Docs / Using Zainium OS

elevate

Root access on Zainium OS — elevate replaces sudo and protects the base even from root.

elevate replaces sudo. It authenticates through PAM (elevate-pam) and runs one command as root:

elevate zex install htop
elevate sys-resolver set glibc

Protected paths

Even as root, elevate refuses rm, rmdir, mv, cp, rsync, shred and unlink on:

/overlayer/syshub — the base
/overlayer/zaisys — kernel, initramfs and boot loader
/overlayer/.syshub-pending — a staged base upgrade
/overlayer itself

$ elevate rm -rf /overlayer/syshub
Zainium Security Violation: Modification of Core OS layers is strictly prohibited
Blocked path: /overlayer/syshub
This action was blocked by the Zero-Trust Core Protector, even though you are root.

The base changes only through verified base upgrades with zex. Software you install goes to the userland layer, which zex manages.

Updates and upgrades

musl and glibc

All documentation