ONYX.

v0.5 "Quartz" · platform surfaces shipped

The self-hosted platform
your storage deserves.

ONYX — the Online Storage System — is an open-source NAS and infrastructure platform: Btrfs storage with first-class snapshots, virtualization, S3-compatible object storage, backups and app hosting — with the v0.5 intelligence surfaces: the AI Storage Advisor, Backup Intelligence, audit reporting and pool-wide search. Enterprise-grade fundamentals, home-tier hardware, zero cloud accounts.

Get started Design docs
$ git clone https://github.com/innotelinc/onyx && cd onyx && cp .env.example .env && ./setup.sh
< 512 MBidle RAM target
< 60 sboot to login
6 protocolsSMB · NFS · FTP · SFTP · WebDAV · Rsync
12 servicesGo control plane · Rust data plane

Storage-first, app-friendly, lightweight.

The storage safety of TrueNAS, the app experience of a modern home server — at a fraction of the hardware appetite.

Safe by default

Btrfs checksums, quotas and scrub; snapshots on; atomic A/B updates with auto-rollback. Every destructive action has a restore path.

Low hardware appetite

Boots in under a minute and idles under 512 MB — a mini-PC, a server, or the laptop in the drawer is enough.

One share model

Create a share once, expose it over SMB, NFS, FTP, SFTP, WebDAV and Rsync. Config is rendered, validated and reloaded atomically.

Hotplug that just works

Kernel uevent-driven device detection: plug a drive in and it's mounted and shared almost instantly — no daemon zoo, no polling.

Modular services

Small, single-purpose daemons behind one typed gRPC API — Rust where the filesystem demands safety, Go for fast orchestration.

Private by design

Local-first, no mandatory cloud account, no telemetry. SSO via Authentik (OIDC) for every service, wildcard TLS out of the box.

A real system, not a slide deck.

The v0.1 "Cinder" skeleton is installable today: bootable OSTree base image, systemd services, gRPC contracts as the source of truth, and a CLI that talks to the whole stack.

onyx-core · Go

Control plane: system status, share CRUD, config applier, hotplug reconciler.

onyx-storaged + onyx-privd · Rust

Data plane: pool discovery, uevent hotplug, SMART health — with a single root privilege boundary.

onyx-api + onyx CLI

HTTP gateway with a versioned REST surface, and the onyx CLI that drives it all.

Platform daemons

Snapshots, backups, VMs, apps, AI advisor, S3 object store — proto contracts defined, landing per milestone.

# build + run the whole control & data plane
$ make bootstrap build
$ scripts/dev.sh start

$ bin/onyx status
core 0.1.0-dev
  onyx-core      SERVING
  onyx-storaged  SERVING
  onyx-shared    SERVING
  onyx-privd     SERVING

$ bin/onyx share create media /mnt/onyx/pool1/@data/media --smb --nfs
share 'media' created — rendered smb.conf + exports, reloaded

One platform, six doors.

The console is the apex — onyx.innotel.us — and every other surface hangs off its own subdomain, all under one wildcard Let's Encrypt certificate that covers the apex too: provisioned automatically, TLS terminated at Nginx Proxy Manager, SSO via Authentik. Each link below is checked against what the surface actually serves: the console, API and Backup links open a live endpoint, and admin is reserved until there is an operations surface to put there.

Consoleonyx.innotel.us · Unity consolelive APIapi.onyx.innotel.us · /api/v1/system/statuslive Identityauth.onyx.innotel.us · Authentiklive Storagestorage.onyx.innotel.us · S3 (credentials required)live Backupbackup.onyx.innotel.us · /api/v1/backupslive
Adminadmin.onyx.innotel.us · reserved for a future operations surfacereserved

About ONYX.

ONYX — the Online Storage System — is a next-generation storage and infrastructure platform that replaces TrueNAS and ZimaOS: enterprise-grade storage, virtualization, S3-compatible object storage, backup management, cloud synchronization and application hosting in one self-hosted stack. SSO everywhere via Cerulean Authentik, safe by default with Btrfs snapshots and atomic A/B rollback, and no cloud account required.

Where it stands today

  • v0.1 "Cinder" — the control/data plane and platform layer ship and run
  • v0.2 "Flint" — the console shell, versioned API views, user roles and share permissions
  • v0.3 "Obsidian" — persistent snapshots, rollback, backup jobs, recovery reports and SMART-backed health
  • v0.4 "Jade" — app store and containers, VMs, S3 buckets with tiering, the full share-protocol surface, and the Unity console
  • Boots in under a minute, idles under 512 MB RAM; 12 containerized services

Who owns what

  • ONYX — StorageOps: file and object storage, backups, snapshots, NAS
  • Cerulean — identity, trust and secrets (Vault is the only secret store; .env carries derived vault:// references)
  • NPM Edge — TLS and routing: one wildcard certificate per zone

Licence and source

The core OS is AGPL-3.0; the SDK under sdk/ is Apache-2.0. Source, releases and the full twelve-document design specification are public: github.com/innotelinc/onyx · design docs · releases.

Roadmap.

Monthly cadence during beta — public, honest, and driven by the design docs.

v0.1 "Cinder"

Skeleton: bootable OSTree base, onyx-core, storage daemons, API, CLI, platform layer.

shipped
v0.2 "Flint"

Files: the console shell, file explorer, SMB/NFS shares UX, users & permissions.

shipped
v0.3 "Obsidian"

Safety: snapshots + rollback UI, persistent backup jobs, recovery reports, SMART monitoring.

shipped
v0.4 "Jade"

Apps: app store + container runtime, VMs on libvirt/KVM, S3 buckets with hybrid-cloud tiering, full protocol surface.

shipped
v0.5 "Quartz"

Intelligence: the AI Storage Advisor and Backup Intelligence, an Advisor page in the console, audit reporting and pool-wide search.

shipped
v1.0

Release: security audit, docs, hardening, LTS update channel.

later