Air-Gapped Mode
Air-Gapped Bare-Metal Architecture
Completely isolated, zero-egress bare-metal installations for defense, intelligence, and petrochemical plants.
Last updated: Sep 21, 2026
•
Format: Markdown / GFM
Air-Gapped Bare-Metal Architecture
For defense, national intelligence, and critical petrochemical facilities, Aarkam can be installed in a 100% air-gapped bare-metal environment with zero external network connectivity.
Installation via Offline Media
- Download the cryptographically signed Aarkam Offline Bundle:
# Bundle includes all container binaries, systemd units, and PKI tools sha256sum aarkam-enterprise-bundle-beta.tar.gz.sig - Mount the installation media on the bootstrap management host.
- Execute the automated air-gapped orchestrator:
./aarkam-installer.sh --profile air-gapped --cluster-config /etc/aarkam/cluster.json
Internal Raft MON Consensus Without External NTP
In isolated datacenters where public NTP servers are blocked:
- Aarkam uses local GPS/PTP time synchronizers or internal Raft monotonic epochs (
EpochFence). - Topology state changes require quorum agreement across an odd number of Coordinator nodes (e.g., 3 or 5 MON nodes).
- Even during full network partitions, split-brain write corruption is mathematically prevented by Raft quorum rules.