Storage
Mounts, SMART health, SMB, remote shares, permissions, and resilient automounts.
Self-hosted. Native. Yours.
Your server,
under control.
SubakoOS brings storage, containers, networking, backups, monitoring, and home services into one considered web interface.
Built for Fedora and Arch Linux hosts. SubakoOS is not a Linux distribution.
Native host accesssystemd, PAM, Podman, nftables
Least privilegeDedicated user and allowlisted helper
Local ownershipYour server, data, credentials, and backups
One operational surface
Everything a homelab needs.
Nothing it doesn’t.
Powerful host controls, shaped into workflows that remain understandable.
Containers
Rootless Podman lifecycle, image search, deployment, logs, health, and secrets.
Network
Interfaces, DNS, nftables, port forwarding, Tailscale, IPAM, and certificates.
Automation
Systemd timers, rsync and Borg backups, restores, alerts, and webhooks.
Observability
Live and historical metrics, health scoring, updates, and recovery controls.
Home hub
Family profiles, calendars, lists, announcements, presence, weather, and feeds.
Optional and private
AI that stays
on your hardware.
SubakoOS offers optional AI plugins powered by local Ollama models and Hermes Agent. All processing remains on your server — no external APIs, no data leaving your network. Enable only what you need, when you need it.
Explore AI featuresOllama Lightweight, direct-to-model calls for summarization and explanation.
Hermes Agent Agentic AI with memory, tool-calling, and Telegram gateway support.
Sandboxed Isolated execution with strict user allowlisting for secure access.
Designed around the host
Powerful where it needs to be.
Constrained where it matters.
SubakoOS runs as a dedicated non-root service. Sensitive host operations cross a narrow, auditable privilege boundary instead of giving the entire web application root access.
Read the architectureBrowser
└─ TLS reverse proxy
└─ FastAPI service [subakoos user]
├─ SQLite + application services
├─ rootless Podman
└─ privileged helper [allowlisted]
└─ Linux host
Make your server feel like yours.
Install a signed release, put it behind HTTPS, and start with the modules you need.