sandstorm-io/sandstorm

Sandstorm is an open source platform for running productivity web apps on your own server. The basic idea is similar to installing apps on a phone: once Sandstorm is running on your machine, you browse a catalog and install apps like document editors, spreadsheets, blogs, Git repositories, and task lists with a few clicks. Each app runs in its own isolated environment. The security angle is central to how Sandstorm works. Rather than running apps as ordinary processes that share access to the system, Sandstorm packages each app with strict containment rules. This means a compromised or misbehaving app cannot access data from other apps or from the host system. The project describes itself as a security-hardened package manager, and the underlying implementation uses technologies designed to enforce fine-grained capability controls. Sandstorm is designed for people who want the convenience of cloud productivity tools but prefer to keep their data on their own infrastructure instead of a third-party service. You get a personal or team server where your documents, notes, and project files live under your control, without depending on external subscription services. Installation is limited to x86-64 Linux systems. The project provides documentation covering installation, general usage, security practices, and how to package new apps for the platform. A public demo is available for trying the interface before committing to installing it. The README for this repository is sparse and points mostly to external documentation for details on setup, configuration, and development. The project is open source and accepts community contributions.