Developer tools
Kestrix
Kestrix defines CI/CD pipelines in HCL and resolves them into a DAG. A task runs only when the repositories its trigger names have changed. Live task logs in a React Flow UI, and remote runners that only make outbound HTTPS requests.
- Category
- Developer tools
- Stage
- Beta
- For
- DevOps'es
- Pricing
- The source is public under the PolyForm Noncommercial License 1.0.0. It is free for personal and other non-commercial use. Commercial use needs a paid plan (from $3/month, see `PRICING.md`). It is not an OSI open-source license.
About
I built Kestrix for myself, to keep my DevOps projects separate from my coding projects. It treats repositories as inputs rather than as owners of the pipeline, so one pipeline definition can react to changes in several repositories. - **Declarative HCL definitions:** Projects, repositories, dependencies, and tasks are written in HashiCorp Configuration Language (`pipeline.tf`). - **DAG trigger engine:** Cycle detection, dependency ordering, and trigger expressions with `&&`, `||`, `!` and grouping (e.g. `repo.core.changed || repo.api.changed`). Tasks whose trigger does not match are skipped. - **Visual DAG:** A React Flow view with color-coded task states (Passed, Running, Failed, Skipped, Manual Gate) and live task logs with ANSI colors. - **Remote runners:** Runners only make outbound HTTPS requests (long-polling), so they need no inbound ports. In Docker mode, tasks run with `--cap-drop ALL` and `--security-opt no-new-privileges`, a PID limit (default 256), and optional CPU and memory limits. - **Single-task rerun:** Rerun only the failed node instead of the whole pipeline. - **Manual gates:** `manual = true` pauses a task until an operator approves it. - **Terraform / OpenTofu provider:** `terraform-provider-kestrix` manages Kestrix projects (the `kestrix_project` resource). It is published on both registries as `Draqun/kestrix`. - **Go and PostgreSQL:** The domain layer imports only the standard library. CI enforces 100% statement coverage on `internal/web` and `intern
Product questions
What does Kestrix do?
I built Kestrix for myself, to keep my DevOps projects separate from my coding projects. It treats repositories as inputs rather than as owners of the pipeline, so one pipeline definition can react to changes in several repositories. - **Declarative HCL definitions:** Projects, repositories, dependencies, and tasks are written in HashiCorp Configuration Language (`pipeline.tf`). - **DAG trigger engine:** Cycle detection, dependency ordering, and trigger expressions with `&&`, `||`, `!` and grouping (e.g. `repo.core.changed || repo.api.changed`). Tasks whose trigger does not match are skipped. - **Visual DAG:** A React Flow view with color-coded task states (Passed, Running, Failed, Skipped, Manual Gate) and live task logs with ANSI colors. - **Remote runners:** Runners only make outbound HTTPS requests (long-polling), so they need no inbound ports. In Docker mode, tasks run with `--cap-drop ALL` and `--security-opt no-new-privileges`, a PID limit (default 256), and optional CPU and memory limits. - **Single-task rerun:** Rerun only the failed node instead of the whole pipeline. - **Manual gates:** `manual = true` pauses a task until an operator approves it. - **Terraform / OpenTofu provider:** `terraform-provider-kestrix` manages Kestrix projects (the `kestrix_project` resource). It is published on both registries as `Draqun/kestrix`. - **Go and PostgreSQL:** The domain layer imports only the standard library. CI enforces 100% statement coverage on `internal/web` and `intern
Who is Kestrix for?
DevOps'es
How much does Kestrix cost?
The source is public under the PolyForm Noncommercial License 1.0.0. It is free for personal and other non-commercial use. Commercial use needs a paid plan (from $3/month, see `PRICING.md`). It is not an OSI open-source license.