runspec-linux
Linux system-administration runnables (plus crontab,
filesystem, and the cross-platform web/TLS/API probes) for
runspec. pip install it into a venv and
the runnables are discoverable by runspec local, runspec serve (MCP), and
runspec-console.
All runnables emit JSON on stdout. Read-only runnables are autonomy = "autonomous"; state-changing ones are autonomy = "confirm".
Nothing here runs as root. A tool runs as whoever owns its venv (runspec
= 0.68.0): you in a personal venv, or the service account in a shared one.
--run-aspicks another unprivileged account and refusesroot. The tools that need root (package upgrades/installs,reboot-host,set-sysctl,enable-passwordless-sudo) are inrunspec-linux-root, for a root-owned admin venv.
Install
pip install runspec-linux
Runnables
| Group | Runnables |
|---|---|
| System | system-info, disk-usage, block-devices, check-memory, cpu-info, pressure |
| Processes | list-processes |
| Services | list-services, check-service, restart-service, service-detail, failed-units |
| Logs | tail-log, search-log, journalctl |
| Network | network-interfaces, ping-host, check-port, show-connections, trace-route, route-table, socket-stats, dns-config, open-ports |
| Kernel params | get-sysctl |
| Files | find-large-files, backup-files, owning-package |
| Sessions | last-logins, who |
| Containers | list-containers, container-logs, restart-container |
| Packages (read-only) | list-packages, list-autoremovable |
| TCP | nc-command |
| Commands | which |
| Cron | cron (multi-verb: list/add/remove/clear) |
| Filesystem | filesystem (multi-verb, backed by runspec-fs-core) |
| Web / TLS / API | cert-check, cert-chain, tls-info, http-check, http-headers, redirect-trace, dns-lookup, api-spec |
The package runnables auto-detect apt / dnf / yum / zypper / pacman.
The web/TLS/API probes are pure HTTP (shared with runspec-windows via
runspec-webops-core) and run anywhere.
system-info
list-packages --filter nginx
check-port --host db-01 --port 5432
cert-check --url https://internal.example.com
Python venvs
The venv runnables (create-venv, install-into-venv, configure-pip,
share-venv-logs) were removed in 0.20.0. Provision a venv on a host from
runspec-console (Settings → Jump Hosts → Provision new venv…), install
packages from its Marketplace tab, or on the command line use
python -m venv, pip install and runspec logs share --inbox.
Public Python API
The pure logic lives in runspec-linux-core — no
runspec dependency, no runspec.toml, no entry points (so it surfaces no
runnables). A corporate wrapper package that only wants a helper should depend
on the core alone:
from runspec_linux_core import nc_send, system_info, which
The helpers are also re-exported from runspec_linux for back-compat. Core
helpers return plain data and raise (ToolNotFoundError / CommandError) on
failure; the runnable wrappers catch these to render the CLI/agent behaviour.
Development
python -m venv .venv && . .venv/bin/activate
pip install -e ".[dev]"
ruff check . && ruff format --check .
pytest
1 maintainer
Metadata
1 maintainer
Release files for runspec-linux 0.20.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| runspec_linux-0.20.0.tar.gz | 35.5 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| runspec_linux-0.20.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 63.8 kB
Release files / runspec_linux-0.20.0.tar.gz
| Download URL | runspec_linux-0.20.0.tar.gz |
|---|---|
| Size | 35.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
cd95cdf3801c77ff06ecc322e204a68301d7b003e9a2aa11e2cfa1e702e4c294
|
|
BLAKE2b-256 checksum How to use checksums |
24edf05102b8e5a1601fe78398817e2970faaa4c5d32554430c9bbda566483ec
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 2, 2026.
Transparency logRelease files / runspec_linux-0.20.0-py3-none-any.whl
| Download URL | runspec_linux-0.20.0-py3-none-any.whl |
|---|---|
| Size | 28.2 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
03a24d00c544867fe697992ad0c793e2ad5f6b6f85f079912840ad7a292fb5a4
|
|
BLAKE2b-256 checksum How to use checksums |
3b26bb664c99ae30a8adb2bce8210412a1c3ead1bbe045ca1ea5d0f2d9aca73d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 2, 2026.
Transparency log
