Towards robust OSes for appliances: a new approach based on domain-specific languages