Raintop

Your machines. One calm, native dashboard.

Monitor your laptop, servers, workstations, and GPU fleet without sending telemetry to a cloud service.

Highlights · Getting started · SSH setup · Contributing

Raintop brings the at-a-glance utility of htop and nvtop to a native graphical interface with first-class multi-host monitoring over SSH. See every detected NVIDIA GPU together, follow live utilization and VRAM history, and keep one failed host from obscuring the rest of your fleet.

Note

Raintop is pre-release software. Packages produced from the current source are not yet code-signed or notarized; build from source or inspect a release before installing it.

Highlights

One fleet view	Sample every configured device concurrently and see GPU utilization, VRAM, temperature, power, and host latency in one place.
Local-first	Host definitions stay on your machine. Raintop has no account, cloud service, analytics, or telemetry proxy.
Native SSH trust	Reuse OpenSSH config, aliases, agent, keys, known_hosts, proxy jumps, and optional vault-backed passwords.
Failure isolation	Slow or unreachable hosts cannot block the dashboard; errors remain attached to the affected device.
Accessible by design	Core controls work from the keyboard and status is never communicated by color alone.
Flexible density	Choose Compact, Comfortable, or Large live-monitor layouts, or switch to Cards for a fleet summary.

Designed around a small trust boundary

Raintop UI  ──typed IPC──▶  Rust core  ──OpenSSH──▶  your hosts
   local state              validation              read-only telemetry

• Collection reads /proc, standard Unix tools, and nvidia-smi; it does not mutate remote hosts.
• Remote output is treated as untrusted input and normalized before reaching the UI.
• Passwords are kept in Keychain, Credential Manager, or Secret Service—not in Raintop's host file.
• Host identity remains OpenSSH's job; strict host-key verification is never disabled.

Read the architecture and telemetry protocol notes for the full boundary.

Getting started

Prerequisites

• Node.js 22 or newer
• pnpm 11
• Rust 1.88 or newer
• The Tauri 2 platform dependencies

git clone <your-fork-or-repository-url>
cd raintop
pnpm install --frozen-lockfile
pnpm check
pnpm tauri dev

Want to work only on the interface? pnpm dev starts the browser build with representative demo data—no native bridge or remote server required.

Add a remote device

1. Connect once in a terminal and verify the host-key fingerprint: ssh my-server true.
2. Open Raintop and choose + beside Devices.
3. Enter a friendly name and the same destination or SSH config alias. Pasted commands such as ssh -p 2222 user@example.com are supported.
4. Use your SSH key or agent, or select Password to save the account password in the operating system credential vault.

Remote Linux hosts need a POSIX shell, ps, awk, df, and /proc. Raintop detects nvidia-smi automatically. The SSH guide covers proxy jumps, hardening, and troubleshooting.

Build and release

# Web assets and type checking
pnpm build

# Native installer for the current operating system
pnpm tauri build

Tauri installers are platform-native. The included workflows test macOS, Linux, and Windows on every change and build release bundles on their matching runners when a v* tag is pushed. See the release guide before publishing a version.

Platform	Bundles
macOS	.app, .dmg
Linux	.deb, .rpm, .AppImage
Windows	.msi, NSIS installer

Quality

pnpm check
cargo fmt --manifest-path src-tauri/Cargo.toml -- --check
cargo test --manifest-path src-tauri/Cargo.toml
cargo clippy --manifest-path src-tauri/Cargo.toml --all-targets -- -D warnings

Privacy and security

Raintop does not store private-key contents. Optional SSH passwords are supplied to OpenSSH through a private askpass flow and never placed in process arguments, temporary scripts, logs, or telemetry. Device removal only deletes Raintop's local entry and any associated vault credential; it does not alter the remote host or ~/.ssh/config.

Please report suspected vulnerabilities privately as described in SECURITY.md. Do not include real credentials or private host data in reports, screenshots, fixtures, or logs.

Contributing

Thoughtful fixes, tests, documentation, accessibility improvements, and platform reports are welcome. Start with CONTRIBUTING.md, keep changes focused, and include screenshots for visual work—with hostnames and identifying data removed.

License

Raintop is available under the MIT License.

_{Built for people whose “one computer” quietly became a fleet.}