Ghaf Framework

Building systems based on zero-trust.

Get Started

# Clone the Ghaf repository
git clone https://github.com/tiiuae/ghaf.git
cd ghaf

# Build a primary target (choose one):
# For x86_64 laptops/desktops:
nix build .#lenovo-x1-carbon-gen11-debug

# For NVIDIA Jetson ARM64 devices:
nix build .#nvidia-jetson-orin-agx-debug-from-x86_64-flash-script

Build and Run Guide

Learn About Ghaf

Design Principles

Edge security

The Ghaf security architecture under development by SSRC aims to provide an understandable yet comprehensive view of security controls in the Platform so that vendors can make informed decisions and adopt the Platform for their use cases.

Zero trust

The Ghaf Platform aims to apply the general security principles of zero trust within the software architecture and to act as an enabler for ZTA for edge devices within organizations.

Trusted computing Base

The general principle for establishing the trusted Ghaf Platform code base is to rely on audited software and proven security modules while carefully evaluating and integrating new concepts.

Configurable, declarative & reproducible