Supported platforms
Platform support depends on the collector, advisory data, and remediation method. Detection support does not imply that every fix is supported.
| Platform | Agent requirements | Scheduling |
|---|---|---|
| Debian and Ubuntu | Python 3.9+, curl, root for installation | systemd timer |
| RHEL family, including AlmaLinux and Rocky | Python 3.9+, curl, root for installation | systemd timer |
| Alpine | Python 3.9+, curl; use the installation and scheduling supported by the host | See host setup |
| SUSE | Python 3.9+, curl, root for installation | systemd timer |
| Windows 10 / Server 2016 and newer | Administrator installation; bundled Python runtime | SYSTEM scheduled task |
The normal report interval is six hours. Hosts that permit remediation poll for jobs every 15 minutes. Windows also reports at startup.
Windows collection
The installer supplies the pinned official embeddable Python runtime. It verifies program signatures and stores the runtime under Program Files\Nimstead\runtime.
Windows 8.1 / Server 2012 R2 and older are refused. Third-party application detection uses a curated product catalogue. Unrecognised applications remain inventory and do not gain guessed CVE matches.
Limits by operation
- Remote Windows scans collect findings but cannot apply fixes.
- Java archive and application scans require local opt-in.
- Some Windows updates cannot be removed. The plan must state its rollback limits.
- Linux package rollback does not necessarily reverse package-script effects outside restored files.
Use the current repository status for named platform proofs and gaps. Historical proof on one version does not establish support for every later image or package combination.