Sandboxed by default
Agents run as ephemeral, isolated systemd processes. They cannot read host secrets or write outside their allowed paths.
hearth
An opinionated, reproducible, security-first Linux system where local LLMs and agents run sandboxed by default, every run is audited, and system state is legible from boot.
Get started
Existing NixOS host Already running NixOS? Apply hearth with a single rebuild.
Fresh install (VM / Proxmox) Build an image and boot hearth in a virtual machine or on bare metal.
New to Linux? Start with the NixOS primer, then come back and pick a path.
Why hearth
Every run audited
Tokens, cost, latency, and errors for every agent run land in a local SQLite store. Query the last 20 runs in one command.
Reproducible
The whole OS is one flake. A rebuild brings any NixOS host to the exact defined state, with atomic, bootloader-level rollback.
Legible from boot
A boot dashboard shows model status, system state, and recent runs the moment you log in.
Built by Eric Catalano. See the About page for the project, links, and license.