Denia
A Rust-based platform that runs self-hosted services directly on Linux primitives, without Docker, containerd, or runc.
- Repository
- zainokta/denia
- Status
- v1 · single-node
- Primary language
- Rust 2024
- License
- Apache-2.0
Denia is an open-source single-node PaaS for running services on a machine you own. It combines runtime isolation, ingress, TLS, autoscaling, an OCI registry, and a web console into one Rust binary.
The project is built around a deliberately small operational footprint. Workloads run in Linux namespaces and cgroup v2 with private overlay root filesystems, while an in-process Pingora proxy handles ingress and ACME handles certificates.
The v1 scope is intentionally honest: Denia is for solo operators and homelab users who want a self-hosted control plane, not a multi-node scheduler, managed platform, or untrusted multi-tenant sandbox.
- Runs workloads without Docker, containerd, or runc using namespaces, cgroup v2, no_new_privs, and dropped capabilities.
- Combines in-process Pingora ingress and ACME TLS without a separate reverse proxy or certificate companion.
- Scales services by CPU and memory, including scale-to-zero, with a host resource ledger to avoid over-commitment.
- Deploys from a local working tree with denia push and includes an embedded OCI registry and live service console.