Find a file
pulse-triage[bot] c32bdc8629
Some checks are pending
Build and Test / Secret Scan (push) Waiting to run
Build and Test / Detect changed areas (push) Waiting to run
Build and Test / Issue metadata and silent triage policy (push) Blocked by required conditions
Build and Test / Script smoke tests (shard 1/2) (push) Blocked by required conditions
Build and Test / Script smoke tests & backend build (push) Blocked by required conditions
Build and Test / Workload chart SLO evidence (push) Blocked by required conditions
Canonical Governance / governance (push) Waiting to run
Build and Test / Provider pair Docker acceptance (push) Blocked by required conditions
Build and Test / Frontend (push) Blocked by required conditions
Build and Test / Compile backend race tests (no execution) (push) Blocked by required conditions
Build and Test / Backend tests (rest-0) (push) Blocked by required conditions
Build and Test / Backend tests (rest-1) (push) Blocked by required conditions
Build and Test / Backend tests (api-0) (push) Blocked by required conditions
Build and Test / Backend tests (api-1) (push) Blocked by required conditions
Build and Test / Backend tests (api-2) (push) Blocked by required conditions
Build and Test / Backend tests (api-3) (push) Blocked by required conditions
Build and Test / Backend tests (api-4) (push) Blocked by required conditions
Build and Test / Backend tests (api) (push) Blocked by required conditions
Build and Test / Script smoke tests (shard 0/2) (push) Blocked by required conditions
Build and Test / Publish chart SLO verdict (push) Blocked by required conditions
Build and Test / Benchmarks (push) Blocked by required conditions
Canonical Private Governance / private-governance (push) Waiting to run
Helm CI / Lint and Render Chart (push) Waiting to run
Provider MSP startup / Provider MSP production startup (push) Waiting to run
Public docs / Documentation recipes (0) (push) Waiting to run
Public docs / Documentation recipes (1) (push) Waiting to run
Public docs / Documentation recipes (2) (push) Waiting to run
Public docs / Documentation recipes (3) (push) Waiting to run
Public docs / check (push) Blocked by required conditions
Core E2E Tests / Agent registration lifecycle (push) Blocked by required conditions
Core E2E Tests / Detect browser receipt-only changes (push) Waiting to run
Core E2E Tests / Validate E2E tier selection (push) Blocked by required conditions
Core E2E Tests / Offline Organization provisioning (push) Blocked by required conditions
Core E2E Tests / Build source-bound E2E images once (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 1/8) (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 2/8) (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 3/8) (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 4/8) (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 5/8) (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 6/8) (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 7/8) (push) Blocked by required conditions
Core E2E Tests / Playwright Core E2E (shard 8/8) (push) Blocked by required conditions
Core E2E Tests / E2E verdict (push) Blocked by required conditions
Unified Agent Native Verification / Linux ARM64 (push) Waiting to run
Unified Agent Native Verification / Linux x64 (push) Waiting to run
Unified Agent Native Verification / Windows x64 (push) Waiting to run
Unified Agent Native Verification / macOS ARM64 (push) Waiting to run
Unified Agent Native Verification / macOS Intel (push) Waiting to run
Unified Agent Native Verification / FreeBSD cross-build contract (push) Waiting to run
Exercise Windows uninstall boundaries with LF and CRLF source (#3418)
**Exercise Windows uninstall boundaries with LF and CRLF source**

The landed removal candidate's Windows job fails because its
missing-call negative control assumes LF and makes no change in a CRLF
checkout. Remove the call without its terminator, verify every mutation
actually changes source, and exercise all eight refusal boundaries in
both layouts. Installer runtime and acknowledgement requirements are
unchanged.

Contract-Neutral: Test-only line-ending repair; no installer, workflow,
API or subsystem behaviour changes.

**Locate the Windows unregistration call without assuming indentation**

The first line-ending proof correctly rejected its own tab-indented call
selector: the production script uses spaces. Select exactly one
standalone production call with a line-bound expression that accepts
either indentation and terminator. Keep every acknowledgement and
state-preservation contract unchanged, and retain the failed first
proof.

Contract-Neutral: Test-fixture selector correction only; installer
runtime, workflows and rendered content are unchanged.

---
Fleet candidate `20261027T163545Z-delivery-trust` from the
`delivery-trust` lane. Reviewed tip
`4cb2d21792` on `main`.

[How Pulse handles
triage](https://github.com/rcourtman/Pulse/blob/main/docs/AI_TRANSPARENCY.md)
2026-10-27 17:36:39 +00:00
.devcontainer build: move to Go 1.26.10 and Vite 6.4.5 for October advisories 2026-10-21 15:19:02 +01:00
.github Fence delayed stable patches at reservation and publication 2026-10-27 11:21:34 +00:00
.husky Keep local safety checks effective on large staged changes 2026-10-25 03:33:27 +00:00
cmd Deliver the credited MCP boolean-filter repair on current main 2026-10-23 23:37:42 +01:00
deploy Prepare v6.7.0-beta.2 2026-10-27 14:13:45 +00:00
dev/oidc feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
docs Keep OIDC Test HTTP failures private and actionable (#3417) 2026-10-27 17:32:49 +00:00
frontend-modern Retain backup task origin independently of current guest placement (#3415) 2026-10-27 16:43:10 +00:00
internal Keep OIDC Test HTTP failures private and actionable 2026-10-27 16:43:15 +00:00
pkg Keep malformed saved pins distinct from explicit empty trust 2026-10-27 08:10:25 +00:00
scripts Locate the Windows unregistration call without assuming indentation 2026-10-27 16:53:32 +00:00
testdata Fix Unraid SMART probing and disk authority 2026-07-24 09:38:39 +01:00
testing-tools test: add soak test with runtime instrumentation (Phase 2 Task 9d) 2025-10-20 15:13:38 +00:00
tests Align the E2E bootstrap seed with the governed Alpine runtime 2026-10-27 06:25:14 +00:00
.air.toml chore: Add Air hot-reload configuration 2026-01-19 19:26:50 +00:00
.dockerignore Exclude nested node_modules from the Docker build context 2026-07-08 00:57:35 +01:00
.env.example docs: correct customer docs that drifted from the source 2026-10-11 13:59:56 +01:00
.gitattributes chore: optimize PNG images and add .gitattributes 2025-11-24 23:44:55 +00:00
.gitguardian.yaml Fix settings security tab navigation 2025-10-11 23:29:47 +00:00
.gitignore Admit reconstructible stable patches on version-bound release branches 2026-10-27 07:59:24 +00:00
.gitleaks.toml Record browser receipts per commit so frontend PRs stop conflicting 2026-10-03 11:11:25 +01:00
.gitleaksignore Record schema v6 secure runtime qualification 2026-08-31 01:12:15 +01:00
.golangci.yml Dedupe internal/api handler families behind shared flows and generics 2026-06-10 10:52:05 +01:00
.markdownlint-cli2.jsonc docs: standardize markdown syntax and remove deprecated sensor-proxy docs 2026-01-20 09:43:49 +00:00
.markdownlint.json docs: standardize markdown syntax and remove deprecated sensor-proxy docs 2026-01-20 09:43:49 +00:00
analyze_coverage.py docs: update AI evaluation matrix and approval workflow documentation 2026-01-30 19:00:40 +00:00
ARCHITECTURE.md Retire the Assistant chat window; alert Investigate runs Patrol 2026-10-23 00:15:04 +01:00
CONTRIBUTING.md Find safe diagnostics without requiring another live run 2026-10-14 05:14:08 +01:00
cr.yaml Add GitHub Pages Helm repository distribution (#686) 2025-11-11 19:26:18 +00:00
docker-compose.yml Prepare v6.7.0-beta.2 2026-10-27 14:13:45 +00:00
docker-entrypoint.sh Avoid tenant runtime image copy-up 2026-04-24 09:21:42 +01:00
docker-healthcheck.sh feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
Dockerfile Refresh governed Node and Alpine container digests together 2026-10-27 04:46:31 +00:00
go.mod Reconcile the separated metrics and HTTP dependency graph 2026-10-24 07:11:14 +01:00
go.sum Reconcile the separated metrics and HTTP dependency graph 2026-10-24 07:11:14 +01:00
install.sh Preserve recovery keys when local legacy cleanup cannot complete 2026-10-26 20:52:58 +00:00
LICENSE Fix settings security tab navigation 2025-10-11 23:29:47 +00:00
Makefile Give release backend tests hosted-runner headroom 2026-08-21 08:49:05 +01:00
package-lock.json feat: Pulse v6 release 2026-03-18 16:06:30 +00:00
package.json Route mock toggle npm scripts through toggle-mock.sh 2026-08-04 00:30:28 +01:00
playwright.config.ts fix(frontend): sync summary hover cursor and proof 2026-04-01 14:48:47 +01:00
README.md docs: rewrite the README for first-time visitors 2026-10-22 11:13:15 +01:00
SECURITY.md Keep security verification bounded and preserve logging state 2026-10-11 23:11:34 +01:00
TERMS.md Clarify that TERMS.md covers only the commercial Pro distribution 2026-08-12 16:01:46 +01:00
VERSION Prepare v6.7.0-beta.2 2026-10-27 14:13:45 +00:00

Pulse

Pulse logo

Real-time Proxmox, Docker and Kubernetes monitoring that finds what needs attention.

GitHub Stars GitHub Release Docker Pulls License

Live demo · Documentation · Releases · Discussions

Pulse is a self-hosted dashboard and alerting tool for your homelab or infrastructure. Point it at Proxmox, Docker, Kubernetes, TrueNAS, vSphere or your own Linux, Windows and macOS machines, and it shows their health in one place, keeps the history, and tells you when something needs attention: a failed backup, a filling disk, an unhealthy container, a node that dropped offline.

Pulse Proxmox overview

Want to look around first? The live demo runs on sample data and signs you in automatically.

What Pulse does

  • Gives each platform its own page. Proxmox, Docker, Kubernetes, TrueNAS, vSphere and machines each get a view that matches how you already think about them, with storage and backups beside the systems they belong to.
  • Alerts you when it matters. Set thresholds for CPU, memory, disk, temperature and more, and get notified by email or through Discord, Slack, Teams, Telegram, ntfy, Gotify, Pushover, PagerDuty or any webhook.
  • Checks the things that can't run an agent. Ping, TCP, UDP and HTTP(S) availability checks cover routers, printers and web services, with certificate-expiry warnings.
  • Keeps history. Every guest, container and host has charts: seven days in Community, ninety in Pro.
  • Optional AI checks. Connect your own AI provider or a local model and Pulse Patrol runs scheduled checks for problems a dashboard only shows if someone is looking. An MCP adapter lets clients such as Claude Code and OpenCode query Pulse.
  • Stays hands-off by default. Proxmox is read through a read-only API token, credentials are encrypted at rest, and agent commands stay off unless you turn them on.

Supported platforms

Platform What Pulse shows
Proxmox VE, PBS and PMG Nodes, VMs and containers, storage, backups, replication, Ceph and mail gateways
Docker and Podman Hosts, containers, Compose projects, Swarm services, health, images and updates
Kubernetes Clusters, nodes, workloads, pods, services, storage and events
TrueNAS SCALE and CORE Pools, datasets, disks, snapshots, replication tasks, apps and VMs
Linux, Windows and macOS Host health, filesystems, networking, temperatures, RAID and availability
VMware vSphere (early access) Hosts, clusters, VMs, datastores, networks and snapshots; validate against your own vCenter before relying on it

Install

Pulse is one container or service listening on port 7655. Pick an exact version from the latest release and use it in place of vX.Y.Z below.

Docker

docker run -d \
  --name pulse \
  -p 7655:7655 \
  -v pulse_data:/data \
  -e PULSE_DEPLOYMENT_METHOD=docker_run \
  --restart unless-stopped \
  rcourtman/pulse:vX.Y.Z

The Pulse container does not need the Docker socket. Docker hosts are monitored by the agent described below.

Proxmox LXC or Linux

The installer is signed. This block downloads it, verifies it against the pinned pulse-installer key, and only then runs it:

export PULSE_VERSION=vX.Y.Z
curl -fsSLO "https://github.com/rcourtman/Pulse/releases/download/${PULSE_VERSION}/install.sh" &&
curl -fsSLO "https://github.com/rcourtman/Pulse/releases/download/${PULSE_VERSION}/install.sh.sshsig" &&
ssh-keygen -Y verify \
  -f <(printf '%s\n' 'pulse-installer namespaces="pulse-install" ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMZd/DaH+BldzOkq1A8KVTcFk73nAyrE8aJOyf7i00jm pulse-installer') \
  -I pulse-installer \
  -n pulse-install \
  -s install.sh.sshsig < install.sh &&
bash install.sh --version "${PULSE_VERSION}"

Paste the whole block. If a download or the signature check fails, it stops; don't run the last line on its own to get past a failure.

Also available: Docker Compose, Kubernetes with Helm and the full install guide.

First run

Open http://<your-ip>:7655 and paste the one-time setup token. Get it with docker exec pulse /app/pulse bootstrap-token on Docker, or sudo pulse bootstrap-token on Linux (the LXC installer prints the exact command). Create your admin account, then add your first system with Add infrastructure under Settings → Infrastructure.

Do you need an agent?

Often not. Proxmox VE, PBS and PMG are monitored through their API with a read-only token, so no Pulse host agent is required; the generated setup script creates a privilege-separated monitoring user. Install the unified agent where an API can't give Pulse what you want: Docker and Podman hosts, Kubernetes, standalone machines, or host SMART health and temperatures.

Agents, including v5-to-v6 agent upgrades, are installed with the per-host command under Settings → Infrastructure → Install on a host. The GitHub installer above is for the Pulse server only. Command execution is off by default, the agent's local listener binds to localhost, and on Linux --least-privilege runs it as a dedicated non-root user. The agent security model lists what it can and cannot do at each privilege level.

Warning

API-only does not mean guest-agent-free. VM filesystem and memory requests through QEMU Guest Agent can share the channel used by freeze-enabled backups. Read-only permissions do not prove backup safety. Do not add permissions, enable or restart an agent, or send manual guest-agent probes during a backup, freeze or thaw. An OK backup task does not prove successful thaw. Stopping Pulse also stops its monitoring and alerts. Read the backup safety precaution before you need it.

Editions

  • Community (free, this repository): self-hosted monitoring, seven days of metric history, core SSO, update alerts, and Patrol with your own AI provider or a local model.
  • Pro: Community plus Patrol investigation and fixes, ninety days of history, centralized agent profiles, RBAC, audit logging and reporting.
  • MSP: one Pulse Account running isolated workspaces for each client, with separate dashboards, alerts, users, audit history and reports. Try it free for sixty days with two clients at Pulse for MSPs.

Core self-hosted monitoring is not gated by how many systems or child resources you monitor. See the capability reference and current plans.

Important

GitHub release assets and rcourtman/pulse images are Community builds. Pro, Relay and eligible legacy customers should install the private image or Linux archive from the Pulse download portal. Replacing a private Pro runtime with a Community build removes its private runtime hooks.

Relay is no longer sold. Existing subscribers keep Pro features at their current price for as long as their subscription continues, and paired phones keep working until 31 March 2027. Relay connects the app, not the web UI: use your own VPN or tunnel for remote access, and add an ntfy, Gotify or Pushover destination for phone alerts.

Documentation

Getting started in other languages: Deutsch · Español

Community and support

Before filing a bug, read the safe reporting guidance. Your original evidence is enough. A second reproduction or diagnostics export is not required, so please don't repeat anything that could interrupt workloads or send duplicate notifications. GitHub reports and attachments are public: review them locally and keep credentials and private details out.

Development

Pulse is Go 1.26 with a SolidJS and TypeScript frontend. The managed dev runtime serves the frontend at http://127.0.0.1:5173 and proxies API and WebSocket traffic to the backend on port 7655.

npm ci
npm --prefix frontend-modern ci
npm run dev

Read CONTRIBUTING.md before starting on a change: Pulse works issue-first and does not normally accept unsolicited pull requests.

License

Everything in this repository is MIT licensed, with no dual licensing and no source-available code. Pulse Pro is a separate commercial product built from private sources, sold through pulserelay.pro under Terms of Service that apply to that product only.