Nicheloom visits: 58,111 all-time · 7,637 in the last 7 days

The opportunity tracker for new startups.

Today: 1,953 launches · Niche of the day: specialized calculation tools · See what launched today →

Bor

Open-source policy management for Linux desktops

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Want to reach these readers? Sponsor an issue.

Hi HN! I've been working on Bor, an open-source system for centralized Linux desktop management.Bor consists of a lightweight Go agent and a central server. Policies are streamed to clients over mTLS/gRPC in real time—no polling—and currently support Firefox, Chrome, KDE, dconf, polkit and package management, with more coming.Version 0.8 introduces several new policy types - Thunderbird, Microsoft Edge for Business and FirewallD zones, along with a number of improvements and fixes.I'd love feedback on the architecture, policy model, and whether this is something you'd consider for managing Linux workstations.

HN · launched Aug 2, 2026 · 197 upvotes (top 3%) · 0 views

Niche: software deployment and configuration tools · 165 launches, 6 in the last 7 days ▼ -68% · Explore this niche →

Category and tags
  • Horizontal
  • Compliance & governance
  • B2B
  • Not AI
  • Hobby / open-source project

Visit website ↗ Source listing ↗

More like this: all 165 launches in software deployment and configuration tools →

Could you build this?

No Enterprise-grade centralized Linux desktop policy management involves OS-level security daemons, polkit rules, dconf overrides, firewalld manipulation, mTLS streaming gRPC, and tamper protection against privilege escalation.

What it would actually take: Architecture requires a hardened Go agent running as root with systemd integration, inotify/eBPF-based tamper watchers, and a Go central server communicating over persistent bi-directional gRPC with mTLS. Enforcing desktop state requires deep subsystem integrations into PAM, Polkit, D-Bus, firewalld XML, Flatpak overrides, and browser policy engines across distributions. Demands Linux systems engineering and security architecture experience.

Discussion

20 comments analyzed.

Competitors mentioned: Wazuh, Ansible, Pyinfra, Samba group policy objects, SSSD

Concerns raised: Documentation needs improvement, Policy conflict handling unclear (two rules touching same resource), Non-domain single-user laptops LDAP enrollment path unclear, Package postinstall rewrites conflict with managed files during sync

Feature requests: SCAP support for enforcing DISA STIGs, Git support and unified import/export format for policies, Better documentation diagrams (Mermaid format), Wazuh integration for fleet governance, Content filtering/parental controls (DNS over HTTPS, adult content blocking)

Competitors

Other products that read as similar to this one : 205 launches clear the similarity bar, closest 8 shown.

Attention rank: #11 of 206 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 261 days after the earliest competitor.

  • panel · github · 2026-11-09 · 729 upvotes · similarity 0.42
  • Deflect One · hn · 2026-04-14 · 8 upvotes · similarity 0.42
  • opsmini · github · 2026-09-14 · 11 upvotes · similarity 0.41
  • Witr · hn · 2025-12-26 · 526 upvotes · similarity 0.40
  • Linux server management over SSH · hn · 2026-08-31 · 49 upvotes · similarity 0.40
  • BVisor · hn · 2026-02-23 · 24 upvotes · similarity 0.40
  • Distr 2.0 · hn · 2026-02-10 · 101 upvotes · similarity 0.40
  • LinuxDesk — Linux Server Manager · ph · 2026-09-22 · 1 upvotes · similarity 0.40

Related data

The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.