Flatsonar

Vtessera

by Douglas DeMaio

Control panel for a Vtessera compute node

Dangerous permissions Verified creator Apache-2.0 v0.2.0
Install Source code
Screenshot 1 of Vtessera

About

Vtessera lets GNU/Linux machine owners rent out CPU (and later GPU) capacity to AI agents, settling in the same stablecoin the buyer pays — EURC or USDC — plus a flat SOL protocol fee. There is no Vtessera token; the protocol is technology, not a token. It asks your permission before it does anything: metering consent on first run, and a separate off-by-default switch before it accepts workloads from other agents. Accepted jobs run inside a disposable Cloud Hypervisor KVM microVM — its own kernel, no host filesystem, destroyed afterwards. You can stop everything with one button and uninstall completely at any time. This desktop app is the control panel for a node running on this machine as systemd user services (installed with the system package, not enabled at login): - Advertise your machine with a signed, self-hosted offer. - Charge a price per CPU-hour in EURC or USDC, or donate your compute for free. - Start and stop the host's metering daemon and agent-facing node server in one window. - Watch the state, recent jobs, settlement authority, and the activity log as jobs come in. - AI agents: see AGENTS.md for onboarding, node discovery, and job submission. Free mode runs no transactions at all; paid mode quotes a price and records usage. Settlement happens through the escrow program (live on Solana devnet), which pays sellers directly in the same stablecoin the buyer paid.

Permissions

5 permissions weaken the sandbox. Flatsonar asks before installing.

  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • virtualisation (KVM)
    --device=kvm
  • systemd: can manage services
    --talk-name=org.freedesktop.systemd1
  • access to operating-system files
    --filesystem=host-os:ro
  • access to operating-system files
    --filesystem=host-etc:ro
  • network
    --share=network
  • Wayland display
    --socket=wayland
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • inter-process communication (needed for X11)
    --share=ipc
  • GPU acceleration
    --device=dri
  • access to /var/lib/vtessera
    --filesystem=/var/lib/vtessera:ro
  • access to ~/.config/vtessera
    --filesystem=~/.config/vtessera:create
  • access to ~/.local/share/vtessera
    --filesystem=~/.local/share/vtessera:create
  • access to ~/.local/share/systemd/user
    --filesystem=~/.local/share/systemd/user:create

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • tries to escalate privileges: ## Guest initramfs — one more bundled file (the Setup page's sudo row
    vtessera:build-commands
  • hosted by github.com/douglasdemaio, which owns the io.github namespace of io.github.douglasdemaio.Vtessera
    publisher:namespace

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.