Sovereign · open source · EUPL-1.2

An operating system that belongs to Europe.

A friendly desktop built from scratch in Rust, with an office suite, sovereign AI agents, 24 European languages and full-disk encryption by default. Zero telemetry, 100% open code. Not a security tool, your everyday computer, on your terms.

Preview the interface Open the preview

No telemetry Encrypted by default 100% open code

EuroOS desktop preview

A preview of the interface we are designing, a concept of what we are building, not a finished product yet.

The vision

Why Europe needs its own desktop.

Europe runs its public life on operating systems it does not control, build, or audit. Every update, every default, every line of telemetry is decided elsewhere.

EuroOS is the first fully sovereign, from-scratch European OS for ordinary people, a microkernel in Rust, its own desktop, its own toolchain and package signing. No inherited codebase, no hidden data flows. Software you can read, trust, and shape.

Sovereign by design

Own code, own infrastructure, own keys. Hosted and governed in Europe.

Human, not corporate

Calm visuals, plain language, resolution-independent from 1080p to 8K.

Security & privacy

Secure by default, and it stays out of your way.

Protection is built into the kernel, not bolted on. You see it in friendly, plain language, never a wall of warnings.

NIS2 Art. 21 GDPR EU Cyber Resilience Act

Encrypted from boot

A verified boot chain and full-disk encryption mean a stolen device reveals nothing. Keys never leave your hardware.

Apps in their own box

Every app is sandboxed with capability tokens. It gets exactly the access it needs, and you can see and revoke it anytime.

Nothing phones home

Zero telemetry, blocked tracking pixels, no third-party cookies. Live indicators show whenever the camera, mic or location is in use.

On by default:

Full-disk encryption App sandboxing Firewall Signed apps only Telemetry off Signed, unbrickable updates

What it can do

A complete desktop, not a demo.

EuroOS isn't a kernel proof-of-concept. It's an office suite, AI agents, 24 European languages, storage that reads the disks and shares you already have, its own trust stack and a developer toolchain, every layer written from scratch in Rust, and tested against the real formats, tools and hardware it has to work with.

Office suite

EuroSuite, Writer, Calc & Impress on one document model. Opens and saves Word/Excel/PowerPoint (OOXML) and OpenDocument (ODF), with a real spreadsheet formula engine.

Sovereign AI agents

EuroAgent runs AI agents capability-isolated in the kernel, with a local model by default. They do real work, fully audited, and work completely offline. No mandatory cloud.

24 EU languages

Every official EU language, baked in: number, currency and date formatting, plural rules and correct sorting, plus a multilingual screen reader for accessibility.

Your own trust stack

Run your own certificate authority, prove a machine's state with the on-board TPM, and map people to permissions, no foreign certificate or identity provider required.

Networking & VPN

A from-scratch TCP/IP stack, TLS 1.3 with a European trust store, a stateful firewall and a sovereign forward-secret VPN, the security-critical path is all auditable EuroOS code.

Runs Linux apps

Unmodified musl/Linux programs run as-is through a compatibility bridge, while the sovereign core stays the real surface. Compatibility without surrendering control.

Build & verify

A complete toolchain: signed packages (tampered ones are refused), dependency resolution, and reproducible builds so anyone can prove a binary came from the published source.

Works with your disks

Open a FAT or exFAT drive and save straight to it, browse an ext4 partition, plug in a USB stick, or reach a Windows (SMB) or NFS network share. EuroOS talks to them directly, your files stay on the media you already use.

Read the full technical docs

What makes it different

Unlike anything else you can run.

EuroOS isn't another Linux distribution with a European logo. Every line is original, and that changes what the system can promise you.

100% from scratch, no Linux, no BSD

The bootloader, kernel, filesystem, network stack, TLS, desktop and office suite are all original code in one repository. No inherited codebase, no inherited defaults or backdoors.

The trust boundary is in the kernel, not a cloud

Encryption keys, identity, attestation and AI-agent permissions are anchored in your hardware (the TPM) and enforced in our own kernel, not in a foreign cloud or a mandatory account.

AI agents, sovereign by design

Where agent-first platforms put the trust boundary in a US cloud, EuroOS runs agents as capability-isolated WASM sandboxed at kernel level, fully audited, on a local model, working entirely offline. The EU answer to agent-first computing.

Memory-safe end to end

Written in Rust with #![forbid(unsafe_code)] on every library: the network stack, filesystem, TLS and crypto cannot have the buffer-overflow class of bugs that plague C operating systems.

Speaks all 24 EU languages

Not an afterthought translation layer, localisation and a multilingual screen reader are part of the core, so EuroOS is genuinely usable and accessible across the whole Union (EN 301 549).

Verifiable, and openly audited

Reproducible builds let anyone prove a binary matches the source, and the full security audit is published. Open under EUPL-1.2, hosted and governed in Europe.

Roadmap

From a working kernel to a daily desktop.

Security foundation and UI infrastructure first, then apps at scale. Each horizon is a coherent, demonstrable whole.

HORIZON A

Finish the foundation

A secure, multitasking kernel with the UI infrastructure everything rests on: secure boot, encrypted EuroFS, the EuroUI framework, DPI engine and design tokens.

Secure boot chainCapability tokensEuroUI frameworkCommand paletteWorkspaces

HORIZON B

Mature toolchain + first real apps

musl-libc and a POSIX layer so existing open-source software builds unchanged, and the first EDS-native apps land.

bash · curl · gitEuroFilesEuroTerminalEuroSettingsEuroStore

HORIZON C

Productivity + data protection

A desktop you can use every day: mail, calendar, contacts and office, with per-user encryption domains and EuroVault.

EuroMailEuroCalendarEuroWriterEuroVaultPrivacy dashboard

HORIZON D

Ecosystem & enterprise

Threat-resistance, a real browser, accessibility everywhere, ARM64, and an independent EuroKernel Foundation. v1.0 for end users.

EuroWebAnti-ransomwareARM64 portTrust CenterFoundation

HORIZON E

Agent Runtime & Embedded

The EuroAgent Runtime (WASM sandboxing, capability policies, signed audit), an OT/embedded profile, a sovereign-compute reference architecture, and an agent SDK.

EuroAgent RuntimeOT profileSovereign ComputeAgent SDKSIEM export

Read the full roadmap

For developers

Build the operating system Europe deserves.

EuroOS is open from the kernel up. Pick an RFC, ship a signed commit, package an app, reproducible builds and Ed25519 signing are first-class from day one.

View on GitHub Read the docs Coming soon

EUPL-1.2

Open licence

Ed25519

Signed packages

RFC

Open process

# clone, build & boot from scratch

$ git clone https://github.com/GoTrustbe/Euroos

$ ./scripts/build.sh # userland → kernel → img

$ ./scripts/run-qemu.sh

[boot] UEFI → ExitBootServices → EuroKernel

[ok] desktop ready · sandboxed & encrypted

# build & sign a package

$ eupkg build ./myapp --sign

[eupkg] myapp.eupkg signed (Ed25519) ✓