboot away.
-
Parallel scheduler.
-w 4 -j 8means four packages building simultaneously, eight jobs each. The scheduler uses depth-based priority grouping so leaf dependencies unblock as much work as possible first. -
Package recipe caching. Declare
remotes = ["https://repo.example.com/"]in your config. Kappa fetches.kapfiles on demand, caches them, and only re-fetches when the remote version is newer. -
Source tarball caching. Downloaded once, stored at
/kappa/cache/. Rebuilds don't touch the network unless versions change. -
Conflicts.
systemddeclaresconflicts = ["eudev", "elogind"]. The resolver catches mutual incompatibility before a build starts. -
Init-agnostic system config.
groups { wheel { gid = 998 } }— kappa creates the groups.system { hostname = "mybox" }— kappa writes/etc/hostname. Nosystemctl, norc-update, no init dependency.
5 init systems. 2 bootloaders. Zero lock-in.
| Init | Service location | Enable command |
|---|---|---|
| systemd | /etc/systemd/system/{name}.service |
systemctl enable |
| openrc | /etc/init.d/{name} |
rc-update add |
| s6 | /etc/s6/sv/{name}/run |
s6-rc-bundle-update |
| runit | /etc/sv/{name}/run |
ln -sf /etc/sv/{name} /var/service/ |
| dinit | /etc/dinit.d/{name} |
dinitctl enable |
| Bootloader | Config path |
|---|---|
| limine | /boot/limine.cfg |
| grub | /boot/grub/grub.cfg |
Quick start
# Build kappa (needs Clang 17+, CMake 3.20+, C++23)
cmake -B build -G Ninja -DCMAKE_C_COMPILER=clang -DCMAKE_CXX_COMPILER=clang++
cmake --build build
# Write a config
cat > system.kap << 'EOF'
system { hostname = "kappa.local" }
packages { nginx {} }
services { nginx { enable = true } }
boot {
kernel = "linux"; init = "s6"; root = "/dev/sda1"; bootloader = "limine"
}
users { root { shell = "/bin/zsh" } }
remotes = ["https://packages.kappa-os.org/stable/"]
EOF
# Parse it
build/kappa parse-config system.kap
# Rebuild
build/kappa rebuild system.kap
Subcommands
| Command | What it does |
|---|---|
parse-package <file> |
Validate a .kap package definition |
parse-config <file> |
Validate a system configuration |
validate <file> |
Validate any kappa file |
format <file> |
Pretty-print to canonical style |
doctor <file> |
Check for issues and warnings |
resolve <config> |
Compute a build plan |
fetch <package> |
Download and verify source tarballs |
fetch-package <name> |
Fetch a package recipe from remotes |
build <package> |
Build a single package |
rebuild <config> |
Diff config against installed state, rebuild changed |
list |
Show installed packages |
rollback |
Show available generations |
License
BSD 2-Clause. Do whatever you want. Just don't sue us.
Contributing
See CONTRIBUTING.md. We're opinionated but we merge good code.