DevOps & Infrastructure Engineer building self-hosted developer tools.

github

Anurag Vishwakarma • Peerlist

<h3>Self-hosted, S3-compatible object storage with a web console.</h3>
Cairn is a self-hosted object storage solution that offers S3 compatibility. It stores object data as plain files on the filesystem and manages metadata using an embedded SQLite database, eliminating the need for external database or storage services. Designed for single-node operation, it supports asynchronous bucket replication for redundancy across hosts.
<ul>
<li>S3 Compatibility: Supports multipart uploads, range reads, checksums, versioning, presigned URLs, tagging, CORS, lifecycle expiration, and Object Lock.</li>
<li>Web Console: Provides a user interface for managing buckets, users, and policies. Users can upload, preview, and share objects, as well as inspect usage, metrics, and replication status.</li>
<li>Security Features: Includes native TLS, bucket policies, scoped temporary credentials, SSE-S3, and transparent object encryption at rest. The AWS KMS interface is supported for key labels backed by the node's master-key ring.</li>
<li>Storage and Operations: Offers block compression, durable writes, asynchronous replication, webhooks, S3 import, integrity checks, backup/restore capabilities, and Prometheus metrics.</li>
</ul>
Installation is straightforward, with a provided script for setup on Linux systems with compatible kernels. Local testing is facilitated using Docker, with clear instructions for setting up the master key, running the container, and interacting via the AWS CLI.
The project emphasizes clear configuration through environment variables and provides detailed documentation on operations, backup, restore, upgrades, replication, and troubleshooting. It is licensed under the Apache-2.0 license.

Cairn

<h3>Orva Functions: Self-Hosted Serverless Runtime</h3><ul><li>Orva provides a self-hosted function runtime designed for homelabs or single on-premises servers.</li><li>It allows you to deploy JavaScript, TypeScript, and Python functions.</li><li>Functions are executed within an nsjail sandbox, with five kernel-enforced boundaries per call to isolate them from the host.</li><li>Experience fast cold starts (50-500 ms) and warm hits (2-15 ms) with minimal memory usage (~18 MB).</li><li>Key Features:<ul><li>No Control Plane: No external database or telemetry required.</li><li>State Management: State is managed via a single SQLite file and a directory of function versions.</li><li>Built-in Tools: Includes a dashboard, CLI, MCP server, and an AI assistant for instance operation.</li><li>Simplified Development: Write handlers without needing to learn complex new concepts.</li><li>Runtimes: Supports latest-stable Node.js and Python. TypeScript is supported via build-time compilation to JavaScript.</li><li>Integrated SDK: Provides built-in capabilities for Storage, function-to-function calls, background jobs, and schedules.</li><li>Isolation: Features five layers of kernel-enforced isolation: User namespace, Read-only root, Private filesystem, cgroup v2 limits, and seccomp allowlist.</li><li>Network Control: Network access is off by default, with options for egress traffic through a userspace network stack.</li><li>Operate: Offers features like KV store, function-to-function calls, streaming responses, background jobs, cron schedules, webhooks, tracing, invocation logs, activity feed, deployments with rollback, warm pools, egress control, API keys, MCP server, and an AI assistant.</li><li>What it is Not: Not multi-tenant, not a defense against kernel zero-days, not a managed platform, and not a horizontal cluster.</li></ul></li><li>Installation: Easily install via Docker Compose, Docker, bare metal script, or CLI-only installation.</li><li>Open Source: Licensed under Apache 2.0, with the runtime, dashboard, CLI, and MCP server in a single repository.</li></ul>