🐧
🔒
Sovereign Agent OS · smilinTux ecosystem

skos

Your agents. Your infrastructure.
Deploy anything, anywhere — own all of it.

One command drops you into a menu. Pick what you want. Personal defaults pre-selected. Scales from your laptop to K8s, same install.

curl -fsSL https://skos.skworld.io/install.sh | sh

Drops you into a menu — pick what you want. Sensible personal defaults pre-selected. Review the script first ↗

100% self-hosted · zero cloud lock-in OCI-native · podman or docker Swap any component · ports/adapters model GPL-3.0 · free forever

Who it's for

Starts personal.
Scales to enterprise.

skos grows with you. The same stack that runs on your laptop is the same stack that powers your team cluster or your enterprise K8s deployment. No rewrites. No vendor migrations. Profile-driven from day one.

✦ Personal · The Default 🐧

Personal Sovereign

Your laptop, your data, one command. No accounts, no cloud, no subscription. Install in minutes and run a full AI agent stack that you own completely.

  • Single node — laptop or home server
  • podman (preferred) or docker
  • ~/var/data/sk data root — yours forever
  • CapAuth identity · skmemory · skchat
  • skfence edge · skmon observability
  • Zero accounts required to install
⚡ Teams 🖥️

Sovereign Teams

Multi-node shared cluster. Self-hosted for your team or household. Docker Swarm or RKE2 — same capability map, shared agent memory, and federated identity.

  • Docker Swarm or RKE2/k3s cluster
  • Shared skmemory + skchat (Matrix)
  • Authentik SSO for team identity
  • skmesh overlay (Netbird self-hosted)
  • NATS JetStream agent event bus
  • Grafana + Loki + Tempo observability
★ Enterprise 🏛️

Enterprise

Kubernetes, HA, compliance, and support. Bring your own cloud or run fully on-prem. skos adapters speak OCI, OIDC, S3, WireGuard, OTel, and ACME — fits your existing stack.

  • Kubernetes / RKE2 + ArgoCD GitOps
  • OpenTofu / Terraform infra provisioning
  • step-ca internal PKI + mTLS everywhere
  • Wazuh HIDS + Falco runtime + CrowdSec
  • Zitadel M2M service auth for agent swarms
  • Commercial support available

Architecture

Ports. Adapters. Bloom.

Every sk* is a port — a stable capability contract, not a specific technology. The tech behind it is swappable. skdata is "data storage." Today it's Postgres + pgvector. Tomorrow it could be something else. Your code doesn't change.

Sovereign defaults + interop adapters, joined by open standards: OCI images, OIDC, S3 API, WireGuard, OpenTelemetry, ACME. That's what lets skos stay sovereign and interoperable simultaneously.

Framework-guided bloom. Install the foundation, choose your capabilities, and the stack flowers into exactly what you need — nothing more, nothing less.

OCI OIDC S3 API WireGuard OpenTelemetry ACME/X.509 GPL-3.0
skos architecture
port stable capability contract
adapter swappable implementation

skdata → Postgres+pgvector (swap: ArcadeDB)
skcache → Valkey / Dragonfly
skmodel → Ollama (swap: vLLM / llama.cpp)
skfence → Traefik + Coraza WAF
skmesh → Netbird (swap: Headscale)
capauth → CapAuth (OIDC upstream: Authentik)

v2/C/port/ · platform: Swarm|K8s|k3d|podman

The install experience

One command. You choose everything.

The installer detects your OS, finds podman or docker, then shows you an interactive menu. Personal profile pre-selected. Run it in under 5 minutes.


The 4 C's

Every capability. One taxonomy.

Each sk* is a port — pick your adapters, swap them anytime. The same 4C layout organizes personal installs, team clusters, and enterprise deployments.

☁️
C1
cloud/
skfenceedge / ingress · Traefik + Coraza
skmeshoverlay mesh · Netbird / Headscale
skdnsDNS · PowerDNS + AdGuard
skcicdCI/CD · Forgejo + ArgoCD
skinfraprovisioning · OpenTofu
skdwebdecentralized · IPFS + HNS
💬
C2
comms/
skchatchat · Matrix / Tuwunel
skvoicevoice/RTC · LiveKit
skcomms17-path transport · Telegram, email…
skbusA2A event bus · NATS JetStream
⚙️
C3
compute/
skdatadata · Postgres+pgvector+BM25
skcachecache/KV · Valkey (drop-in Redis)
skobjectobject/S3 · Garage
skfilesfiles/sync · Nextcloud + Syncthing
skmodelLLM serving · Ollama / vLLM
skflowworkflow · n8n / Windmill
skmonobservability · Prometheus+Loki+Tempo
skbackupbackup · Restic → Garage
🔐
C4
core/
capauthidentity · CapAuth + Authentik SSO
skssoM2M auth · Zitadel (agent swarms)
sksecthreat · CrowdSec + Falco + Wazuh
skwafWAF · Coraza + OWASP CRS v4
skcaPKI/mTLS · step-ca (ACME + SSH)
skvaultsecrets · skvault / Vaultwarden
Shared open standards — the glue
📦 OCI images 🔑 OIDC 🪣 S3 API 🔐 WireGuard 📈 OpenTelemetry 📜 ACME / X.509 🗄️ Cypher / SQL 📡 NATS protocol

Deploy anywhere

Same install. Every environment.

Profile-driven from day one. The CLI is the same; only the topology profile changes. Grow your install without re-architecting.

💻
Laptop / Personal
podman (rootless) or docker desktop · single node
skos path personal
~/var/data/sk
🏠
Home Cluster
Docker Swarm · 2–5 nodes · home server
skos path cluster
ansible-driven
☸️
K8s / RKE2
Kubernetes · RKE2 · k3s · cloud or on-prem
skos path k8s
ArgoCD GitOps
☁️
Cloud / Hybrid
AWS · GCP · Azure · Hetzner · any OCI-native VPS
skos path cloud
OpenTofu infra

The SKWorld family

Part of the smilinTux ecosystem

skos is the OS layer of the SKWorld sovereign AI ecosystem. Every capability plugs into the family of projects below. Build on any of them independently, or let skos wire them together.


Own the Full Vertical

skos is the keystone.
Silicon → Soul, all yours.

The modern stack is rented — your data on someone else's disk, behind someone else's key, served by a model that phones home. We rebuilt it from the ground up. skos is the OS layer that makes the whole vertical one owned, deployable thing. Every layer open. Every layer swappable. Every layer yours.

skos is your OS layer — your data never leaves, your keys never leave, no cloud you don't control, no lock-in you can't walk away from.

Layer What it is Products
Soul agent character & emotional memory soul blueprints · cloud9
Apps forge your own — don't rent SaaS skforge · skarchitect
Comms your channels — chat, voice, transport skcomm · skchat · skvoice
Models inference on your hardware — never phones home skmodel (Ollama/vLLM)
Data memory, embeddings, graph — your disk, your keys skmemory · skdata · skvector
Identity sovereign & cryptographic — no OAuth landlord capauth · skaid
Security your perimeter, your rules sksecurity · skwaf · skca
OS ← you are here the sovereign agent OS — ties it all together skos
Silicon your hardware — the box under your desk yours

skguide · concierge

skos, for a real week.

Some weeks are hard — a parent's affairs to manage, a stack of bills, a pile of mail. That's a real, heavy week made manageable: one sovereign OS, your data, your hardware, one conversation with skguide.

Every step above runs on your hardware. The documents never leave your disk. The keys are yours. That's the whole point.


🐧

Ready to go sovereign?

One command. Your agents, your data, your infra. No accounts. No lock-in. No compromise.

curl -fsSL https://skos.skworld.io/install.sh | sh

"staycuriousANDkeepsmilin" 🐧