Skip to content
View paulneja's full-sized avatar
🎯
Focusing
🎯
Focusing
10 followers · 10 following

Achievements

Achievement: QuickdrawAchievement: Starstruck

Achievements

Achievement: QuickdrawAchievement: Starstruck

Highlights

  • Pro

Block or report paulneja

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
paulneja/README.md
paulneja header Typing SVG

Email GitHub
I build where abstractions end: memory maps, syscall boundaries, linker scripts, boot paths, and binaries that must earn your trust.

Linux on ESP32-S3

View Linux on ESP32-S3 repository

Linux 6.11 booting natively on Xtensa. No emulation layer: NOMMU, 16 MB flash, 8 MB PSRAM, Wi-Fi support, and the ESP32-S3 hardware RSA accelerator integrated with the Linux Crypto API.

Delivered as one flashable image for real hardware.

C Linux Kernel Xtensa NOMMU

Zevory Linux

View Zevory Linux repository

An independent Linux distribution built from upstream source. Rolling release, Wayland-first, and designed around a custom init and package-management roadmap.

The bootstrap already reaches real hardware with Limine, a tailored kernel configuration, a musl-static initramfs, PGP verification, and a reproducible clean-clone build path.

Linux Bash Limine BusyBox musl

Syscage

View Syscage repository

A bare-metal sandbox written in pure Bash. It composes Linux namespaces, cgroups v2, seccomp, and Xephyr into a containerless jail for executing and observing untrusted ELF binaries.

No runtime. No daemon. No dependency stack to hide behind.

Bash Namespaces cgroups v2 seccomp

More experiments

Firmware experiments, kernel patches, boot-chain work, and half-finished ideas that occasionally become the projects beside this card.


Browse all repositories

Systems & embedded

C, C++, Rust, CMake and Linux

Application & web

Python, Java, Kotlin, TypeScript, JavaScript, HTML and CSS

Infrastructure & data

Docker, Git and Bash

Systems, build & runtime

Buildroot ESP-IDF GNU Make QEMU KVM libvirt systemd GitHub Actions GPG PGP WireGuard

Targets & platform work

Xtensa ESP32-S3 NOMMU Limine musl BusyBox SQL

Debugging & isolation

GDB OpenOCD namespaces cgroups v2 seccomp nftables

Current focus

Boot chains · kernel and userspace boundaries · embedded Linux · reproducible systems · binary analysis


Contribution snake animation

footer

Pinned Loading

  1. Linux-on-esp32-S3 Linux-on-esp32-S3 Public

    Real Linux 6.11 running natively on the ESP32-S3's Xtensa cores (not emulated), with working WiFi and the chip's hardware RSA accelerator exposed to the Linux Crypto API. One flashable image; 16MB …

    C 59 5

  2. Syscage Syscage Public

    A lightweight, pure-bash bare-metal sandbox for safe execution and behavioral analysis of untrusted Linux binaries using namespaces, Cgroups v2, and Xephyr

    Shell 2