Kodachi OS (formerly Linux Kodachi) is a Debian-based Linux distribution developed by Warith Al Maawali. It is designed to provide a privacy- and security-focused computing environment by integrating technologies such as VPN routing, the Tor network, encrypted DNS, application sandboxing, and encrypted storage. The distribution is available in desktop and terminal editions and can be run as a Live operating system or installed on a computer. According to the project's documentation, recent releases have introduced a Rust-based architecture together with AI-assisted system administration(KAICS) and security management features.
Goal The goal of Kodachi (As stated by the developer, Warith) "The design goal is that an ordinary user can reach a strong, verifiable anonymity posture in minutes rather than hours, can verify that the software they run is the software that was published, and can collapse their posture to a safe state instantly under duress."
Architecture and security features Linux Kodachi integrates multiple privacy, networking, and system-hardening technologies into a unified operating environment. According to the project, network traffic can be routed through configurable privacy paths combining VPN connections, the Tor network, DNSCrypt, and additional routing protocols including WireGuard, OpenVPN, Shadowsocks, V2Ray, Xray, Hysteria2, Mieru, Dante, SOCKS5, HTTP/HTTPS proxies, and tun2socks. The distribution also supports Multi Tor, allowing users to select Tor exit nodes in different jurisdictions, and incorporates PeerGuardian for IP filtering on peer-to-peer networks together with Firejail for application sandboxing. The distro provides a pre built welcome screen that guides the user about the particular settings according to the need.
The distribution includes configurable privacy controls such as MAC address randomization, firewall management, IPv6 leak prevention, encrypted DNS resolution, UDP filtering, time-zone spoofing, encrypted storage through VeraCrypt and ZuluCrypt, secure password management using KeePassXC, and operation as a live operating system from removable media. The desktop edition also supports virtual machine environments and includes configurable emergency response functions such as RAM wiping, panic modes, and secure deletion utilities. Version 9 introduced a Rust-based backend architecture that replaced much of the project's previous shell-script infrastructure. According to the project documentation, the desktop edition bundles 25 Rust binaries (17 service binaries + 8 Kodachi AI workspace binaries on 7 tier offline-first engine). These binaries provide functionality for routing, system integrity verification, permission monitoring, logging, dashboard management, workflow orchestration, process isolation, and AI-assisted administration. The desktop edition includes the Kodachi Dashboard, which provides a graphical interface for configuring networking, privacy, routing, monitoring, and system-management functions. The project states that the dashboard orchestrates hundreds of commands across the bundled Rust binaries and includes multiple operating modes, integrated system monitoring through Lua-powered Conky widgets, workflow automation, and routing guidance for selecting privacy configurations. The distribution incorporates Oniux, a Linux namespace-based process isolation framework. According to the project's documentation, Oniux assigns isolated processes separate user, mount, and network namespaces while routing network traffic through dedicated Tor circuits. The project describes this approach as an alternative to library-based routing tools such as Proxychains and Torsocks by relying on Linux kernel namespaces for network isolation. Kodachi also includes a multilayer USB security framework consisting of USBGuard policy enforcement, kernel-level controls, device authorization, and blacklist management. These mechanisms are intended to regulate removable storage devices and restrict unauthorized USB access according to administrator-defined security policies.
Security Operations Center Version 9 introduced the Security Operations Center (SOC), a host security monitoring interface integrated into the Kodachi Dashboard. The SOC provides a centralized view of system telemetry, security posture, and network status through a graphical neural map that groups host security information into domain-specific clusters.
The SOC organizes telemetry into eight monitoring domains: Vitals, Network, Connections, Processes, Threats, Authentication, Privacy, and System. The interface displays information including system resource utilization, active network connections, routing anomalies, process activity, authentication events, VPN and Tor status, DNS encryption, MAC address randomization, kernel hardening status, and service integrity. According to the project, threat findings are categorized using the MITRE ATT&CK framework where applicable and are presented with severity indicators and cluster-based visualizations. The dashboard also provides a weighted Security Score ranging from 0 to 100, together with category scores, a live alert feed, privacy posture indicators, and configurable monitoring controls such as refresh intervals, severity filters, cluster visibility, and notification settings. According to the project, the SOC functions as a monitoring and visualization layer over Kodachi's existing security infrastructure and does not directly modify system state.
Default Apps Kodachi provides a stack on apps that provides a secure experience while internet surfing and day-to-day use.
Session: A messaging app for secure communications. Kodachi Browser: A pre-hardened browser based on LibreWolf. Tor Browser: The native way to access the .onion websites and anonymous web scraping. VeraCrypt: A tool used for disk encryption. KeePassXC: An open-source password manager
… excerpt ends here. Continue reading the full article.
