unit
Deploys statically compiled binaries as hardened systemd units over SSH. No containers, no daemons, just PID 1.
go install github.com/vt100io/unit/cmd/unit@latest
View on GitHub →
Why
A statically compiled binary runs on any Linux host as-is. A container adds a daemon to manage, a registry to push to and a base image to pull, and buys nothing for a binary that has no runtime dependencies.
systemd already runs as PID 1 on every Linux server, with the isolation, secrets, resource limits, socket activation and timers you'd want. The gap is ergonomics: a hardened unit is 40+ lines before anything is specific to your app. unit takes a short description of what the app needs and writes the units correctly every time.
Leans on systemd, SSH.