A multi-vendor network OS lifecycle platform for image distribution, activation orchestration, validation, and rollback at scale. Built on event-driven architecture for reliable operations across 10+ devices simultaneously.
# Clone and run — everything in containers
$ git clone https://github.com/prajravi/nimble.git && cd nimble
$ docker compose up -d
# UI → http://localhost:3000
# API → http://localhost:8000/docsMulti-vendor support
From image upload to activation and rollback — managed through a single platform.
Upload, store, and select OS images with MD5 verification. Manage your golden images in a central repository.
SCP-based image push with disk space pre-checks. Sequential-per-batch guard ensures controlled rollout.
Separate distribution and activation windows with stale detection. Full control over maintenance schedules.
Platform-specific commands with diff comparison. Validate device state before and after activation.
HashiCorp Vault integration with named credential sets. Secrets never stored in the application layer.
Every state transition captured via Kafka events and persisted in PostgreSQL. Full operational traceability.
Automatic rollback on post-activation version mismatch. Never leave devices in an unknown state.
Batch review before execution. Peer approval ensures no unauthorized changes reach production devices.
Event-driven status via Redis pub/sub with Server-Sent Events. Watch operations unfold live in the UI.
Built on Apache Kafka for reliable, decoupled operations that scale horizontally.
Scale workers independently — Kafka rebalances partitions automatically.
docker compose up -d --scale worker-distribution=5 --scale worker-activation=5
Built with best-in-class tools for performance and developer experience.
A structured lifecycle with approval gates and automated validation.
Group devices for a lifecycle operation
CSV upload or manual entry with distribution + activation schedules
Link a Vault credential set to the batch
Peer review and approve the operation
Scheduler publishes to Kafka → SCP + MD5 verification
Boot-set + reload + version verify on schedule
Compare outputs; automatic rollback on version mismatch
Every action available through a clean REST API with OpenAPI documentation.
/api/v1/devices/upload-csv
/api/v1/devices/batches
/api/v1/devices/batches/{id}/approve
/api/v1/devices/add
/api/v1/jobs/distribute
/api/v1/jobs/activate
/api/v1/jobs/distribute/device
/api/v1/jobs/activate/device
/api/v1/images/upload
/api/v1/checks/commands
/api/v1/checks/execute/device/{id}
/api/v1/credentials/
/api/v1/audit/
All services containerized. Scale what you need.
Get started in minutes. Clone, compose, deploy.