Systemd-native process manager for Linux — a lean alternative to PM2 and
Supervisor built directly on systemd rather than a custom supervisor daemon.
Rust 1.96+ · Linux only · License: MIT
| Runtime | Compiled Go, native |
| Supervisor | systemd — apps outlive the CLI |
| Sandboxing | DynamicUser + landlock |
| Config | CLI flags or unitpm.yml |
Startup/memory measurements and the reproduction harness:
scripts/bench — run in CI on Ubuntu 24.04 (kernel 6.17)
against PM2 5.4.3 and supervisord 4.2.5, reproducible locally with
docker build -f scripts/bench/Dockerfile -t unitpm-bench . && docker run --rm unitpm-bench.
# Grab the latest .deb from https://github.com/Glyndor/unitpm/releases
sudo apt install ./unitpm_*_amd64.deb
sudo usermod -aG unitpm "$USER" && newgrp unitpm
sudo systemctl enable --now unitpmd
sudo unitpm install-tools # optional: expose bun/node/go/… to the daemongh release download --repo Glyndor/unitpm --pattern 'unitpm_linux_amd64'
install -m 0755 unitpm_linux_amd64 ~/.local/bin/unitpmunitpm start "node server.js" --name api --namespace prod --restart always
unitpm list
unitpm logs api --followEvery lifecycle command (stop, restart, reload, reset, delete,
flush) accepts --namespace <ns> or the <ns>:* selector — no more
xargs loops:
unitpm restart --namespace prod # roll the prod tier
unitpm stop 'staging:*' # halt everything in staging (quote the glob)
unitpm delete --namespace old --purgeOne command spawns an API with no access to /home, no new privileges, and
secrets delivered through systemd credentials instead of environment disk:
unitpm start api.js \
--name api \
--isolation dynamic \
--env-file .env.productionSecrets never appear in /proc/<pid>/environ, ps, or the on-disk spec.
Rendered docs: https://jaro-c.github.io/unitpm/. In-repo:
| Topic | Link |
|---|---|
| Runtime recipes — Node / Bun / Python / Go / Rust / Ruby / JVM / … | docs/RUNTIMES.md |
| Tutorials — Next.js, FastAPI, Django, production hardening, unitpm.yml | docs/TUTORIALS.md |
Commands reference — start, list, apply, export, … |
docs/commands/ |
| FAQ — "Can I…?" / "Why does X fail?" | docs/FAQ.md |
| Architecture overview | ARCHITECTURE.md |
| Security model + threat model | SECURITY.md |
| Mode | Socket | Use for |
|---|---|---|
System (default with .deb) |
/run/unitpmd/unitpm.sock (0660, group unitpm) |
Production |
| User | $XDG_RUNTIME_DIR/unitpm-<uid>/unitpm.sock (0600) |
Dev |
System mode does not inherit the caller's env. User mode does.
Launch user mode ad-hoc with unitpmd &, or sudo unitpm startup for boot persistence. Details in the FAQ.
| Symptom | Where to look |
|---|---|
cannot reach the unitpm daemon |
unitpmd & (user) or sudo systemctl start unitpmd (system) |
| Daemon won't start / unit errors | journalctl -u unitpmd -f |
--isolation dynamic rejected |
Needs the system-mode daemon (polkit rule is shipped in the .deb) |
| Generic usage / naming / env issues | docs/FAQ.md |
unitpm is Linux-only. Contributors on macOS/Windows should use a Linux VM or VS Code Remote-WSL.
See CONTRIBUTING.md for the full workflow and ARCHITECTURE.md for the internals.
MIT — commercial use, modification, and distribution permitted.