P5 · lab / HA ready

Pertisk KOS

Immutable Kubernetes OS, API-only.

Pertisk KOS boots a locked-down Linux image whose only job is to run Kubernetes nodes. PID 1 is pertiskd in Rust: disk, net, containerd, kubelet, and signed A/B updates — without a shell on the machine. The management UI provisions clusters on Proxmox, standalone ESXi, and Nutanix AHV (Prism Element).

Pertisk KOS Management dashboard with cluster health gauges

Highlights

  • API-only management with mTLS (pertiskctl)
  • Immutable root with signed A/B image updates
  • Mgmt UI: Proxmox, ESXi, and Nutanix AHV providers
  • HA bootstrap with stacked etcd, kube-vip, and Cilium

Stack

  • Rust
  • containerd
  • kubelet
  • gRPC
  • UKI / Secure Boot

Clone

git clone https://github.com/pertisktech/pertisk-kos.git