Rename uos to one throughout codebase

- Rename proto file: uos.proto → one.proto
- Rename proto package: mvirt.uos → mvirt.one
- Rename service: UosService → OneService
- Rename client/server types: UosServiceClient → OneServiceClient, etc.
- Rename constants: UOS_* → ONE_*
- Rename variables: uos_client → one_client, uos_clients → one_clients
- Update all doc comments from "uos" to "one"
- Update documentation files (README, CLAUDE.md, docs/*, DESIGN.md)
- Update CI artifact path
- Keep backwards-compatible make targets (uos → one alias)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: MalteJ

.github/workflows/ci.yml

@@ -63,7 +63,7 @@ jobs:
         with:
           name: build-artifacts
           path: |
-            mvirt-uos/target/mvirt-uos.efi
+            mvirt-one/target/mvirt-one.efi
             target/x86_64-unknown-linux-musl/release/mvirt
             target/x86_64-unknown-linux-musl/release/mvirt-vmm
           retention-days: 7

CLAUDE.md

@@ -12,7 +12,7 @@ mvirt/
 ├── mvirt-zfs/       # ZFS storage management
 ├── mvirt-one/       # MicroVM Init System for isolated Pods
 │   ├── src/         # Rust init process (PID 1)
-│   ├── proto/       # uos gRPC API
+│   ├── proto/       # one gRPC API
 │   └── initramfs/   # rootfs skeleton
 ├── proto/           # gRPC API definition
 └── images/          # Kernel and disk images (not in git)

README.md

@@ -44,7 +44,7 @@ Lightweight VM manager in Rust as a modern alternative to libvirt.
 | `mvirt-log/`   | 50052 | Centralized audit logging service    |
 | `mvirt-zfs/`   | 50053 | ZFS storage management daemon        |
 | `mvirt-net/`   | 50054 | Virtual networking daemon            |
-| `mvirt-uos/`   | -     | µOS - Minimal Linux for MicroVMs     |
+| `mvirt-one/`   | -     | µOS - Minimal Linux for MicroVMs     |
 | `proto/`       | -     | gRPC protocol definitions            |
 
 ## Prerequisites
@@ -56,7 +56,7 @@ rustup target add x86_64-unknown-linux-musl
 # Build tools
 sudo apt install build-essential musl-tools
 
-# For mvirt-uos (Kernel/UKI)
+# For mvirt-one (Kernel/UKI)
 sudo apt install flex bison libncurses-dev libssl-dev libelf-dev bc dwarves
 sudo apt install systemd-ukify systemd-boot-efi genisoimage
 ```
@@ -70,8 +70,8 @@ make
 # Rust binaries only
 make release
 
-# mvirt-uos only (UKI for direct boot)
-make uos
+# mvirt-one only (UKI for direct boot)
+make one
 
 # Build in Docker (no local dependencies needed)
 make docker
@@ -112,8 +112,8 @@ mvirt/
 ├── mvirt-log/              # Audit logging service
 ├── mvirt-zfs/              # ZFS storage daemon
 ├── mvirt-net/              # Networking daemon
-├── mvirt-uos/              # µOS - Minimal Linux for MicroVMs
-│   └── pideisn/            # Rust init (PID 1)
+├── mvirt-one/              # µOS - Minimal Linux for MicroVMs
+│   └── src/                # Rust init (PID 1)
 ├── docs/                   # Documentation
 └── images/                 # VM disk images (not in git)
 ```
@@ -127,7 +127,7 @@ mvirt/
 | `target/x86_64-unknown-linux-musl/release/mvirt-log` | Logging service |
 | `target/x86_64-unknown-linux-musl/release/mvirt-zfs` | ZFS storage daemon |
 | `target/x86_64-unknown-linux-musl/release/mvirt-net` | Networking daemon |
-| `mvirt-uos/target/mvirt-uos.efi` | Bootable UKI (kernel + initramfs) |
+| `mvirt-one/target/mvirt-one.efi` | Bootable UKI (kernel + initramfs) |
 
 ## Documentation
 

docs/architecture.md

@@ -77,7 +77,7 @@ TUI and CLI that orchestrates the other services.
 - Provides unified interface for VM operations
 - Auto-refreshing TUI with ratatui
 
-### mvirt-uos (µOS for MicroVMs)
+### mvirt-one (µOS for MicroVMs)
 
 Minimal Linux distribution optimized for MicroVMs.
 

docs/development/building.md

@@ -11,11 +11,11 @@ mvirt/
 ├── mvirt-log/           # Centralized audit logging
 ├── mvirt-zfs/           # ZFS storage management
 ├── mvirt-net/           # Virtual networking
-├── mvirt-uos/           # µOS - Minimal Linux for MicroVMs
+├── mvirt-one/           # µOS - Minimal Linux for MicroVMs
 │   ├── pideisn/         # Rust init process (PID 1)
 │   ├── initramfs/       # rootfs skeleton
 │   ├── kernel.config    # Kernel config fragment
-│   └── mvirt-uos.mk     # OS build rules
+│   └── mvirt-one.mk     # OS build rules
 ├── docs/                # Documentation
 └── Makefile             # Main build orchestration
 ```
@@ -32,7 +32,7 @@ The build system uses GNU Make with a dependency-based approach. Targets only re
 |--------|-------------|
 | `make` | Build everything (Rust + UKI) |
 | `make release` | Build Rust binaries (musl, static) |
-| `make uos` | Build mvirt-uos (UKI) |
+| `make one` | Build mvirt-one (UKI) |
 | `make kernel` | Build kernel only |
 | `make initramfs` | Build initramfs only |
 | `make clean` | Remove build artifacts |
@@ -45,7 +45,7 @@ The build system uses GNU Make with a dependency-based approach. Targets only re
 The build system automatically resolves dependencies:
 
 ```
-make uos
+make one
   └── $(UKI)                      # Unified Kernel Image
         ├── $(BZIMAGE)            # Linux kernel
         │     └── .config
@@ -59,7 +59,7 @@ make uos
         └── cmdline.txt           # Kernel command line
 ```
 
-Running `make uos` automatically builds all dependencies in the correct order.
+Running `make one` automatically builds all dependencies in the correct order.
 
 ### Rust Binaries
 
@@ -83,27 +83,27 @@ Build outputs:
 
 | File | Description |
 |------|-------------|
-| `mvirt-uos/target/mvirt-uos.efi` | UKI (kernel + initramfs + cmdline) |
-| `mvirt-uos/target/cloud-hypervisor` | Downloaded hypervisor binary |
-| `mvirt-uos/target/hypervisor-fw` | Downloaded firmware |
+| `mvirt-one/target/mvirt-one.efi` | UKI (kernel + initramfs + cmdline) |
+| `mvirt-one/target/cloud-hypervisor` | Downloaded hypervisor binary |
+| `mvirt-one/target/hypervisor-fw` | Downloaded firmware |
 
 ## Development Workflow
 
 ### Code Changes
 
-1. Edit code in any module (`mvirt-cli/`, `mvirt-vmm/`, `mvirt-zfs/`, `mvirt-net/`, `mvirt-log/`, `mvirt-uos/pideisn/`)
+1. Edit code in any module (`mvirt-cli/`, `mvirt-vmm/`, `mvirt-zfs/`, `mvirt-net/`, `mvirt-log/`, `mvirt-one/pideisn/`)
 2. Run `cargo fmt && cargo clippy --workspace` to check formatting and lints
-3. Run `make uos` to rebuild UKI, or `cargo build` for daemons only
+3. Run `make one` to rebuild UKI, or `cargo build` for daemons only
 
 ### Testing with cloud-hypervisor
 
 ```bash
 # Build UKI
-make uos
+make one
 
 # Test with cloud-hypervisor (direct kernel boot)
 cloud-hypervisor \
-    --kernel mvirt-uos/target/mvirt-uos.efi \
+    --kernel mvirt-one/target/mvirt-one.efi \
     --cpus boot=1 --memory size=512M \
     --console off --serial tty
 ```

docs/development/kernel.md

@@ -4,7 +4,7 @@ This guide explains how the kernel build works and how to customize it.
 
 ## Overview
 
-mvirt-uos uses a minimal Linux kernel optimized for virtualization. The kernel configuration uses a **fragment-based approach** rather than a full `.config` file.
+mvirt-one uses a minimal Linux kernel optimized for virtualization. The kernel configuration uses a **fragment-based approach** rather than a full `.config` file.
 
 ## Config Fragment Approach
 
@@ -22,7 +22,7 @@ Instead of maintaining a full kernel config (~8000+ lines), we use a small fragm
 
 ## Current Configuration
 
-The `mvirt-uos/kernel.config` fragment includes:
+The `mvirt-one/kernel.config` fragment includes:
 
 | Category | Options |
 |----------|---------|
@@ -63,10 +63,10 @@ If the option works, add it to the fragment:
 
 ```bash
 # Add to kernel.config
-echo "CONFIG_MY_DRIVER=y" >> mvirt-uos/kernel.config
+echo "CONFIG_MY_DRIVER=y" >> mvirt-one/kernel.config
 ```
 
-Or edit `mvirt-uos/kernel.config` directly.
+Or edit `mvirt-one/kernel.config` directly.
 
 **Important:** Changes only in `.config` are lost after `make clean` or when `kernel.config` is modified, because `.config` is regenerated from the fragment.
 
@@ -112,10 +112,10 @@ Common dependencies to check:
 
 ## Kernel Version
 
-The kernel version is specified in `mvirt-uos/kernel.version`:
+The kernel version is specified in `mvirt-one/kernel.version`:
 
 ```bash
-cat mvirt-uos/kernel.version
+cat mvirt-one/kernel.version
 ```
 
 To update the kernel:
@@ -131,7 +131,7 @@ To update the kernel:
 Check if the option has unmet dependencies:
 
 ```bash
-cd mvirt-uos/kernel
+cd mvirt-one/kernel
 ./scripts/config --state CONFIG_MY_OPTION
 ```
 

mvirt-one/DESIGN.md

@@ -20,7 +20,7 @@ mvirt-one is the init system for mvirt microVMs that run isolated pods (containe
 │                     MicroVM │ (cloud-hypervisor)                 │
 │                             ▼                                    │
 │  ┌──────────────────────────────────────────────────────────┐   │
-│  │                      uos (PID 1)                          │   │
+│  │                      one (PID 1)                          │   │
 │  │  ┌─────────┐  ┌─────────┐  ┌─────────┐  ┌─────────────┐  │   │
 │  │  │ Image   │  │  Task   │  │   Pod   │  │    API      │  │   │
 │  │  │ Service │  │ Service │  │ Service │  │   Server    │  │   │
@@ -69,7 +69,7 @@ API Handler  →  Dispatcher  →  Worker
 
 ## Dual-Mode Operation
 
-uos runs in two modes:
+one runs in two modes:
 
 ### PID 1 Mode (in MicroVM)
 ```rust
@@ -84,7 +84,7 @@ if std::process::id() == 1 {
 ```rust
 else {
     prctl::set_child_subreaper(true)?;  // Handle orphaned children
-    start_unix_socket_server();          // /tmp/uos.sock
+    start_unix_socket_server();          // /tmp/one.sock
 }
 ```
 
@@ -127,17 +127,17 @@ else {
     └── rootfs/           # symlink or bind to image rootfs
 ```
 
-### Local Development (/tmp/uos)
+### Local Development (/tmp/one)
 ```
-/tmp/uos/
+/tmp/one/
 ├── images/
 └── pods/
 ```
 
 ## API (Protobuf over vsock/Unix socket)
 
 ```protobuf
-service UosService {
+service OneService {
   // Pod lifecycle
   rpc CreatePod(CreatePodRequest) returns (Pod);
   rpc StartPod(StartPodRequest) returns (Pod);

mvirt-one/build.rs

@@ -2,6 +2,6 @@ fn main() -> Result<(), Box<dyn std::error::Error>> {
     tonic_build::configure()
         .build_server(true)
         .build_client(true)
-        .compile_protos(&["proto/uos.proto"], &["proto/"])?;
+        .compile_protos(&["proto/one.proto"], &["proto/"])?;
     Ok(())
 }

mvirt-one/kernel.config

@@ -1,4 +1,4 @@
-# mvirt-uos kernel config
+# mvirt-one kernel config
 # Minimal Linux kernel for MicroVMs (cloud-hypervisor)
 # For use with: make tinyconfig && merge_config.sh
 
@@ -70,6 +70,7 @@ CONFIG_SERIAL_8250_RUNTIME_UARTS=4
 
 CONFIG_EXT4_FS=y
 CONFIG_TMPFS=y
+CONFIG_SHMEM=y
 CONFIG_PROC_FS=y
 CONFIG_SYSFS=y
 CONFIG_DEVTMPFS=y
@@ -110,6 +111,9 @@ CONFIG_TIMERFD=y
 CONFIG_EVENTFD=y
 CONFIG_AIO=y
 CONFIG_INOTIFY_USER=y
+CONFIG_MEMFD_CREATE=y
+CONFIG_SECCOMP=y
+CONFIG_SECCOMP_FILTER=y
 
 # ===========================================
 # HYPERVISOR GUEST SUPPORT
@@ -409,6 +413,24 @@ CONFIG_KERNEL_XZ=y
 # --- Freezer (cgroup dependency, but we have CGROUP_FREEZER) ---
 # CONFIG_FREEZER is not set
 
+# ===========================================
+# IPC (required for IPC namespace)
+# ===========================================
+
+CONFIG_SYSVIPC=y
+CONFIG_POSIX_MQUEUE=y
+
+# ===========================================
+# NAMESPACES (required for containers)
+# ===========================================
+
+CONFIG_NAMESPACES=y
+CONFIG_UTS_NS=y
+CONFIG_IPC_NS=y
+CONFIG_USER_NS=y
+CONFIG_PID_NS=y
+CONFIG_NET_NS=y
+
 # --- SCSI module (we don't use SCSI) ---
 # CONFIG_SCSI_MOD is not set
 

mvirt-one/proto/uos.proto mvirt-one/proto/one.protomvirt-one/proto/uos.proto renamed to mvirt-one/proto/one.proto

@@ -1,8 +1,8 @@
 syntax = "proto3";
-package mvirt.uos;
+package mvirt.one;
 
-// UosService provides the API for managing pods and containers in the MicroVM
-service UosService {
+// OneService provides the API for managing pods and containers in the MicroVM
+service OneService {
   // Pod Management
   rpc CreatePod(CreatePodRequest) returns (Pod);
   rpc StartPod(StartPodRequest) returns (Pod);