Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk4 min

nkt in Go: What to Know About the Linux Fleet Tool Behind the Rewrite

nkt is described by its creator as a Linux auditing and fleet-management tool rewritten from Python to Go. Here are its claimed features, reported size and operational caveats.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

nkt, short for NetKnownsThat, is a Linux host-auditing and fleet-management tool that its creator, Alex Sashin, says was rewritten from Python to Go and then open-sourced. The September 30, 2026 announcement describes a local auditing tool plus a central Hub for managing multiple Linux hosts. Its features, deployment behavior and size figures below are Sashin’s claims, not independently verified results.

Why the project moved from Python to Go

Sashin says the original internal tool became difficult to distribute across varied VPS and ARM environments. Each host could have a different system Python version, dependencies could conflict, and one cryptography dependency sometimes required a Rust build. He also says PyInstaller bundles were around 200 MB and sometimes encountered glibc-related failures. Parsing configuration and iptables state reportedly used substantial memory and ran slowly.

As an Amazon Associate I earn from qualifying purchases.

In the rewrite, Sashin says the backend and terminal user interface moved to Go while the React/Ant Design frontend remained. He presents the Go build as a way to distribute a single binary and cross-compile for different host architectures, reducing the need to manage Python environments on every machine. These are the project creator’s account of the rewrite’s motivation and benefits, not results from a published comparative benchmark.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What nkt is described as doing

The announcement presents nkt as both a tool for auditing one Linux host and a control plane for managing a fleet. On a host, it reportedly parses nginx, HAProxy, Caddy, Docker Compose, UFW and firewalld configurations, then compares configuration with live state such as open sockets and running containers. Findings are described as including file and line details and suggested corrections.

#1 Best Overall
HPE ProLiant DL380 Gen10 2U Rack Server Bundle with Dual Xeon 6130 2.10 GHz, 256GB DDR4 Memory, 7.68TB Enterprise SSD Storage, RAID, Dual Power, iLO, Rail Kit
  • HPE ProLiant DL380 Gen10 2U Rack Server with Rail kit for Enterprise
  • Dual (2) Xeon Gold 6130 16-Core 2.10 GHz, 22MB, Up To 3.70 GHz Turbo
  • Memory: 256GB (8 x 32GB) DDR4 PC4-25600 3200MHz Unbuffered Memory
  • Storage: 7.68TB (4 x 1.92TB) Enterprise 2.5” SATA III 6Gb/s SSDs for Ultra Fast Storage
  • Hard drives and memory upgrades included separately, not installed, installation required.

Configuration and host audits

According to Sashin, the aim is to surface discrepancies between what configuration files say should be running and what the host is actually doing. The announcement also describes heuristic indicators for possible malware. It does not establish the detection rate, false-positive rate, supported configuration variants or the security review process behind those indicators.

Editing, rollback and visibility

The post says nkt can edit configuration, validate changes before applying them and roll back when validation fails. It also describes a visualization of resource topology and fleet-level controls for fail2ban. These are useful capabilities to investigate in the current project documentation, but the announcement alone does not demonstrate rollback behavior under every failure mode or guarantee that a change cannot disrupt a production host.

Rank #2
Quiet Rackmount Computer (3.8-4.6GHz AMD Ryzen 7 5700G CPU, 32GB RAM, 1TB SSD, W11 Pro) - 2U Rack Mount Server or Workstation Desktop PC for Home or Business
  • [CPU] AMD Ryzen 7 5700G Processor (8 Cores, 16 Threads, 3.8 GHz Base Clock Speed up to 4.6 GHz Max Boost Clock Speed) for Gaming and Content Creation with 7nm Leading Edge Technology | [STORAGE] 1TB PCIe NVMe M.2 SSD - Experience Hyper-Fast Bootup and Data Transfer thats up to 30x Faster Performance than a Traditional Hard Drive.
  • Graphics: Integrated AMD Radeon Graphics | [RAM] 32GB DDR4 RAM 3200 Gaming Memory for Seamless Multitasking from Multiple Web Pages to Playing Games Online Simultaneously | [OS] Windows 11 Pro x64
  • 2x 3.5" Drive Bays | 4x Expansion Slots | mATX Motherboard | ATX PSU
  • [BUY WITH CONFIDENCE] Empowered PCs are Assembled in the USA, Rigorously Stress-Tested Before Shipping, and Supported with Lifetime Technical and Diagnostic Support and 3-Year Limited Hardware Warranty.

Management access beyond SSH

The Hub is described as connecting to managed hosts over SSH. Sashin also mentions a reverse TLS fallback channel intended to preserve management access if SSH fails. The announcement does not independently establish how that channel is authenticated, protected, monitored or recovered, so operators should verify those details before treating it as a production recovery path.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How the Hub is said to onboard Linux hosts

In the workflow described in the announcement, a central VPS runs the Hub and connects to managed machines over SSH. It detects each host’s architecture, cross-compiles an nkt binary, transfers it over SFTP and installs a systemd unit. Sashin also provides Docker Compose instructions for running the Hub and separate build/install instructions for local use.

Rank #3
HPE ProLiant DL360 Gen10 1U Rack Server Bundle with Dual Xeon 6130 2.10 GHz, 256GB DDR4 Memory, 7.68TB Enterprise SSD Storage, RAID, Dual Power, iLO, Rail Kit
  • HPE ProLiant DL360 Gen10 1U Rack Server with Rail kit for small business or Enterprise
  • Dual (2) Xeon Gold 6130 16-Core 2.10 GHz, 22MB, Up To 3.70 GHz Turbo
  • Memory: 256GB (8 x 32GB) DDR4 PC4-25600 3200MHz Unbuffered Memory
  • Storage: 7.68TB (4 x 1.92TB) Enterprise 2.5” SATA III 6Gb/s SSDs for Ultra Fast Storage
  • Hard drives and memory upgrades included separately, not installed, installation required.

This is a description of the published workflow, not a verified current installation guide. The source available here does not establish current command syntax, required permissions, supported distributions, credential storage practices or the project’s present release artifacts. Check the project’s current documentation before deploying, and test installation and recovery on a non-production host first.

What the reported binary sizes do—and do not—show

Sashin gives two different approximate sizes for nkt in the same announcement: around 30 MB in the rewrite discussion and around 25 MB in its conclusion. The article also puts nkt-edge, a relay component, at approximately 8 MB. These are author-reported figures from 2026, not independently measured download sizes; the nkt discrepancy means it is more accurate to describe the reported range as roughly 25–30 MB.

Rank #4
MT-VIKI Rack Mount KVM Console w/15.6" LCD Monitor, 8 Port HDMI KVM Switch, 1920x1080@60Hz 1U Integrated Monitor Keyboard, Fits 18.9" to 31.5" Deep Racks (480-800mm), Included 8 Cables
  • MT-VIKI 1568HL is all-in-one console to manage up to 8 computers. Features a 15.6" LCD monitor with 1920x1080@60Hz resolution. Combines monitor, keyboard, and touchpad into a single 1U rackmount drawer to save up to 85% of valuable cabinet space.
  • Adjustable Depth & 2 set Rack Rails: Includes two sets of Rack Rails. Short Rack Rails: Fit 18.9"–23.6" (480-600mm) deep network racks (Note: check cable clearance for depths under 600mm). Long Rack Rails: Fit 23.6"–31.5" (600-800mm) deep standard racks. Measure your rack depth before purchase to ensure a perfect fit.
  • External Monitor Support & Flexible Operation--Features an HDMI console output for connecting an external monitor, allowing convenient server access without opening the rack. Three Ways Switching: Support OSD menu, Hot-key or push button switching.This 8 port lcd kvm console provides 2-level password security (administrator and user), up to 8 authorized users and an administrator view and control the computers
  • Lightweight Aluminum & Steel Build: Upgraded with an aluminum interior for less weight and a rugged steel drawer shell for industrial durability. Features a built-in handle and lock for secure operation. Physical Dimensions: 18.9" x 23.6" x 1.77" (480mm x 600mm x 45mm).
  • Built for Professional Environments – Ideal for server rooms, data centers, industrial control systems, and security monitoring centers where multiple computers need centralized management or when technicians need direct access to connected systems without an external monitor.

The comparison with the earlier approximately 200 MB PyInstaller bundle illustrates the author’s stated motivation, but it is not a controlled performance or footprint benchmark. The announcement provides no comparable measurements for runtime memory, CPU use, audit speed or behavior across distributions.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Which capabilities are labeled beta

The September 30, 2026 post labels GitOps/deployment and expanded Kubernetes management as beta. The described Git-triggered deployment flow uses nkt-edge to relay webhooks when a host is behind NAT. The article also mentions cluster provisioning and a WireGuard mesh. Because these are changing areas explicitly identified as beta in that post, treat their availability and behavior as version-dependent and confirm their current status before planning around them.

Best Value
Lenovo ThinkSystem SR630 Rack Server Bundle with Rail Kit, 2 x Intel Xeon Silver 4110, 128GB DDR4, 8TB SSD, RAID (Renewed)
  • Lenovo ThinkSystem SR630 is your reliable, easy to manage, and scalable 1U rack server, designed to excel at running a wide range of applications for small businesses up to large enterprises; rail kit is included for easy server installation
  • Get professional-grade performance with Dual (2) Intel Xeon Silver 4110 8-Core 2.10GHz 11MB processors, with up to 3.2GHz turbo
  • Speed, quality and reliability with 128GB DDR4 memory; Keep your data safe with software RAID
  • Increase application performance, manage information more efficiently and store plenty of data with 8TB (4 x 2TB) 6Gb/s SATA III Solid State Drives
  • Connectivity: VGA; 3 x USB 3.0; 1 x USB 2.0; Network: 4 x 1GbE ports standard; 1 x 1GbE dedicated management port; Hard drives and memory upgrades included separately NOT installed, installation required.

What to verify before using it across a fleet

A project announcement can explain the intended workflow, but it is not a security assessment or an operational readiness review. Before granting a new control plane access to production machines, review the current repository and documentation for the details that determine whether it fits your environment:

  • Supported Linux distributions, architectures and versions, including how architecture detection and binary installation work.
  • SSH key handling, privilege requirements, Hub authentication, role controls and audit logging.
  • How configuration validation and rollback work when a service restart, systemd action or network change fails partway through.
  • Which parsers and host-state checks are supported, and how findings can be reviewed or corrected without applying changes automatically.
  • How the reverse TLS channel is secured and how administrators can disable or recover it.
  • Which capabilities are stable versus beta, and whether release and maintenance activity meet your operational needs.

These checks are especially important for a tool that combines host inspection, configuration changes and fleet-wide controls. The announcement describes the project’s intended features; it does not independently verify their security or reliability.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.