Open source · In development

Your homelab’s
first hop.

An immutable router & edge OS for your homelab.

Read-only at its core.
Built and signed by you.

How it works Follow on GitHub
One edge for home & lab.

01 / The architecture

A read-only core.
Change on your terms.

A verified, read-only system.

dm-verity checks filesystem contents as they’re read, helping detect tampering. Leases, logs and service data use separate writable storage.

System imageRead-onlyOS configurationdm-verity checks on read
Service stateLeases · logs · dataWritable

Your configuration. Your keys.

Your network configuration lives in Git. You build and sign the OS and configuration as one image, using keys you control.

  1. Your repositoryGit configuration
  2. Your keysBuild + sign
  3. Versioned imageSigned image

Updates with a boot fallback.

Each signed update is staged in the inactive slot. The accepted image stays the default until the update passes its boot checks.

To roll back deliberately, rebuild reviewed inputs and sign a new deployment.

Update illustrationA / B slots

Signed image

Accepted imageRetainedCurrent default
Signed candidateStagedInactive slot

Candidate staged. Accepted image retained. Fresh boot checks come before acceptance.

If the candidate fails its boot checks, boot fallback can return to the accepted image.

Built on Debian, systemd & mkosi.

02 / Everyday networking

For the house.
And the lab.

A new service to try.
A houseful of devices to keep connected.

The essentials

One networking stack.

Routing, firewall, DNS, DHCP, IPv4 and IPv6 work together out of the box, with their defaults configured as one system.

Across selected networks

Separate networks.
Shared services.

Share mDNS/DNS-SD service discovery across the networks you choose, alongside firewall rules that control access.

Mixed IPv4 / IPv6

Connect IPv4 and IPv6 services.

NAT64/NAT46 connects supported IPv4 and IPv6 services across your network.

Local console

See what’s happening.
Change it in Git.

The local console explains devices, connections and policy decisions. Router configuration stays in Git.

03 / The project

Follow the first hop.

Explore the code and follow project updates on GitHub.

Follow on GitHub