The control plane: web UI, REST + gRPC API, config push, fleet metrics. One binary, embedded BoltDB by default; MongoDB optional for large fleets.
Packages & binaries
Docker
docker pull docker.io/opensight/linkmesh-server:latest
Agent
Managed tier only linkmesh-agent Runs on each managed host alongside an OpenTelemetry Collector. Handles enrollment, config delivery, lifecycle management, and health reporting via mTLS gRPC.
Only needed for the Managed tier. Standards-tier deployments use the customer's own OpenTelemetry Collector managed via OpAMP — no LinkMesh binary on the host. See the Standards path for that flow.
Packages & binaries
Collector (curated OTel distribution)
Managed tier only linkmesh-collector LinkMesh's narrow OpenTelemetry Collector build — 21 components covering ~80% of pipeline shapes seen in production. Used by the Managed tier; runnable standalone for advanced users who want a vendor-supported otelcol binary without the full LinkMesh agent.
Only needed for the Managed tier. Standards-tier users bring their own OpenTelemetry Collector (upstream otelcol-contrib or any compatible distribution) and enroll it via OpAMP — no LinkMesh-specific binary on the host.
Packages & binaries
Component set
receivers: otlp, hostmetrics, filelog, syslog, kafka, prometheus · processors: batch, memory_limiter, attributes, transform, filter, k8sattributes · exporters: otlp, otlphttp, prometheusremotewrite, loki, kafka, debug · extensions: health_check, pprof, zpages
Need something not on this list? Run upstream otelcol-contrib
and enroll it via the Standards path
— same OpAMP-based management, no LinkMesh-specific binary on the host.
Verify the signature
Each released binary is signed via sigstore. Verify before running:
# Pick the arch that matches your host
ARCH=linux-amd64
BASE=https://artifacts.saas.opensight.ch/binaries/linkmesh-collector/latest
curl -fsSL "$BASE/linkmesh-collector-$ARCH" -o linkmesh-collector
curl -fsSL "$BASE/linkmesh-collector-$ARCH.sig" -o linkmesh-collector.sig
curl -fsSL "$BASE/linkmesh-collector-$ARCH.cert" -o linkmesh-collector.cert
cosign verify-blob \
--certificate linkmesh-collector.cert \
--signature linkmesh-collector.sig \
linkmesh-collector
chmod +x linkmesh-collector
Pre-1.0 releases may ship unsigned while the signing-key custody decision is finalized.