Generating and distributing customized embedded operating systems

A system, comprising:

• a processor;
• memory in electronic communication with the processor;
• and
• instructions stored in the memory, the instructions being executable to:
• obtain, at a computing device, an OS image package including an OS manifest that includes a summary of a target OS to be instantiated on a plurality of target devices of a target device class, wherein the OS manifest includes a summary of the target OS associated with the target device class, wherein obtaining the OS image package includes generating the OS image package, wherein generating the OS image package includes installing package databases that are relied upon to resolve dependencies within the OS image package;
• generate a finalized OS image package by sealing the OS image package, thereby disabling runtime modifications to the finalized OS image package upon installation of the finalized OS image package on a target device of the plurality of target devices;
• and
• cause the finalized OS image package to be deployed to the plurality of target devices of the target device class, wherein sealing the OS image package includes removing the package databases prior to deploying the finalized OS image package to the plurality of target devices.

A computer-implemented method for deploying an operating system (OS) while preventing runtime modifications after deployment, the method comprising:

• obtaining, at a computing device, an OS image package including an OS manifest that includes a summary of a target OS to be instantiated on a plurality of target devices of a target device class, wherein the OS manifest includes a summary of the target OS associated with the target device class;
• generating a finalized OS image package by sealing the OS image package, thereby disabling runtime modifications to the finalized OS image package upon installation of the finalized OS image package on a target device of the plurality of target devices;
• and
• causing the finalized OS image package to be deployed to the plurality of target devices of the target device class;
• providing an unsealed copy of the OS image package to a second computing device;
• receiving, from the second computing device, a modified OS image package, and
• generating a finalized version of the modified OS image package by sealing the modified OS image package to disable runtime modifications to the finalized version of the modified OS image package.

A system, comprising:

• a processor;
• memory in electronic communication with the processor;
• and
• instructions stored in the memory, the instructions being executable to:
• obtain, at a computing device, an OS image package including an OS manifest that includes a summary of a target OS to be instantiated on a plurality of target devices of a target device class, wherein the OS manifest includes a summary of the target OS associated with the target device class;
• generate a finalized OS image package by sealing the OS image package, thereby disabling runtime modifications to the finalized OS image package upon installation of the finalized OS image package on a target device of the plurality of target devices;
• cause the finalized OS image package to be deployed to the plurality of target devices of the target device class;
• provide an unsealed copy of the OS image package to a second computing device;
• receive, from the second computing device, a modified OS image package;
• and
• generate a finalized version of the modified OS image package by sealing the modified OS image package to disable runtime modifications to the finalized version of the modified OS image package.