What if infrastructure just worked.

A self-healing container runtime with built-in mTLS mesh.
Zero external dependencies.

Raft consensus / Embedded CA / Transparent mesh / Zero-trust by default
clust
$ _

No external dependencies

No etcd. No consul. No platform team. Raft consensus and an embedded CA are built in. Nothing else to install.

Network isolation

Each container gets a private point-to-point link to its host. No shared bridge, no network to sniff. Your app just makes HTTP calls.

mTLS on every connection

Between nodes, every connection is mutual TLS — built in from the ground up. No sidecars, no SDK, no TLS config in your app.

No runbooks

Nodes fail. Containers crash. The runtime compares what should be running with what is running and closes the gap. Every time, automatically.

Deploy and forget

Name it, ship it, walk away. Placement, networking, certificates — handled.

Install

curl -sfL https://raw.githubusercontent.com/clustrun/install/main/install.sh | sh

Installs to ~/.clust/bin. Override with INSTALL_DIR.