Build a private cloud — engineers who've shipped this in production

Open-source Cozystack (CNCF project, created by Ænix) → Ænix Public Cloud, Private Cloud and AI Platform → Ænix builds, operates and migrates them.

Building a private cloud means designing, deploying, and operating cloud-style infrastructure on hardware you control — covering platform, storage, networking, multi-tenancy, observability, and compliance as one coherent system rather than a one-off project. It suits organizations with a platform engineering function and a clear trigger such as a VMware exit, a sovereignty mandate, AI/GPU workloads, or runaway public-cloud costs. Ænix builds private clouds end-to-end on Cozystack, an open-source CNCF project it created and co-maintains, with deployments across hosting, regulated finance, telecom, AI and academia. The stack uses KubeVirt for VMs and containers on one Kubernetes API, Cilium (eBPF) networking, and LINSTOR/DRBD storage, with handover so the customer’s own team operates the platform afterward.

Quick facts

  • What it is An end-to-end engagement to design, build, and hand over a production private cloud on hardware the customer controls, built on Cozystack.
  • Licence Apache 2.0 (no per-CPU / per-core licensing)
  • Status Cozystack is a CNCF project (Sandbox since 2025-02-28; Incubating application in due diligence)
  • Who it's for Organizations with (or building) a platform engineering function and a concrete trigger — VMware exit, sovereignty mandate, AI/GPU workloads, or public-cloud cost cliff.
  • Engagement timeline Free 30-minute discovery, 14- or 28-day assessment, then a 3-12 month build, with optional ongoing managed operations.
  • Technology stack Cozystack on Talos by default; KubeVirt for VMs and containers on one Kubernetes API; Cilium (eBPF) networking; LINSTOR/DRBD (Piraeus) storage; Tenant CRD multi-tenancy.
  • Ownership The platform is built on open source and operated by the customer’s own team after knowledge transfer — the cloud is theirs, not Ænix’s.

The phrase “build a private cloud” sounds like it should be straightforward in 2026. The reality: it’s an architecture problem, an operational discipline problem, and a team-capacity problem at the same time. Done well, it produces a platform that compounds value for years. Done badly, it produces operational debt and the next emergency.

Ænix builds private clouds end-to-end based on Cozystack, an open-source CNCF project that Ænix created and co-maintains, with deployments across hosting, regulated finance, telecom, AI and academia (see the case studies).

Pairs with: Ænix Private Cloud Platform for regulated enterprises building private/hybrid sovereign cloud; Public Cloud Platform for large operators needing multi-region public-cloud-class platform.


Who builds a private cloud successfully

The work fits when:

  • You have or are building a platform engineering function (this is operational commitment, not a one-time project).
  • You have a specific trigger — VMware exit, sovereignty mandate, AI workloads, FinOps cliff.
  • The economics support dedicated infrastructure (sustained workloads, regulated data, or AI/GPU at scale).
  • The customer team can sustain operations after Ænix leaves (or has chosen managed-services).

If you’re not sure on any of these, the assessment phase clarifies before building begins.


What a “build private cloud” engagement actually covers

Discovery
30 minFree
confirms fit
Build engagement
DesignBuildHand over
delivers
Cozystack private cloud
VMsContainersOne Kubernetes API
on
Hardware you control
You own and operate it
  • Hardware — sizing, vendor selection, datacenter / colocation arrangements.
  • Platform layer — Cozystack on Talos (default), or extension of existing Kubernetes.
  • Storage — LINSTOR/DRBD via Piraeus; capacity planning; backup architecture.
  • Network — Cilium, BGP fabric, MetalLB, ingress.
  • Multi-tenancy — Tenant CRD, RBAC, quotas, audit.
  • Operations — observability stack, runbooks, on-call, incident response.
  • Self-service — golden paths for product teams.
  • Compliance — sovereignty, audit-readiness per applicable regulator.
  • Knowledge transfer — your platform team operates it after handover.

Engagement structure

PhaseDurationOutput
Discovery30 min, freeConfirm fit
Assessment14 or 28 daysArchitecture, sizing, Phase 2 plan
Build3-12 monthsProduction private cloud
Operate (optional)OngoingManaged service or in-house

For methodology see Platform Readiness Assessment.


Why Ænix

  • The cloud is yours, not ours. The foundation is Apache 2.0 with no per-core licensing, and the handover is a deliverable with named in-house owners, not a hope.
  • We created the foundation. Ænix created Cozystack and co-maintains it; it has deployments across hosting, regulated finance, telecom, AI and academia.

How to start


Ænix created Cozystack, a CNCF project and CNCF Certified Kubernetes distribution, and maintains it with maintainers from other companies. Ænix sells three platforms built on it — Public Cloud, Private Cloud and AI — plus support and services.

Frequently asked questions

What does a build-private-cloud engagement actually include?

Hardware sizing and vendor selection, the platform layer (Cozystack on Talos or an existing Kubernetes extension), storage and backup architecture, networking, multi-tenancy via the Tenant CRD, an observability and operations setup, self-service golden paths, compliance work, and knowledge transfer so your team operates it.

How long does it take to build a private cloud with Ænix?

A free 30-minute discovery confirms fit, a 14- or 28-day assessment produces architecture, sizing, and a build plan, and the build itself runs 3-12 months depending on scope. Ongoing managed operations are available afterward if the customer prefers not to run it in-house.

Is the private cloud locked to Ænix?

No. It is built on Cozystack, an open-source CNCF project under Apache 2.0 with no per-CPU or per-core licensing. After knowledge transfer your own platform team operates the cloud. Ænix has no hyperscaler partnership economics shaping the architecture.

What technology does Ænix use to build a private cloud?

Cozystack on Talos by default, with KubeVirt running virtual machines and containers on one Kubernetes API, Cilium (eBPF) for networking, and LINSTOR/DRBD via Piraeus for storage. Multi-tenancy, RBAC, quotas, and audit are handled through the Tenant CRD.

When does building a private cloud make sense versus staying on public cloud?

It fits when you have or are building a platform engineering function, a specific trigger like a VMware exit or sovereignty mandate, sustained workloads or AI/GPU at scale where the economics favor dedicated infrastructure, and a team that can operate it after handover. The assessment phase clarifies fit before any build begins.

Ready to talk?

Book a 30-minute discovery call — no commitment. We confirm fit, the right platform, and the next steps.