Seneschal

NethServer 7, rebuilt on Rocky Linux 10. Same Server Manager, new machinery underneath.

• Python
• Rocky Linux 10
• Cockpit
• nftables
• RPM/dnf

Why it exists

NethServer 7 was the best small-server distro of its generation. One box handled the domain, mail, files, web, and firewall, and one web UI managed all of it without hiding what it was doing. Then CentOS 7 reached end of life and took NS7 with it. NS8 went its own direction and is a different product than the one we were running, so we faced the usual choice: migrate away and give up the workflow, or rebuild the foundation and keep it. We're rebuilding.

What it is

The web UI is the actual NethServer 7 Server Manager, GPLv3 and rebranded, talking to our reimplementation of the API contract it expects. Everything under that contract is new. The old e-smith layer is gone; a Python control plane owns configuration state, templates, and events, with a sen CLI for driving it from a shell. Services run as native Rocky Linux packages wherever the distro can provide them, and podman covers the one role it can't, the Samba Active Directory domain controller. The firewall is nftables carrying NS7's zone model forward, and SELinux stays enforcing. The target is full capability parity with NS7, feature by feature. If you ran NethServer 7, nothing about running this will surprise you.

 [browser] ──▶ [Cockpit + NS7 Server Manager UI (vendored, GPLv3)]
                        │  the same API contract NS7 spoke
                        ▼
                [Python control plane]
        state store · template engine · events · sen CLI
                        │
        ┌───────────────┼───────────────────┐
        ▼               ▼                   ▼
  native EL10       nftables zones      podman
  services          SELinux enforcing   (Samba AD DC)

Where it stands

Built so far: the control plane, backup and certificates, Samba AD with DNS (it can join an existing NS7 domain as an additional domain controller), the reverse proxy and web edge, and the mail stack (Postfix, Dovecot, Rspamd, SOGo). As of late August it also installs like a product instead of a science project: a signed dnf repo, an unattended installer ISO, and a firstboot service that brings the box up configured. The first complete end-to-end ISO install shook out four installer bugs, which is exactly what first complete runs are for. They're fixed.

What it hasn't done yet is the only milestone that really counts: taking over from the production NS7 box it exists to replace. That cutover is the next big step, and until it's done we won't call this more than "in development".

Get it

The package repo is public and GPG-signed, with install instructions in its README: git.eurekaendeavors.com/seneschal/seneschal-repo. It's version 0.0.1 and it acts like it; point it at a test VM, not at anything you love. Seneschal is GPLv3. NethServer is a Nethesis trademark, and Seneschal is an independent rebuild, not affiliated with or endorsed by Nethesis.