From the Rubble | Digital Sovereignty Series | Episode 0

TLDR: Before the journey, see the destination. This is the complete sovereign digital stack - every tool that replaced a surveillance-capitalism alternative, organized by category, with the values filter that selected each one. Bazzite Linux, Filen encrypted sync, Signal, Bitwarden, Tenacity, Reaper, Spotube, Navidrome, Audiobookshelf, Ghost, and more. Built in 15 minutes of AI-assisted needs assessment. Better software, better values, lower total cost than the subscriptions it replaced.


Most people don’t leave Windows because they hate Windows.

They leave because it finally gets uncomfortable enough that staying feels worse than moving. A forced update that breaks something. A subscription that auto-renewed for software they stopped using. An AI assistant they never asked for that now lives in their taskbar and can’t be fully removed. A news story about the man who built the company that’s been quietly harvesting their behavior for decades.

The discomfort accumulates. And then one day you start asking a question you should have asked years earlier: what am I actually running, and whose interests does it serve?

This series is the documented answer to that question - not in theory, but in practice. Every step of a real migration, including the wrong turns.

But before we get into the how, it’s worth spending a few minutes on the what. Because one of the things that kept me on Windows longer than I should have been was not being able to picture what the alternative actually looked like. “Use Linux” is not a picture. A working sovereign stack is.

So here’s the destination before we talk about the journey.


Why I Was Overdue for This

I’m not a Linux newcomer. I was writing code professionally for a decade and running Debian before Ubuntu existed. I knew what Linux was. I knew it worked. I also watched the desktop experience improve dramatically over the years while I stayed on Windows out of habit, ecosystem inertia, and the fact that nothing had hurt badly enough yet to make me move.

Then several things happened at roughly the same time.

Windows 10 end of life arrived in October 2025. Microsoft’s answer is Windows 11, which requires hardware that a significant percentage of existing machines don’t meet - by design, not necessity. The real-world consequence: millions of functional computers being pushed toward obsolescence to sell new hardware and force users onto a platform with more aggressive data collection baked in.

The AI creep became impossible to ignore. Copilot isn’t a feature. It’s a surveillance product with a chat interface, stapled onto an operating system without meaningful consent. Microsoft has been told, loudly and repeatedly, that users don’t want this. They’ve continued anyway. That’s not a company that’s listening to you. That’s a company that’s decided your preferences are an obstacle.

The retail adoption signal. When HP has been shipping PopOS Linux machines and Lenovo followed, that’s not a niche story anymore. Major hardware manufacturers don’t bet shelf space on products that don’t sell. The “Linux is for nerds” era is ending.

And then there’s Bill Gates. I’m not going to spend a lot of words here - if you’ve been paying attention the last few years, you know. The Epstein connections, the documented behavior patterns, the philanthropic empire with its own set of uncomfortable questions. When I looked at the company he built and the values it’s operated by, I stopped being surprised that Windows behaves the way it does. Organizations reflect their founders. Microsoft reflects its.

None of this is new information. It’s just information I finally stopped compartmentalizing.


The Needs Assessment

When I decided to make the move, I didn’t start with a list of Linux software. I started with values and workflow.

I sat down with Claude - which will get its own episode later in this series - and described what I actually valued in a digital setup: privacy as a default, not a setting. Data that lives where I put it, not where a corporation decides. Tools that do what I need without phoning home. A workflow that felt cleaner and more intentional than what I’d been running.

Then I walked through my current workflow - where the friction was, what I actually used versus what I had installed out of habit, what my ideal day of working looked like.

The conversation took maybe fifteen minutes. What came back wasn’t just a list of applications. It was a coherent stack where each tool was chosen against the same values filter, with explanations for why one option beat another. Tenacity over Audacity, for instance - functionally similar audio editors, except Tenacity is a fork that strips out the telemetry Audacity added when it was acquired. Same capability, no surveillance tax.

That’s the kind of distinction that matters when sovereignty is the filter.

The hit rate was high. Most recommendations landed on first look. A few I dug into further. The result is the stack below - software I’m actually running, chosen deliberately, that has made my workflow better than what I had on Windows. Not a compromise. An upgrade.


The Sovereign Stack

What follows is a quick reference - what it replaces, what it does, why it made the cut. Each of these gets more treatment in the relevant episode.

Operating System

ToolReplacesWhy It Made the Cut
Bazzite / Aurora LinuxWindows 11Immutable, atomic updates, clean rollbacks, zero telemetry. Bazzite for NVIDIA/gaming hardware, Aurora for general desktop use. Both built on Fedora via Universal Blue.

File Sync & Cloud Storage

ToolReplacesWhy It Made the Cut
FilenGoogle Drive / OneDrive / DropboxEnd-to-end encrypted, zero-knowledge, open source. Your files are encrypted before they leave your machine. Filen cannot read them. Syncs Obsidian vault across every device seamlessly.

Writing & Knowledge Management

ToolReplacesWhy It Made the Cut
ObsidianNotion / OneNote / EvernoteLocal-first markdown files. No cloud dependency, no subscription, no company holding your notes hostage. Your vault is just a folder of text files.
OnlyOfficeMicrosoft OfficeFull-featured office suite, compatible with Word/Excel/PowerPoint formats, open source, no Microsoft account required.
FoliateKindle appClean, privacy-respecting e-book reader. Supports EPUB, MOBI, PDF. No Amazon account. No behavioral tracking.

Communication & Security

ToolReplacesWhy It Made the Cut
SignalSMS / WhatsApp / iMessageEnd-to-end encrypted by default. Open source protocol. No ads, no data harvesting, no parent company with a surveillance business model.
BitwardenLastPass / 1Password / browser-saved passwordsOpen source password manager. Self-hostable if you want full control. Zero-knowledge encryption. The LastPass breach should have ended that product - Bitwarden is what you use instead.
LocalSendAirDrop / Google Nearby ShareLocal network file transfer between any devices, any OS. No internet required, no accounts, no servers. It’s genuinely magic - device appears, you send, done.

Audio Production & Music

ToolReplacesWhy It Made the Cut
TenacityAudacityAudacity fork created after the acquisition that added telemetry. Same functionality, stripped of surveillance.
ReaperAdobe Audition / GarageBandProfessional DAW, absurdly affordable ($60 for personal/small business license), Windows/Mac/Linux native. The podcast and music production tool that doesn’t require a Creative Cloud subscription.
SpotubeSpotify appStreams from Spotify’s catalog without a Spotify account or the app’s data collection. Free tier without the ads and tracking.
NavidromeSpotify (owned music)Self-hosted music streaming server. Your music library, streamed to any device, no subscription, no third party. Pairs with spotDL for downloading your matched library.

Video & Podcasting

ToolReplacesWhy It Made the Cut
KDenLiveAdobe Premiere / DaVinci ResolveOpen source video editor, full-featured, no subscription, no account. Handles podcast clips, short-form content, full productions.
OBS StudioCamtasia / any paid screen recorderThe standard for streaming and recording. Open source, free, runs on everything.

Books & Reading

ToolReplacesWhy It Made the Cut
AudiobookshelfAudible appSelf-hosted audiobook and podcast server. Your library, your server, your terms. Pairs with the audible-cli workflow for liberating your existing Audible purchases.
FoliateKindle appSee above.

ToolReplacesWhy It Made the Cut
OpenMaps / Organic MapsGoogle MapsOffline-capable maps built on OpenStreetMap data. No Google account, no location tracking, no behavioral profile being built from your routes.

Publishing & Content

ToolReplacesWhy It Made the Cut
Ghost (self-hosted)Substack / WordPress / MediumOwn your publishing infrastructure. Email newsletter, paid memberships, clean writing experience - zero revenue cut, full data ownership, deplatforming risk eliminated.

AI Workflow & Knowledge Infrastructure

ToolReplacesWhy It Made the Cut
Claude Desktop / Claude CodeBrowser-based AILocal file access via MCP without uploading documents. Claude Code is the official CLI for Linux — terminal-native, MCP-capable, pairs naturally with a sovereign file layer.
Open Brain (Postgres + pgvector + MCP server)Notion / Roam / scattered notesSelf-hosted semantic search over your own thoughts. Vectors stored in Postgres with pgvector, exposed to Claude via a custom MCP server. Query your entire personal knowledge base in plain language — running on the same VPS as everything else, no third party holds your notes.

What This Stack Has in Common

Every tool in this list passed the same filter:

Do I own my data, or does the tool? Every application here stores your data where you control it - local drive, self-hosted server, or end-to-end encrypted cloud you hold the keys to.

Is it open source or auditable? Most are fully open source. For the ones that aren’t, the privacy practices are documented and the business model doesn’t depend on harvesting you.

What’s the business model? Free and open source, one-time purchase, or honest subscription where you’re the customer - not the product.

Can I leave if I need to? Every tool here uses open formats or provides clean export. No lock-in. No hostage-taking.

Who built it and why? Where possible, tools built by communities or companies whose values align with the work - privacy-first, sovereignty-minded, not VC-funded growth machines optimizing for exit.


The Workflow Is Better

This is the part that surprised me most, honestly.

I expected the sovereign stack to involve trade-offs. Slightly worse software in exchange for better values alignment. That’s not what happened. Filen is a better sync solution than OneDrive. Bitwarden is more trustworthy than anything LastPass ever was. Reaper is better value than Adobe Audition by a factor of ten. LocalSend does something AirDrop can’t - it works across operating systems without requiring everyone to be in the same ecosystem.

The workflow is more intentional. Every tool is there because it earned its place, not because it came bundled with something else or defaulted on during an install. That intentionality has a compounding effect - the whole system feels more coherent because every piece was chosen against the same values.

That’s what the rest of this series documents: how you get from a Windows machine to this stack, including every wrong turn along the way.


The friction is temporary. The freedom is permanent.


From the Rubble is written by Kala - veteran, 30-year conspiracy realist. Digital sovereignty, health sovereignty, and the overlap between them. No corporate funding. No ads. No permission required.