Genode's Browser Odyssey (2022)
genodians.org
genodians.org
It has 3d acceleration. It has a modern webbrowser. It has virtualbox, where you can run Linux to then run any misc program which doesn't in Genode yet.
Genode does it successfully, and the formally verified seL4 microkernel is one of the kernels they support.
The systems most of us use are now legacy, as Genode proves it can be done fundamentally better.
HURD and Plan 9 are one step in this direction but with less focus on capability-based security.
General overview: https://genode.org/documentation/general-overview/index
> Genode is based on a recursive system structure. Each program runs in a dedicated sandbox and gets granted only those access rights and resources that are needed for its specific purpose. Programs can create and manage sub-sandboxes out of their own resources, thereby forming hierarchies where policies can be applied at each level. The framework provides mechanisms to let programs communicate with each other and trade their resources, but only in strictly-defined manners. Thanks to this rigid regime, the attack surface of security-critical functions can be reduced by orders of magnitude compared to contemporary operating systems.
Basically, this is mainstream thinking as of the last point researchers seriously thought about single-machine OSes, sometime in the early 00s. And unlike most products of that thinking, it’s a fairly complete desktop system that can do a fair amount of desktop things. At the very least, it’s a proof by construction that this approach can actually serve as the foundation for a practical system.
(Hardware support sucks, of course, but with hardware manufacturers guarding their docs more closely than their genitals it’s a miracle you can actually get any PCs to work at all without Microsoft’s clout.)
[1] https://www.oreilly.com/openbook/opensources/book/appa.html
That's a magnificent turn of phrase and I shall now be on the lookout for an excuse to use it myself.