Omega edge runtime

Omega is Golain’s edge runtime — a single binary that connects devices to the platform over MQTT (or HTTP for dev). It runs on Linux, macOS, and Windows. Repository: golain-io/omega

Architecture

┌──────────────────────────────────────────────────────────┐
│ Client YAML (clients/my-device.yaml)                     │
│  modules: shadow, ota, heartbeat, device-rpc, sqlite-repl, …   │
│  security: HMAC control, capability gating               │
└──────────────────────┬───────────────────────────────────┘
                       │
┌──────────────────────▼───────────────────────────────────┐
│ Omega runtime                                          │
│  Module lifecycle · Security · MQTT/HTTP transport      │
└──────────────────────┬───────────────────────────────────┘
                       │
┌──────────────────────▼───────────────────────────────────┐
│ Golain platform (MQTT broker + API)                      │
└──────────────────────────────────────────────────────────┘

Build strategies

CDN / scaffold — install Omega and SQLite deps, or let golain scaffold everything:

curl -fsSL https://tools.ilyama.golain.io/omega/install.sh | sh
golain omega scaffold --device=my-device --fleet=my-fleet --sample-db --transport=tls

→ Install Omega · Omega deploy Development — all modules, load YAML from disk:

make build
./bin/omega-darwin-arm64 -client clients/canebot.yaml

Production — minimal client-specific binary:

make build-client CLIENT=ilyama-edge GOOS=linux GOARCH=arm64

Client builds embed connection config and include only required modules (~7–20 MB vs ~21 MB omnibus).

Golain reference client

Client	Platform	Use case
`ilyama-edge`	Linux	JITR + SQLite replication + MQTT/QUIC
`canebot`	Linux	Robotics data sync
`railway-mitra`	Linux	ROS2 + RTC streaming
`sbfc`	Windows	Device management
`acme-yard`	Linux	Telemetry gateway

Copy clients/_template.yaml to create your own.

Security model

Control messages require HMAC-SHA256 signed envelopes
Each module must appear in security.capabilities
RPC/SSH commands restricted by security.rpc.allowed_commands
Payload and storage quotas enforced at runtime

Documentation map

Install

Binaries and cross-compile targets.

Configure

YAML profiles, modules, security.

Connect

MQTT, TLS, topic namespace.

JITR enrollment

Certificate-based registration with ilyama.

Deploy

systemd, launchd, Windows service.

Remote control

Shadow, OTA, legacy shell RPC, SSH, RTC.

Device RPC

Typed gRPC services on devices — cloud unary invoke and server-stream SSE over HTTP.

SQLite sync

Edge replication — lineages, schema reviews, mirror tables (full guide).