frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Show HN: Alien – Self-hosting with remote management (written in Rust)

38•alongub•3h ago
Hi HN, I'm Alon, and I'm building Alien, an open-source platform for deploying your software into your customer's environment and keeping it fully managed.

In my previous startup, I heard the same question from every single enterprise customer over and over again: "My data is sensitive. Can I deploy your product to my own cloud account?"

Self-hosting is becoming very popular because it lets users keep their data private, local, and inside their own environment. Unfortunately, self-hosting breaks down when someone starts paying for your software. Especially if it's an enterprise customer.

Customers usually don't actually know how to operate your software. They might change something small — Postgres version, environment variables, IAM, firewall rules — and things start failing. From their perspective, the product is broken. And even if the root cause is on their side, it doesn't matter... the customer is always right, you're still the one expected to fix it.

But you can't. You don't have access to their environment. You don't have real visibility. You can't run anything yourself. So you're stuck debugging a system you don't control, through screenshots and copy-pasted logs on a Zoom call. You end up responsible for something you don't control.

I think there's a better model of paid self-hosting: the software runs in the customer's environment, but the developer can actually operate it. It's a win-win: for the customer, their data stays private and local, and the developer still has control over deployments, updates, and debugging.

Alien provides infrastructure to deploy and operate software inside your users' environments, while retaining centralized control over updates, monitoring, and lifecycle management. It currently supports AWS, GCP, and Azure targets.

GitHub: https://github.com/alienplatform/alien

Getting started: https://alien.dev/docs/quickstart

How it works: https://alien.dev/docs/how-alien-works

Excited to share Alien with everyone here – let me know what you think!

Comments

cassianoleal•1h ago
RCE into my environment? No, thanks.
alongub•1h ago
It's not RCE. The commands are predefined RPCs written into the deployed code. Customers can review and approve them. Trust between the vendor and the customer is still required and Alien doesn't make it unnecessary.
msteffen•1h ago
IIUC this kind of thing is usually called “managed deployment.” Minio used to have a slick implementation of this, and I think databricks does as well. Usually it’s less “execute arbitrary commands on customer hosts,” and more “send metrics and logs to shared repository and send RPCs to customer deployment”
alongub•1h ago
It's heavily inspired by Databricks' deployment model. And you're right that it's not "execute arbitrary commands". Commands are predefined functions in the deployed code that the developer defines upfront and customers can review.

The metrics/logs part is also core to Alien... telemetry flows back to the vendor's control plane so you actually have visibility into what's running.

gsgreen•1h ago
Even when you do control the environment, infra isn’t as stable as people think.

Same VPS, same config, but under sustained load you’ll see latency creep or throughput drift depending on the host / routing / neighbors.

Short tests almost never show it — only shows up after a few minutes.

alongub•58m ago
Right, and that's when you do control the environment. Now imagine debugging that when it's your customer's infra, you have no access, and you're relying on them to copy-paste logs on a Zoom call.
antonvs•10m ago
I worked for a few years on an on-premise deployment of a system that was otherwise SaaS. Many enterprise customers simply won’t allow something like this - particularly big financials, aviation, healthcare etc.

Realistically, the game ends up being - see what you can get away with until someone notices. Given that, you might want to rename the product to something more boring than “Alien”.

mrhottakes•8m ago
agreed, this architecture is a non-starter for many enterprise orgs
alongub•3m ago
In practice, unmanaged self-hosting is often less secure, because you end up with outdated versions, unpatched vulnerabilities, and no one responsible for keeping things healthy.

More and more enterprise CISOs are starting to understand this.

The model here is closer to what companies like Databricks already do inside highly regulated environments. It's not new... it's just becoming more structured and accessible to smaller vendors.

nickmonad•3m ago
> So you're stuck debugging a system you don't control, through screenshots and copy-pasted logs on a Zoom call.

This is very real.

I work with a deployment that operates in this fashion. Although unfortunately, we can't maintain _any_ connection back to our servers. Pull or push, doesn't matter.

The goal right now is to build out tooling to export logs and telemetry data from an environment, such that a customer could trigger that export on our request, or (ideally) as part of the support ticketing process. Then our engineers can analyze async. This can be a ton of data though, so we're trying to figure out what to compress and how. We also have the challenge of figuring out how to scrub logs of any potentially sensitive information. Even IDs, file names, etc that only matter to customers.

Qwen3.6-Max-Preview: Smarter, Sharper, Still Evolving

https://qwen.ai/blog?id=qwen3.6-max-preview
307•mfiguiere•4h ago•179 comments

ggsql: A Grammar of Graphics for SQL

https://opensource.posit.co/blog/2026-04-20_ggsql_alpha_release/
234•thomasp85•5h ago•56 comments

GitHub's Fake Star Economy

https://awesomeagents.ai/news/github-fake-stars-investigation/
545•Liriel•9h ago•294 comments

At long last, InfoWars is ours

https://theonion.com/at-long-last-infowars-is-ours/
160•HotGarbage•56m ago•48 comments

The Theory of Interstellar Trade [pdf] (1978)

https://www.princeton.edu/~pkrugman/interstellar.pdf
33•AFF87•1h ago•8 comments

Deezer says 44% of songs uploaded to its platform daily are AI-generated

https://techcrunch.com/2026/04/20/deezer-says-44-of-songs-uploaded-to-its-platform-daily-are-ai-g...
135•FiddlerClamp•2h ago•145 comments

10 years ago, someone wrote a test for Servo that included an expiry in 2026

https://mastodon.social/@jdm_/116429380667467307
118•luu•23h ago•72 comments

We accepted surveillance as default

https://vivianvoss.net/blog/why-we-accepted-surveillance
116•speckx•1h ago•42 comments

Bloom (YC P26) Is Hiring

https://www.ycombinator.com/companies/trybloom/jobs
1•RayFitzgerald•1h ago

Kimi K2.6: Advancing Open-Source Coding

https://www.kimi.com/blog/kimi-k2-6
294•meetpateltech•2h ago•137 comments

The Palantir's Stasi Protocols

https://professorsigmund.com/praxis/palantir-stasi-protocols.html
5•Prof_Sigmund•18m ago•1 comments

M 7.4 earthquake – 100 km ENE of Miyako, Japan

https://earthquake.usgs.gov/earthquakes/eventpage/us6000sri7/
203•Someone•8h ago•87 comments

Sauna effect on heart rate

https://tryterra.co/research/sauna-effect-on-heart-rate
264•kyriakosel•4h ago•158 comments

Atlassian enables default data collection to train AI

https://letsdatascience.com/news/atlassian-enables-default-data-collection-to-train-ai-f71343d8
323•kevcampb•5h ago•75 comments

Chernobyl's last wedding

https://www.bbc.com/news/articles/c0q92lx8q75o
29•1659447091•1d ago•6 comments

WebUSB Extension for Firefox

https://github.com/ArcaneNibble/awawausb
113•tuananh•6h ago•92 comments

Kefir C17/C23 Compiler

https://sr.ht/~jprotopopov/kefir/
16•conductor•2d ago•0 comments

Larry Tesler: A Personal History of Modeless Text Editing and Cut/Copy-Paste (2012)

https://dl.acm.org/doi/epdf/10.1145/2212877.2212896
19•aragonite•3d ago•6 comments

All phones sold in the EU to have replaceable batteries from 2027

https://www.theolivepress.es/spain-news/2026/04/20/eu-to-force-replaceable-batteries-in-phones-an...
633•ramonga•4h ago•511 comments

I prompted ChatGPT, Claude, Perplexity, and Gemini and watched my Nginx logs

https://surfacedby.com/blog/nginx-logs-ai-traffic-vs-referral-traffic
101•startages•2h ago•18 comments

At Long Last, InfoWars Is Ours

https://theonion.info/
133•xnx•55m ago•1 comments

OpenClaw isn't fooling me. I remember MS-DOS

https://www.flyingpenguin.com/build-an-openclaw-free-secure-always-on-local-ai-agent/
206•feigewalnuss•10h ago•244 comments

Show HN: Alien – Self-hosting with remote management (written in Rust)

38•alongub•3h ago•10 comments

I'm never buying another Kindle

https://www.androidauthority.com/amazon-kindle-2026-3657863/
122•mikhael•2h ago•104 comments

Focused microwaves allow 3D printers to fuse circuits onto almost anything

https://newatlas.com/electronics/meta-nfc-focused-microwaves-circuits/
123•breve•2d ago•23 comments

Ask HN: How to solve the cold start problem for a two-sided marketplace?

95•alegd•4h ago•99 comments

AI chatbots could be making you stupider

https://www.bbc.com/future/article/20260417-ai-chatbots-could-be-making-you-stupider
25•1vuio0pswjnm7•4h ago•24 comments

NSA is using Anthropic's Mythos despite blacklist

https://www.axios.com/2026/04/19/nsa-anthropic-mythos-pentagon
364•Palmik•8h ago•264 comments

Up to 8M Bees Are Living in an Underground Network Beneath This Cemetery

https://www.discovermagazine.com/up-to-8-million-bees-are-living-in-an-underground-network-beneat...
149•janandonly•2d ago•26 comments

IPC medley: message-queue peeking, io_uring, and bus1

https://lwn.net/Articles/1065490/
32•signa11•3d ago•0 comments