COMPILE THE DARK nullshell · terminal-native runtime

YOUR STACK.
ZERO ABSTRACTION. no dashboards · no magic · just the shell

// ROOT ACCESS, RESTORED. ship from the prompt you already live in

UPTIME 99.997%
TLS · AES-256 · OK
FRAME 000 / 000
LATENCY 7ms
SCROLL ▾

whoami

A runtime built for people who read the source.

NULLSHELL is a terminal-native build and deploy runtime. No click-through consoles, no YAML archaeology, no vendor lock behind a login wall. One binary, one config, one prompt — the whole pipeline addressable from the shell you already have open.

01 / EXEC

Deterministic builds

Content-addressed layers, hermetic toolchains. The same hash builds the same artifact on your laptop and in CI — forever.

02 / NET

Edge by default

Every deploy lands on 240+ POPs. Cold start under 12ms, no region picker, no warm-up cron hacks.

03 / SEC

Zero-trust secrets

Secrets are sealed to the build identity, decrypted in-process, never written to disk, never echoed to a log line.

04 / OBS

Logs that grep

Structured streams piped straight to stdout. Your existing awk, jq, and ripgrep muscle memory still works.

~/src/nullshell — zsh 
$ nsh init --runtime edge
  ✓ toolchain pinned      rustc 1.84 · node 22.6 · deno 2.1
  ✓ lockfile hashed       sha256:9f3c…a17b

$ nsh deploy --prod
  → building          hermetic · 4 layers cached
  → sealing secrets   12 keys · aes-256-gcm
  → pushing edge      241/241 pops · 7.1s

  live  https://nullshell.sh   (green, 0 rollbacks)
$

DOWN TO THE METAL. bare-metal fleet · no noisy neighbours

SUDO YOUR INFRASTRUCTURE. every layer inspectable, every byte yours

FLEET 1,248 NODES
THERMAL NOMINAL
IO 42.8 GB/s

uptime --stats

Numbers from the last 90 days.

0median cold deploy
0edge locations
0build reproducibility
0dashboards required

$ curl -fsSL nullshell.sh | sh

One binary. No account wall, no telemetry beacon, no trial timer. Pipe it, read it first if you want — the installer is 180 lines and it is on the record.

Read the source