A new kind of operating system that finally gives you the best of Windows and Linux — without forcing you to choose.
Imagine an operating system that feels and runs Windows applications exactly the way you expect… but under the hood it's built on a rock-solid, modern Linux foundation that is impossible to break with malware or bad updates.
That is ImmuWin OS.
ImmuWin OS is a complete redesign of the Microsoft Windows experience. It keeps the familiar Windows 11-style desktop, Start menu, Fluent design, and full native compatibility for every Windows application (.exe files, games, enterprise software, drivers — the works).
But instead of using the traditional mutable Windows kernel (the one that has been the target of decades of viruses, ransomware, and bloat), ImmuWin places a modern immutable Linux kernel and filesystem at the very core.
- Updates are atomic — the entire system swaps in a new version in one go. If anything goes wrong, you roll back in seconds.
- The root filesystem is read-only and cryptographically verified at every boot.
- Every app runs in its own secure sandbox.
- Persistent malware in the base operating system is structurally impossible.
In short: you get the security and stability of immutable Linux (think Fedora Silverblue or Vanilla OS) with 100% native Windows compatibility layered on top — no Wine, no translation layers, no compromises.
This is not another "Linux with a Windows skin" or a half-baked dual-boot hack.
It is not trying to be "Wubuntu" or a fancy desktop environment on top of Ubuntu.
ImmuWin is something new:
- The Windows layer (WinSubsys) is a lightweight, native compatibility domain that lets real Windows PE binaries run directly on the Linux kernel.
- The Linux core stays completely immutable and verified.
- The two layers work together seamlessly — you never see Linux artifacts unless you want to.
Most importantly, ImmuWin was designed from day one to solve the real pain points that both Windows users and Linux users complain about:
- Windows users are tired of constant updates breaking things, viruses, and the feeling that the OS is fighting them.
- Linux users love the stability and security of immutable systems but miss easy access to the massive Windows software library (especially games and professional tools).
ImmuWin gives both groups exactly what they've been asking for — without asking them to give anything up.
Because it finally ends the endless "Linux vs Windows" war.
You can:
- Run your favorite Windows games and software at full native speed.
- Have an operating system that literally cannot be corrupted by bad updates or malware in the core.
- Update safely, roll back instantly, and know your system is always in a known-good state.
- Still get all the benefits of the open-source Linux world underneath.
In a world where security breaches, ransomware, and fragile updates are everyday news, ImmuWin is the operating system that feels like the future we were promised.
And the best part? It's designed to keep getting better. Over time it can evolve into a platform where hardware acceleration, AI features, and advanced security are built in from the ground up — all while staying fully compatible with the software ecosystem people already love.
Now that ImmuWin OS exists, it needs a programming language that truly belongs there.
That language is GHBL.
GHBL (pronounced "Gobble") is a brand-new, unified programming language created from the ground up to be the natural language of ImmuWin OS. It lets developers write code that speaks directly to all three layers of the system in one seamless file:
- The hardware layer (GPUs, accelerators, sensors, DMA)
- The immutable Linux core (atomic files, verified execution, sandboxes)
- The WinSubsys Windows compatibility layer (native Windows APIs and PE output)
One codebase. Zero manual bridges. Zero FFI headaches.
Existing languages were designed for the old world:
- Python is great for quick scripts but slow and unsafe for serious work.
- Rust is incredibly safe and fast but painful for rapid prototyping and cross-layer work.
- C++, C#, JavaScript, etc. all force you to write separate code for hardware, Linux, and Windows.
GHBL solves the real problem: fragmentation.
Instead of spending your time gluing together different languages, toolchains, and platform-specific hacks, GHBL lets you focus on what you want to build. The language and the compiler automatically choose the best execution path (hardware offload, Linux-native, or Windows-compatible) while enforcing the strong security guarantees of ImmuWin.
- Unified syntax — mix rapid, Python-like prototyping and Rust-level explicit safety in the same file.
- First-class primitives for hardware, immutability, and Windows compatibility.
- Security by construction — every GHBL program is automatically signed with Ed25519 and runs in a strict sandbox.
- Immutable-native — GHBL programs are designed to live inside atomic OSTree layers from day one.
Modern development is still painfully fragmented.
GHBL is the first language that removes the friction between:
- Rapid development and production-grade safety
- Hardware performance and cross-platform compatibility
- Security and developer happiness
It's the language that finally matches the vision of ImmuWin OS: a single, secure, high-performance environment where everything just works together.
We built GHBL because we believe the future of computing should be unified, secure, and actually fun to develop for.
If that vision excites you too, you're in the right place.
Whether you're a seasoned developer, a security researcher, a hardware enthusiast, or someone who just wants to help shape the next generation of operating systems and languages — your contributions are welcome.
- ⭐ Star the repo
- 🐛 Open an issue
- 🔄 Submit a pull request
- 💬 Just say hello in Discussions
The GHBL Core Team (and the entire community) can't wait to build this with you.
# 1. Install GHBL
pip install -e .
# 2. Generate signing keys (one-time)
python3 sign_ghbl.py --generate-keys
# 3. Sign and run an example
python3 sign_ghbl.py examples/hello.ghbl
ghbl run examples/hello.ghblAll GHBL programs are cryptographically signed and verified before execution.
.
├── pyproject.toml # Package configuration
├── sign_ghbl.py # Ed25519 signing utility
├── ghbl/
│ ├── __init__.py
│ ├── runner.py # Verified execution engine
│ └── cli.py # Command-line interface
├── examples/
│ └── hello.ghbl # Minimal example
└── README.md
GHBL is currently in Phase 0 — language specification and reference implementation.
See the GHBL Whitepaper for the full vision and roadmap.
MIT License — Open and collaborative
- JMHBM
- Grok
- Harper
- Benjamin
- Lucas