Banner image


A safe space in the cloud

A new kind of operating system.

Metropolis is an open-source, secure, API-driven and minimal operating system unlike any other. It is based on Linux and Kubernetes, but with a clean userland rebuilt entirely from scratch, written in pure Go — eliminating decades worth of legacy code and unnecessary complexity.

It runs on a fleet of bare metal or cloud machines and provides users with a hardened, production ready Kubernetes, without the overhead of traditional Linux distributions or configuration management systems. It does away with the scripting/YAML duct tape and configuration drift inherent to traditional deployments. Instead, it provides a stable API-driven platform free of vendor lock-in and with none of the drudgery.

Our minimalistic and principled design reduces the attack surface by orders of magnitude, providing a level of security never seen before in a server operating system. With full end-to-end attestation, secure boot and managed encryption, Metropolis is suitable as a secure enclave for the most sensitive workloads.

Get ready for our first release

Metropolis is in active development and will soon release its first alpha release for you to try. Subscribe to our mailing list to be notified:

Take a peek and star us on GitHub

The Monogon project's monorepo lives on GitHub. The code is still a work in progress. If you're curious, take a look – it boots (in a VM)!