ASCII art banner spelling NIMBUS in block characters.

$ nimbus --init --mode=lightspeed

One 9MB binary. Zero config drift. Nimbus compiles your whole stack — pipelines, secrets, rollbacks — into a single auditable command line.

cat ./features

core: nimbus-kernel v2.6.0 online

uplink: 40Gb/s mirror handshake complete

vault: 0 leaks // 0 drift // 0 excuses

root@nimbus:~$

ls ~/features

~/features/zero-config

Zero-Config Runtime

No daemons, no YAML soup. One static binary that boots in 40ms and speaks pure POSIX.

~/features/sealed-vault

Sealed Secrets

AES-256 vault compiled into the core. Keys never touch disk — injection happens in-memory only.

~/features/atomic-deploys

Atomic Deploys

Every push is an immutable signed snapshot. Rollback is one command: 300ms flat, zero drama.

man nimbus // quickstart

$ step-01 --install

curl the binary

Pull a 9MB static build from any mirror. No package manager, no root, no ceremony.

$ step-02 --init

point it at your repo

Nimbus derives the full dependency DAG and compiles a deploy plan you can actually read.

$ step-03 --ship

ship it

One command pushes an immutable snapshot. Watch the diff stream live in your terminal.

tail -f #nimbus

<kernl> replaced 4,000 lines of terraform with one 12-line plan file.

<kernl> i don't trust computers. i trust this one.

@kernl — kernel engineer, hexgrid.dev

<mira_0x> rollbacks so fast my pager got bored and quit.

<mira_0x> uptime streak: 214 days and counting.

@mira_0x — SRE, nullstate.io

<dvorak> the deploy log reads like a novel. a short one.

<dvorak> every chapter ends "ACCESS GRANTED".

@dvorak — staff engineer, loopfoundry

less pricing.conf

RUNT

solo scripts & side quests

$0 /mo

  • 1 pipeline
  • community mirrors
  • 7-day log retention
RECOMMENDED

OPERATOR

teams shipping daily

$29 /operator/mo

  • unlimited pipelines
  • sealed vault + audit log
  • 1-year retention
  • priority uplink

MAINFRAME

fleets, SLAs & air-gaps

$99 /mo

  • SSO + on-prem relay
  • 99.99% uptime SLA
  • 24/7 human on pager

man nimbus // faq

whoami — is it really one binary?

Yes. 9MB, statically linked, zero runtime dependencies. If it fits on a floppy's ghost, it ships.

where do my secrets live?

In an AES-256 vault compiled into the core. Secrets are injected into memory at deploy time — never written to disk, never printed to logs.

does nimbus run air-gapped?

Fully. Host the mirrors on bare metal inside your perimeter; the binary never phones home.

can i self-host the control plane?

On MAINFRAME, yes: "nimbus relay init" and the whole plane is yours, audit trail included.

what happens when something breaks?

Run "nimbus revert" — the last signed snapshot is restored in ~300ms. Then "nimbus doctor" names the exact layer that lied.