SOVEREIGNSTACK.DEV

Status: Phase 0 (Alpha) - Coming Soon

Sovereign Stack (ss-nas) is an AGPLv3-licensed, bare-metal NAS OS built on Debian, ZFS, Docker/LXD/K3s, Kanidm, and AppForce. It is engineered to eliminate cross-platform protocol friction and deliver absolute digital sovereignty.

Phase 0 Core Architecture:

• 1. ZFS-Managed NFS (ss-nfsd)
  Tech: nfs-kernel-server
  Goal: Crush macOS protocol friction. Eradicate the AppleDouble plague, the Beachball of Death, Spotlight voids, and sporadic disconnects. Deliver blazing performance, giving aging hardware a new lease on life while retaining absolute control over export parameters.
• 2. Sovereign Identity Authority (ss-idm)
  Tech: Kanidm
  Goal: Lightweight, Rust-based Identity Provider. Drives Zero-Trust SSO (Forgejo) and macOS Mobile Device Management (MDM) profiles to drastically reduce user friction.
• 3. Sovereign DNS Authority (ss-dns)
  Tech: Dnsmasq
  Goal: Establish deterministic, mesh-aware routing across all nodes using a split-brain GitOps architecture for fixed and dynamic records.
• 4. Virtualization Abstraction (ss-vcrate / ss-vkennel / ss-vpaddock)
  Tech: Docker/Lima, LXD, and K3s
  Goal: Seamless container and VM execution across mixed environments.
• 5. AppForce Workload Orchestrator (ss-appforce)
  Tech: Containerized Sidecars & Docker/Compose Orchestration
  Goal: Package and deploy third-party containerized apps alongside ss-nas-core. Seamlessly provisions identity, storage, and networking so every deployed workload automatically inherits Sovereign Identity (ss-idm) for unified access.

Simplicity, zero friction, and pure performance—with total privacy and security for your data, right at your fingertips.

We are currently recruiting 5 hands-on alpha testers to stress-test the ZFS-managed NFS core. Approved testers will receive full source access via our self-hosted mirror at pgit.sovereignstack.dev.