426 lines
22 KiB
HTML
426 lines
22 KiB
HTML
{{define "content"}}
|
|
{{template "nav" .}}
|
|
|
|
<main id="main">
|
|
|
|
<!-- Hero -->
|
|
<section class="hero">
|
|
<div class="hero-inner">
|
|
<h1>
|
|
The Linux OS for<br>
|
|
<span class="hero-highlight">people who defend infrastructure.</span>
|
|
</h1>
|
|
<p class="tagline">
|
|
Hardened Debian base. Pre-configured security stack — SIEM agent, network
|
|
IDS, compliance scanning. Zero telemetry. Your systems are defense-ready
|
|
from first boot.
|
|
</p>
|
|
<div class="hero-actions">
|
|
<a href="#get-started" class="cta">Get Early Access</a>
|
|
<a href="#about" class="cta-secondary">Learn more</a>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<!-- Editions -->
|
|
<section id="editions" class="section">
|
|
<div class="section-inner">
|
|
<div class="section-label">Editions</div>
|
|
<h2>Our flagship Arcline OS variants<br>for different use cases.</h2>
|
|
<p class="section-desc">
|
|
Pick the edition that matches your role. All share the same
|
|
hardened Debian base and zero-telemetry guarantee.
|
|
</p>
|
|
<div class="editions-grid">
|
|
<div class="edition-card">
|
|
<div class="edition-icon">
|
|
<svg width="32" height="32" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<rect x="2" y="2" width="20" height="20" rx="3"/>
|
|
<rect x="6" y="6" width="12" height="12" rx="1.5"/>
|
|
</svg>
|
|
</div>
|
|
<h3>Arcline Server</h3>
|
|
<p>A hardened, production-ready host for SOC and production use — built-in SIEM agent and network IDS on top of the hardened base, with zero telemetry.</p>
|
|
<div class="card-actions">
|
|
<a href="#get-started" class="card-btn card-btn-primary">Get Access</a>
|
|
<a href="/server" class="card-btn card-btn-secondary">Learn More</a>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="edition-card">
|
|
<div class="edition-icon">
|
|
<svg width="32" height="32" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<rect x="2" y="3" width="20" height="14" rx="2"/>
|
|
<path d="M8 21h8"/>
|
|
<path d="M12 17v4"/>
|
|
</svg>
|
|
</div>
|
|
<h3>Arcline Workstation</h3>
|
|
<p>A security analyst / blue-team workstation — KDE Plasma, pre-configured dev toolchains, privacy-hardened browser, forensics-friendly tooling, and secrets scanning.</p>
|
|
<div class="card-actions">
|
|
<a href="#get-started" class="card-btn card-btn-primary">Get Access</a>
|
|
<a href="/workstation" class="card-btn card-btn-secondary">Learn More</a>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="edition-card">
|
|
<div class="edition-icon">
|
|
<svg width="32" height="32" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<circle cx="12" cy="12" r="10"/>
|
|
<path d="M2 12h20"/>
|
|
<path d="M12 2a15.3 15.3 0 014 10 15.3 15.3 0 01-4 10"/>
|
|
<path d="M12 2a15.3 15.3 0 00-4 10 15.3 15.3 0 004 10"/>
|
|
</svg>
|
|
</div>
|
|
<h3>Arcline Cloud</h3>
|
|
<p>Minimal cloud images with a small attack surface — Falco runtime security and CIS benchmark scanning built in. Ready for AWS, GCP, Azure, or private cloud.</p>
|
|
<div class="card-actions">
|
|
<a href="#get-started" class="card-btn card-btn-primary">Get Access</a>
|
|
<a href="/cloud" class="card-btn card-btn-secondary">Learn More</a>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<!-- What is Arcline OS -->
|
|
<section id="about" class="section section-alt">
|
|
<div class="section-inner">
|
|
<div class="section-label">What is Arcline OS?</div>
|
|
<h2>A Debian-derived OS that doesn't<br>make you start from scratch.</h2>
|
|
<p class="section-desc">
|
|
Debian gives you a rock-solid base. Arcline OS hardens it, layers on a
|
|
full security and observability stack, and ships with pre-configured
|
|
container infrastructure. No telemetry. No snap store. No cloud
|
|
integration. Just a secure, auditable OS that respects your hardware.
|
|
</p>
|
|
<div class="principles-grid">
|
|
<div class="principle">
|
|
<div class="principle-icon">
|
|
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<rect x="3" y="3" width="18" height="18" rx="3"/>
|
|
<path d="M8 12l2.5 2.5L16 9"/>
|
|
</svg>
|
|
</div>
|
|
<div>
|
|
<h3>Secure by default</h3>
|
|
<p>Hardened kernel with lockdown, seccomp, and AppArmor profiles. Default-deny nftables firewall. You opt in to exposure — never out.</p>
|
|
</div>
|
|
</div>
|
|
<div class="principle">
|
|
<div class="principle-icon">
|
|
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<circle cx="12" cy="12" r="10"/>
|
|
<path d="M12 6v6l4 2"/>
|
|
</svg>
|
|
</div>
|
|
<div>
|
|
<h3>Privacy-first</h3>
|
|
<p>Zero telemetry. Zero analytics. Zero cloud integration. No network calls you didn't initiate.</p>
|
|
</div>
|
|
</div>
|
|
<div class="principle">
|
|
<div class="principle-icon">
|
|
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<rect x="2" y="2" width="20" height="20" rx="3"/>
|
|
<rect x="6" y="6" width="12" height="12" rx="1.5" stroke-dasharray="3 2"/>
|
|
</svg>
|
|
</div>
|
|
<div>
|
|
<h3>btrfs-native</h3>
|
|
<p>btrfs root with subvolume snapshots, transparent compression, and boot-to-snapshot rollback — not bolted on, built in.</p>
|
|
</div>
|
|
</div>
|
|
<div class="principle">
|
|
<div class="principle-icon">
|
|
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<path d="M4 7h16v12H4V7z"/>
|
|
<path d="M8 3v4"/>
|
|
<path d="M16 3v4"/>
|
|
<path d="M4 13h16" stroke-dasharray="2 1"/>
|
|
</svg>
|
|
</div>
|
|
<div>
|
|
<h3>Developer-ready</h3>
|
|
<p>Go, Rust, Python, Node.js toolchains pre-configured. Git, Make, LLVM/Clang included. Start building immediately.</p>
|
|
</div>
|
|
</div>
|
|
<div class="principle">
|
|
<div class="principle-icon">
|
|
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<circle cx="12" cy="12" r="3"/>
|
|
<path d="M12 2L22 8.5v7L12 22 2 15.5v-7L12 2z"/>
|
|
</svg>
|
|
</div>
|
|
<div>
|
|
<h3>Infrastructure-aware</h3>
|
|
<p>Observability that feeds your security stack — node_exporter, Grafana, Loki, and a pre-configured host security agent, out of the box.</p>
|
|
</div>
|
|
</div>
|
|
<div class="principle">
|
|
<div class="principle-icon">
|
|
<svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<path d="M4 4h8l4 4v12H4V4z"/>
|
|
<path d="M12 4v4h4"/>
|
|
<line x1="8" y1="12" x2="16" y2="12" stroke-opacity="0.5"/>
|
|
<line x1="8" y1="15" x2="13" y2="15" stroke-opacity="0.5"/>
|
|
</svg>
|
|
</div>
|
|
<div>
|
|
<h3>Fully documented</h3>
|
|
<p>Every feature and tool includes offline man pages and a hardening guide. You own the system — and you understand it.</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<!-- What's Included -->
|
|
<section class="section">
|
|
<div class="section-inner">
|
|
<div class="section-label">What's Included</div>
|
|
<h2>Production-ready from first boot.</h2>
|
|
<p class="section-desc">
|
|
Arcline OS layers pre-configured infrastructure and security tooling on top
|
|
of a hardened Debian base. Everything is documented, auditable, and yours.
|
|
</p>
|
|
<div class="stack-grid">
|
|
<div class="stack-card">
|
|
<div class="stack-header">Base System</div>
|
|
<ul>
|
|
<li>Debian stable (Bookworm)</li>
|
|
<li>Hardened Linux kernel (lockdown, seccomp)</li>
|
|
<li>btrfs root + snapshot rollback</li>
|
|
<li>nftables firewall (default-deny)</li>
|
|
<li>Docker + Podman containers</li>
|
|
</ul>
|
|
</div>
|
|
<div class="stack-card">
|
|
<div class="stack-header">Developer Environment</div>
|
|
<ul>
|
|
<li>Go, Rust, Python, Node.js</li>
|
|
<li>Git, Make, CMake, LLVM/Clang</li>
|
|
<li>Docker / Podman pre-configured</li>
|
|
<li>VS Code / Helix / Vim configs</li>
|
|
</ul>
|
|
</div>
|
|
<div class="stack-card">
|
|
<div class="stack-header">Observability</div>
|
|
<ul>
|
|
<li>Prometheus node_exporter</li>
|
|
<li>Grafana dashboards</li>
|
|
<li>Loki log aggregation</li>
|
|
<li>Pre-built alerting rules</li>
|
|
</ul>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<!-- Security Stack -->
|
|
<section id="security" class="section">
|
|
<div class="section-inner">
|
|
<div class="section-label">Security Stack</div>
|
|
<h2>Defense-in-depth, pre-configured<br>from first boot.</h2>
|
|
<p class="section-desc">
|
|
Beyond the hardened base, Arcline OS ships a named security tooling layer —
|
|
host and network detection, malware and secrets scanning, compliance and
|
|
runtime checks. Pre-configured, documented, and yours.
|
|
</p>
|
|
<div class="security-grid">
|
|
<div class="stack-card">
|
|
<div class="stack-header">Host IDS / SIEM</div>
|
|
<ul>
|
|
<li>Wazuh agent, pre-configured</li>
|
|
<li>Host + integrity telemetry to your SIEM</li>
|
|
</ul>
|
|
</div>
|
|
<div class="stack-card">
|
|
<div class="stack-header">Network IDS</div>
|
|
<ul>
|
|
<li>Suricata (or Zeek)</li>
|
|
<li>Detects malicious traffic, not just uptime</li>
|
|
</ul>
|
|
</div>
|
|
<div class="stack-card">
|
|
<div class="stack-header">Malware Scanning</div>
|
|
<ul>
|
|
<li>ClamAV baseline scanning</li>
|
|
<li>Scheduled and on-demand</li>
|
|
</ul>
|
|
</div>
|
|
<div class="stack-card">
|
|
<div class="stack-header">Compliance Scanning</div>
|
|
<ul>
|
|
<li>OpenSCAP + CIS Benchmark profiles</li>
|
|
<li>Mapped toward HIPAA, PCI-DSS, SOC 2</li>
|
|
</ul>
|
|
</div>
|
|
<div class="stack-card">
|
|
<div class="stack-header">Runtime Security</div>
|
|
<ul>
|
|
<li>Falco — container / syscall anomalies</li>
|
|
<li>Cloud edition</li>
|
|
</ul>
|
|
</div>
|
|
<div class="stack-card">
|
|
<div class="stack-header">Secrets Scanning</div>
|
|
<ul>
|
|
<li>gitleaks + trufflehog</li>
|
|
<li>Workstation / dev edition</li>
|
|
</ul>
|
|
</div>
|
|
<div class="stack-card">
|
|
<div class="stack-header">Supply Chain / SBOM</div>
|
|
<ul>
|
|
<li>syft + grype</li>
|
|
<li>Know what's installed, catch known CVEs</li>
|
|
</ul>
|
|
</div>
|
|
<div class="stack-card">
|
|
<div class="stack-header">System Auditing</div>
|
|
<ul>
|
|
<li>Lynis hardening score</li>
|
|
<li>Continuous, post-install</li>
|
|
</ul>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="compliance-callout">
|
|
<div class="compliance-badge">Compliance-ready by default</div>
|
|
<p>
|
|
Arcline OS ships CIS Benchmark-aligned by default, with compliance scanning
|
|
mapped toward <strong>HIPAA</strong>, <strong>PCI-DSS</strong>, and
|
|
<strong>SOC 2</strong> control families. The OS itself isn't certified —
|
|
only audited deployments can be — but the defaults give you a running start.
|
|
</p>
|
|
</div>
|
|
|
|
<p class="security-note">
|
|
The Wazuh agent pairs naturally with
|
|
<a href="https://arcline.it" class="inline-link">Arcline IT's</a>
|
|
Wazuh-based managed monitoring. Want the whole stack run and watched for you?
|
|
Arcline IT's managed security services cover hardening, monitoring, and response.
|
|
</p>
|
|
</div>
|
|
</section>
|
|
|
|
<!-- Why Arcline OS -->
|
|
<section class="section">
|
|
<div class="section-inner">
|
|
<div class="section-label">Why Arcline OS?</div>
|
|
<h2>No major Linux distro ships<br>pre-hardened for production.</h2>
|
|
<p class="section-desc">
|
|
Debian gives you the packages. Arcline OS assembles them into a finished
|
|
system. A privacy-first, zero-telemetry operating system with built-in
|
|
monitoring, auditing, and security — configured the way you'd do it
|
|
yourself, if you had the weekend.
|
|
</p>
|
|
<div class="compare-grid">
|
|
<div class="compare-card">
|
|
<div class="compare-label">Ubuntu Server</div>
|
|
<div class="compare-desc">Great ecosystem and hardware support — but Snap packages and cloud integration are baked in by default.</div>
|
|
</div>
|
|
<div class="compare-card">
|
|
<div class="compare-label">Fedora Server</div>
|
|
<div class="compare-desc">Cutting-edge kernel and tooling — but rapid release cycles mean more churn on production machines.</div>
|
|
</div>
|
|
<div class="compare-card">
|
|
<div class="compare-label">Alpine Linux</div>
|
|
<div class="compare-desc">Minimal and musl-based — ideal for containers, but limited as a full-featured server workstation.</div>
|
|
</div>
|
|
<div class="compare-card">
|
|
<div class="compare-label">Kali Linux</div>
|
|
<div class="compare-desc">A great offensive-security and pentesting toolkit — but built to break in, not to serve as a hardened daily-driver production OS.</div>
|
|
</div>
|
|
<div class="compare-card">
|
|
<div class="compare-label">Security Onion</div>
|
|
<div class="compare-desc">An excellent network security monitoring platform — but not a general-purpose or developer-ready OS for your day-to-day hosts.</div>
|
|
</div>
|
|
<div class="compare-card compare-highlight">
|
|
<div class="compare-label">Arcline OS</div>
|
|
<div class="compare-desc">Hardened Debian base. Pre-configured security stack. Built-in observability. Zero telemetry. Ready to deploy.</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<!-- Contribute -->
|
|
<section id="contribute" class="section section-alt">
|
|
<div class="section-inner">
|
|
<div class="section-label">Community</div>
|
|
<h2>Built in the open. Shaped by the<br>people who use it.</h2>
|
|
<p class="section-desc">
|
|
Arcline OS is open-source under the GPL. The code lives on
|
|
<a href="https://git.arcline.it" class="inline-link">git.arcline.it</a>.
|
|
Every config, every build script — auditable and forkable.
|
|
</p>
|
|
<div class="contribute-grid">
|
|
<a href="https://git.arcline.it" class="contribute-card">
|
|
<div class="contribute-icon">
|
|
<svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<path d="M9 19c-5 1.5-5-2.5-7-3m14 6v-3.87a3.37 3.37 0 00-.94-2.61c3.14-.35 6.44-1.54 6.44-7A5.44 5.44 0 0020 4.77 5.07 5.07 0 0019.91 1S18.73.65 15.23 2.5a13.38 13.38 0 00-7 0C5.27.65 4.09 1 4.09 1A5.07 5.07 0 004 4.77a5.44 5.44 0 00-1.5 3.78c0 5.42 3.3 6.61 6.44 7A3.37 3.37 0 008 18.13V22"/>
|
|
</svg>
|
|
</div>
|
|
<span>Browse the source</span>
|
|
<small>Build scripts, packaging, and infrastructure code.</small>
|
|
</a>
|
|
<a href="https://git.arcline.it" class="contribute-card">
|
|
<div class="contribute-icon">
|
|
<svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<path d="M14 2H6a2 2 0 00-2 2v16a2 2 0 002 2h12a2 2 0 002-2V8z"/>
|
|
<polyline points="14 2 14 8 20 8"/>
|
|
<line x1="16" y1="13" x2="8" y2="13"/>
|
|
<line x1="16" y1="17" x2="8" y2="17"/>
|
|
</svg>
|
|
</div>
|
|
<span>Read the docs</span>
|
|
<small>Hardening guides, install docs, and infrastructure cookbook.</small>
|
|
</a>
|
|
<a href="https://git.arcline.it" class="contribute-card">
|
|
<div class="contribute-icon">
|
|
<svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
|
|
<circle cx="12" cy="12" r="10"/>
|
|
<path d="M12 6v6l4 2"/>
|
|
</svg>
|
|
</div>
|
|
<span>Contribute</span>
|
|
<small>Submit patches, report issues, or join the discussion.</small>
|
|
</a>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<!-- Get Started -->
|
|
<section id="get-started" class="section">
|
|
<div class="section-inner">
|
|
<div class="section-label">Get Started</div>
|
|
<h2>Arcline OS is in active development.<br>Be there at the start.</h2>
|
|
<p class="section-desc">
|
|
We're building the ISO pipeline and hardening the defaults.
|
|
Sign up to receive early access and help shape the first release.
|
|
</p>
|
|
{{template "waitlistForm" .}}
|
|
</div>
|
|
</section>
|
|
|
|
<!-- Sponsor -->
|
|
<section class="section section-alt sponsor-section">
|
|
<div class="section-inner">
|
|
<div class="section-label">Sponsored By</div>
|
|
<div class="sponsor-content">
|
|
<div class="sponsor-desc">
|
|
<p>The Arcline Project is funded and operated by <strong>Arcline IT LLC</strong> — the same model as Red Hat and Fedora. The commercial services business at <a href="https://arcline.it" class="inline-link">arcline.it</a> keeps the lights on so the OS stays independent and sustainable.</p>
|
|
<p>Arcline IT also offers managed security services — hardening, Wazuh-based monitoring, and response — for teams that want Arcline OS run and watched for them.</p>
|
|
</div>
|
|
<div class="sponsor-tagline">Secure by default. Self-hosted by principle.</div>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
</main>
|
|
|
|
{{template "footer" .}}
|
|
{{end}}
|
|
|