I mean, to be honest it does look like sandstorm development has almost stopped for the past couple of years...or am I missing something? https://github.com/sandstorm-io/sandstorm/graphs/code-freque...
In Cloud in a Bottle: making self-hosting accessible to everyonesandstorm-io
sandstorm
JavaScript2014–2026
sandstorm-io / sandstorm
sandstorm
Sandstorm is a self-hostable web productivity suite. It's implemented as a security-hardened web app package manager.
21Distinct people
53Mentions
0Explicit recommenders
7.1KGitHub stars
What to know before exploring
What it is
Sandstorm is a self-hostable web productivity suite. It's implemented as a security-hardened web app package manager.
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 5:04:57 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year53 dated mentions
Observed mentions: 2014-06-29 18:44:23 UTC to 2026-09-06 13:44:51 UTC.
* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2014 | 2014-01-01 00:00:00 UTC | 2015-01-01 00:00:00 UTC | 11 | 0 | 11 |
| 2015 | 2015-01-01 00:00:00 UTC | 2016-01-01 00:00:00 UTC | 12 | 0 | 12 |
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 10 | 0 | 10 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 5 | 1 | 4 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 4 | 0 | 4 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2026 (partial) | 2026-01-01 00:00:00 UTC | 2027-01-01 00:00:00 UTC | 1 | 0 | 1 |
From the project README
An excerpt from the repository, fetched Nov 13, 2026.
Read the project’s introduction
Sandstorm
Sandstorm is a self-hostable web productivity suite. It's implemented as a security-hardened web app package manager. Sandstorm makes it easy to run your own server.
Use Sandstorm to install apps to create documents,
spreadsheets, blogs,
git repos, task lists, and
more as easily as you'd install apps on your
phone.
Sandstorm is open source and can be installed on any x86-64 Linux
system.
Read more at: https://sandstorm.io/
Try the demo: https://demo.sandstorm.io/
Documentation available at: https://docs.sandstorm.io/
Installing
See installation instructions in the Sandstorm documentation.
Using Sandstorm
See the overview in the Sandstorm documentation.
How It Works
See how it works and security practices in the Sandstorm documentation.
How to Package Apps
See the developer hub in the Sandstorm documentation.
Contribute
Want to help? Check out CONTRIBUTING.md. Also see our community page or get on our discussion group and let us know!
Read the full README on GitHubWhat Hacker News says
53 sourcesIf I understood it well enough, the intention was to formalize/standardize self-hosting such that it became easier (and with an emphasis on security).
With that done well, perhaps the next step would have been ready-made images. I could see it reducing friction for people if they'd rent a VPS, upload an ISO/IMG, and the resulting system was reliably secure. Then they'd use the Sandstorm interface to install apps with a web GUI.
There is still a roadmap documented here:
https://github.com/sandstorm-io/sandstorm/tree/master/roadma...
In Sandstorm- self-hostable web productivity suitehttps://github.com/sandstorm-io/sandstorm/commits/master/
Doesn't look like there is a lot of momentum left?
In Show HN: OmniTools – Self-Hosted Open-Source Swiss Army Knife for Everyday TasksFor me, the biggest blocker for using Sandstorm has been the inability to run on ARM https://github.com/sandstorm-io/sandstorm/issues/2083
In Sandstorm: Open-source platform for self-hosting web apps> Another attempt is sandstorm.io but it was abandoned by the original authors.
Sandstorm is still maintained:
https://github.com/sandstorm-io/sandstorm
https://sandstorm.io
At Libera.Chat IRC #sandstorm . Welcome :)
In WASIX, the Superset of WASI Supporting Threads, Processes and SocketsLooks like we're a couple days late on a release. (The current release is 32 days old.) If you edit the install script about here: https://github.com/sandstorm-io/sandstorm/blob/master/instal... to go for say, 45 days instead of 30, it'll work just fine.
In I wish my web server were in the corner of my roomWish it still worked...on a BRAND new VM.
GPG signature is valid.
** INSTALLATION FAILED **
The downloaded package seems to be more than a month old. Please verify that
your computer's clock is correct and try again. It could also be that an
attacker is trying to trick you into installing an old version. Please contact
security@sandstorm.io if the problem persists.
Hmm, installation failed. Would it be OK to send an anonymous error report to the sandstorm.io team so we know something is wrong?
It would only contain this error code: E_PKG_STALE [yes]
Sending problem report...
Submitting error report failed. Maybe there is a connectivity problem.
You can report bugs at: http://github.com/sandstorm-io/sandstorm
In I wish my web server were in the corner of my roomI did this with code once: https://github.com/sandstorm-io/sandstorm/pull/2899/files
In Georgia teacher read the fine print and won $13K (2019)Sandstorm itself is updated at least once a month:
https://github.com/sandstorm-io/sandstorm/blob/master/CHANGE...
A few of the apps get regular updates, but admittedly a lot of them have gone stale. Sandstorm's security model makes it so that this isn't a security risk in the way it would be on other platforms, but it's certainly disappointing if you're looking for the latest versions of apps.
In We Switched to MattermostHonestly, the biggest pain point around adding ARM support is that it'll be a pain to create ARM-compatible packages for all the apps. I definitely think the largest unanswered question in ARM support for Sandstorm.io is "how do we make it convenient for app developers to release packages for multiple architectures?"
That being said, I'd be super excited at the possible expansion of the community ARM support would bring.
By the way, regarding seccomp and the platform receiving love, there's actually a new experimental seccomp filter which operates as a whitelist instead of a blacklist: https://github.com/sandstorm-io/sandstorm/pull/3502
In Peer-to-Peer Databases for the Decentralized Web> apparently no major releases
I push at least one release each month. The change log is here:
https://github.com/sandstorm-io/sandstorm/blob/master/CHANGE...
But it's certainly true that development is much slower today than it was in 2016 when there were seven people working full-time on it.
In Cockpit – Integrated, glanceable, web-based interface for serversFailed? Website looks open for business, and latest commit 6d ago:
https://github.com/sandstorm-io/sandstorm
Agree that it sounds exactly like what OP is imagining, website even has the copy 'installing apps is as easy as on your phone'.
I also think Urbit is similar, but frankly I've always been too confused by the space analogies that project uses to be sure.
In My Second Phone Is in the CloudExtended opinion on this by someone formerly Google and currently Cloudflare: https://github.com/sandstorm-io/sandstorm/issues/3036#issuec...
tl;dr is that Google is not supporting features in BoringSSL that Google doesn't need, but it's probably adequate for a lot of other projects.
In Quiche – An implementation of the QUIC transport protocol in Rustlinux namespaces can be aggressively locked down. for example sandstorm by kenton varda has not been vulnerable to any of the recent linux kernel vulnerabilities except for badiret and a TLB bug (https://github.com/sandstorm-io/sandstorm/blob/master/docs/u...). it certainly wasn't vulnerable to dirty cow which is quite difficult to protect against.
however, i think docker may have been vulnerable against dirty cow. [https://github.com/gebl/dirtycow-docker-vdso] i'm not sure if this was before or after jessie's work on securing docker.
also, i don't think gvisor would have been vulnerable to dirty cow. it looks like it 'gates' all the mmap/munmap/madvise syscalls through a sentry process which does some kind of emulation of virtual memory through some magic. [https://github.com/google/gvisor/blob/797cda301677abc8523d5a...]. like ultimately
Read the rest
, i think mmap() system calls need to be executed in the monitored process but i think they are only done by the sentry using ptrace and if the sentry dies then i assume it is the root of the pid namespace so the process it is monitoring is killed as well.
How much translating is he looking to do? What languages does he translate to?
Sandstorm.io recently added i18n, but only has a handful of community contributed translations so far: https://github.com/sandstorm-io/sandstorm/tree/master/shell/...
Sandstorm is a self-hostable web app platform which can help free people from proprietary cloud services. It's also a nifty way for people to develop and deploy small/niche web apps that aren't sustainable as a business on their own.
Various apps I use inside Sandstorm, of course, also could always use translation help as well. Etherpad, EtherCalc, Wekan, etc. Some are much more translated than Sandstorm, some are in about the same place. (EtherCalc could really use some translation love: https://github.com/audreyt/ethercalc/tree/master/l10n)
In Ask HN: Open-source Projects that need translations?Showing the 15 most recent of 53 sources. Enable JavaScript to search and browse every indexed mention.