kortaQuestions
about Korta.
Short answers about the core CLI, Korta Enterprise, supported systems and safety.
For details, read the documentation.
What is Korta?
Korta is a lightweight, agentless configuration management tool written in Go. You describe the state of Linux servers in Markdown roles, review a plan, and apply it over SSH. The core CLI is open source on GitHub.
Does Korta need an agent on my servers?
No. Hosts need only SSH access with root or passwordless sudo. Korta uses your existing SSH configuration, ssh-agent and known_hosts file.
Does running a plan change my servers?
No. korta plan connects to each selected host and reports what would change. korta apply plans again, shows the changes, asks for confirmation, then applies them host by host and stops at the first failure.
Which operating systems can Korta configure?
Ubuntu 22.04 and 24.04, Debian 12 and 13, RHEL, Rocky Linux and AlmaLinux 8 to 10, and CentOS Stream 9 and 10, on amd64 or arm64.
Which machine runs the korta CLI?
macOS or Linux, with the OpenSSH client installed. The Windows builds work with a Korta Enterprise manager; to run roles over SSH from Windows, use WSL.
How do I install Korta?
Download a release archive from the GitHub releases page, verify its checksum, and put korta on your PATH. With Go 1.26 or later, run go install github.com/nexusrun/korta/cmd/korta@latest. The installation guide has the full steps.
What is Korta Enterprise?
Korta Enterprise is a separate, commercial, self-hosted manager. It adds a web console and API, plan approval with four-eyes review, an audit log, per-user access levels, an encrypted vault for SSH keys and secrets, deployments, AWS instance provisioning, and AI role drafting. The same korta CLI and role files work with it.
Which databases and applications can Korta Enterprise deploy?
PostgreSQL 14 to 17, and MySQL 8.4 LTS and 9.7 LTS, installed natively under systemd from official repositories with TLS and backups. Node.js and Next.js applications are deployed from Git with health-checked rollouts and automatic rollback.
Where are secrets stored?
In the Korta Enterprise vault, encrypted with AES-GCM under a vault key you back up. Secret values are write-only: they are never shown again, and they stay out of plans and logs.
Does the AI role assistant change servers?
No. Claude drafts or revises a role, Korta checks it with the same validation as a hand-written role, and a person reviews and approves the plan before anything is applied. The assistant sees instance names, labels and operating systems, never addresses, keys or passwords.
Can Korta Enterprise create AWS instances?
Yes. Add an AWS account under Settings, then describe the instances in a role. Korta picks the official image, network, SSH key and security group, launches the instances and configures them. Destroy terminates them.
Where can I report a security problem?
Report it privately through GitHub security advisories at github.com/nexusrun/korta/security/advisories/new. The SECURITY.md file in the core repository describes the policy.