The hardened image that runs on your premises and updates itself
Soklvia delivers the image and its lifecycle on off-the-shelf European hardware: verified boot, signed updates with automatic rollback, integrity attestation and an inventory of what is really running.
No hardware to manufacture: the image and its updates, on the server you choose.
Three steps: build, update, prove
Soklvia does not sell a box: it maintains the image end to end, from its reproducible build to proof of what is really running at the customer's site.
A hardened, reproducible image
The Debian image is built by mkosi in a reproducible way, then starts with verified boot. The same artifact serves a virtual machine or an off-the-shelf server.
A signed update, without risk
Updates arrive through a channel with signed metadata (TUF) and are installed on a dual partition (RAUC): if startup fails, the system returns by itself to the previous version.
Proof and inventory
The appliance attests its integrity remotely and publishes the inventory of what is really running. You know what is installed, and whether it is what you validated.
What runs on your premises is what you validated
An on-site installation is only worth something if it can be trusted: hardened image, controlled boot, authenticated updates, state verifiable remotely.
-
Hardened imageA minimal Debian base, built in a reproducible way.
-
Verified bootSecure Boot and a signed unified image: what starts is what was signed.
-
Signed update channelSigned metadata and automatic rollback in case of failure.
-
Integrity attestationThe machine's state is proven remotely, without access to your data.
The lifecycle of an installation, end to end
The foundation is under development, step by step; what is not delivered is not announced as such.
Hardened image
Minimal, reproducible Debian image, built with mkosi.
Verified boot
Secure Boot and a signed unified image, to start only what is trusted.
A/B update
Dual partition and automatic rollback if the new version does not start.
Signed channel
Signed update metadata: an unsigned version is never installed.
Integrity attestation
Remote proof of the machine's state, verifiable by the customer.
Real inventory
The list of what really runs at the customer's site, not of what should be running there.
On your premises, without depending on us
Soklvia is designed to run on the customer's infrastructure, even without a link to the galaxy: an unreachable component triggers an announced fallback, never a silent block.
Virtual machine or server
The same artifact is imported into a European virtual machine or written to an off-the-shelf server.
Local emergency account
Accounts go through Idenva when it is reachable; a documented local account takes over otherwise.
Help in degraded mode
Help relies on Kopilvia when it responds, on local content otherwise, and says so.
Pricing coming soon
No price has been set yet: they will be published at launch, aligned with the offers of the SANTVIA galaxy.
Soklvia brings the rest of the galaxy to the customer's premises
Each SANTVIA product remains usable on its own; Soklvia is the vehicle that makes it possible to host them all on site and keep them up to date.
Frequently asked questions
Does Soklvia sell hardware?
No. Soklvia is the image and its lifecycle, installed on off-the-shelf European hardware or in a virtual machine. Manufacturing hardware is not its purpose.
What happens if an update fails?
The update is installed on a second partition. If the new version does not start, the system automatically returns to the previous version.
Can I host it myself without a link to SANTVIA?
Yes, that is the target. If Idenva or Kopilvia do not respond, Soklvia switches to a documented local fallback and announces it, never pretending.
How do I know the image has not been modified?
Boot is verified, updates are signed, and the appliance can attest its integrity remotely; the inventory tells what is really running.
Is Soklvia free?
Pricing is not yet set. It will be published at launch: no price is announced before it is committed.
Is Soklvia available yet?
No. The foundation is being developed in stages. Join the waitlist to follow progress.
Be notified when Soklvia launches
The foundation is under development. Join the waitlist to follow progress.