papercomputeco/stereOS

What it solves

It provides a hardened, minimal Linux-based operating system specifically designed to host and run AI agents securely. It addresses the need for a controlled environment where agents can operate without compromising the host system.

How it works

stereOS uses NixOS to build "mixtapes"—machine images that bundle a minimal Linux system with specific AI agent harnesses. The system separates administrative tasks (via an admin user) from agent operations (via an agent user with a restricted PATH). It utilizes two primary orchestration daemons, stereosd and stereosd and agentd, to manage the agent's lifecycle and act as a control plane for operators.

Who it’s for

Developers and operators who need a secure, reproducible, and purpose-built environment to deploy AI agents in various formats, including Raw EFI, QCOW2, and AWS Lambda MicroVMs.

Highlights

• Mixtape Images: Bundles the OS and agent binaries (like opencode) into a single deployable image.
• Hardened Environment: Uses restricted user paths and dedicated orchestration daemons for agent management.
• Multi-format Support: Supports multiple image formats including Raw EFI, QCOW2, and kernel artifacts for direct boot.
• NixOS-based: Leverages NixOS for reproducible builds and configuration via custom options for SSH keys and extra packages.