For providers

List your GPU. Keep 85% of every rented hour.

Turn idle hardware into revenue by the second. You set the price and the hours, you keep control of the machine, and idle time costs you nothing.

List your hardware

See what the installer does

Payments are not switched on yet, so nothing is charged or paid out today. Everything below describes how it works once they are.

Eligibility

What qualifies

A supported GPU

Data-center cards (H100, A100, L40S) and high-end consumer cards (RTX 4090, RX 7900 XTX). The catalogue decides what can list; an unrecognised card registers but is not offered for rent.

Ubuntu with Docker

Ubuntu 24.04 and a working Docker daemon. The installer adds Docker if it is missing. Everything runs in containers, never on your host directly.

A driver that can actually run work

Presence is not enough. Before a card is offered, the agent checks the kernel exposes it as a usable compute device. A card whose driver stack cannot run a workload is held back, not rented at the GPU rate.

The install

What the installer does to your machine

One command, run with sudo. You are welcome to read it first: the script is served in the open, so you can download it, look it over, and run it yourself rather than piping it straight into a shell.

curl -fsSL https://cp.kracht.ai/install.sh -o install.sh
less install.sh
sudo bash install.sh --control-plane-url https://cp.kracht.ai --enrollment-token <TOKEN>

Creates an unprivileged system user, kracht-agent, with a nologin shell. It is added to the docker, render and video groups for device access, and nothing more.
Installs the agent under /opt/kracht-node-agent, its config under /etc/kracht-node-agent (holding the one-time token, mode 0640), and its state under /var/lib/kracht-node-agent.
Registers a hardened systemd service: NoNewPrivileges, ProtectSystem=strict, ProtectHome, PrivateTmp, and a writable path limited to its own state directory. The agent itself is sandboxed; only the container runtime is elevated.
Runs outbound-only. The agent polls the control plane and dials out, so no inbound port is opened for control. Your machine is not exposed to the internet to take part.

Two things it does only if you ask:

--harden-ssh

Disables SSH password auth and root login. Refuses to run if you have no authorized_keys, so it cannot lock you out, and validates the config before reloading.

--firewall

An nftables default-deny inbound policy, with the forward chain also default-deny so a rented session cannot reach the rest of your home network.

Isolation

What a renter can and cannot touch

Single-tenant, sandboxed

A renter gets a whole host, never a slice of yours mid-use. CPU workloads run inside gVisor (runsc), a user-space kernel that stands between the container and yours.

Where we are honest about GPUs

gVisor cannot pass an AMD or ROCm GPU through today, so an AMD GPU session runs on runc with host user namespaces. It is a weaker boundary than gVisor, and we say so rather than pretend. NVIDIA can opt into gVisor's nvproxy.

Kept off your network

With the firewall enabled, a session cannot reach your LAN. The GPU is wiped and re-attested between renters, and a renter never gets a shell on your host.

Earnings

How you get paid

85%to you

You keep 85% of every rented hour. The 15% platform fee is the only cut, and the split is exact, so no cent is lost to rounding.

Billed per second. A rental meters by the second and pays from the renter's prepaid balance. You earn for the exact time your card was working.
Your price is snapshotted. The rate is frozen when a rental starts, so a price change you make never alters a rental already running.
You set the terms. A floor price and availability windows. The marketplace only matches demand above your floor, inside your hours.
Idle costs you nothing. Unrented time is free. Pull your hardware back whenever you like, one command.

On your terms

How to pause or leave

It is your machine, always

Stop taking rentals without uninstalling anything:

sudo systemctl disable --now kracht-node-agent

To remove it completely, delete the /opt, /etc and /var/lib directories, the systemd unit, and the kracht-agent user. A running rental finishes first; nothing is cut off mid-job.

List a machine in a few minutes

List your hardware