Encrypted CI/CD, cron and server alerts to iPhone and Android
1.4K
Containerized action runner for NerveOps.
Use this image only when you want to run a trusted agent that receives signed, bounded commands from a Nerve pipe and returns encrypted output.
For send-only CI/CD, cron, and server alerts, start with nerve-cli instead:
https://hub.docker.com/r/p1xel32/nerve-cli
docker pull p1xel32/nerve-agent:latest
Help
docker run --rm p1xel32/nerve-agent:latest -h
Run agent
docker run --rm -it \
-v nerve-agent-data:/var/lib/nerve-agent \
p1xel32/nerve-agent:latest \
-server api.nerve.ink:443 \
-token YOUR_AGENT_TOKEN
Persist /var/lib/nerve-agent so the agent ECDH key remains stable across restarts. Long-running container
docker run -d \
--name nerve-agent \
--restart unless-stopped \
-v nerve-agent-data:/var/lib/nerve-agent \
p1xel32/nerve-agent:latest \
-server api.nerve.ink:443 \
-token YOUR_AGENT_TOKEN
Security model The agent is not a general webhook receiver and not a chat bot. It connects outbound to the Nerve relay, receives E2E-encrypted command envelopes, verifies signed commands, executes them inside the container namespace, and returns encrypted output.
Commands execute where the container can execute them. For host-level administration, prefer the systemd install path or mount only the specific scripts and data the agent is allowed to touch.
Use agent when
You control the machine.
You explicitly want signed remote actions.
You can bound what the container may access.
You need encrypted command output back on your phone. Do not use agent when
You only need CI/CD failure alerts.
You only need cron or backup notifications.
You do not want command execution on the machine.
For those cases, use the send-only CLI image:
echo "deploy failed" | docker run -i --rm \
-e NERVE_DSN="nerve://TOKEN:[email protected]" \
p1xel32/nerve-cli:latest send
Links
Content type
Image
Digest
sha256:5a9dababc…
Size
6.4 MB
Last updated
4 months ago
docker pull p1xel32/nerve-agent