ChromeOS/ChromiumOS uses portage for its build system, to produce a signed, read-only image that the OS can boot from. CoreOS uses the same tooling FWIW: http://www.chromium.org/chromium-os/build
This is why you can’t just install random packages onto the parent OS. Any additional software needs to run in some overlay filesystem or sandbox.