I'm working on an itty bittier jeos vm that allows basically any linux userland via docker (rhel, deb, arch etc). It'll ship with zfs and grsecurity on a long-term stable kernel. Completely open source, hackable (core src packages similar to arch PKGBUILDs) and rebuildable from source.