https://github.com/uditkarode/diamond
☁️ Easily host reasonably contained applications with sane limits.
https://github.com/uditkarode/diamond
Last synced: 12 months ago
JSON representation
☁️ Easily host reasonably contained applications with sane limits.
- Host: GitHub
- URL: https://github.com/uditkarode/diamond
- Owner: uditkarode
- License: gpl-3.0
- Created: 2022-01-19T18:31:35.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2023-11-29T08:39:48.000Z (over 2 years ago)
- Last Synced: 2025-04-11T23:16:39.565Z (about 1 year ago)
- Language: Haskell
- Homepage:
- Size: 131 KB
- Stars: 7
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# diamond
☁️ Easily host reasonably contained applications with sane limits.
Diamond is an alternative for when you can't or don't want to use Docker/Podman. It makes management of hosted services easier and allows you to "contain" them to some extent.
Here are the steps it takes for this -- let's assume you want to host a service called `foo`.
Diamond will:
* Create a Linux user `foo` and it's home directory, `/var/apps/foo`
* Create a disk image called `foo.img` with the size you desire
* Mount the image in `/var/apps/foo/mountpoint` and clone the source there
* Create a SystemD service file with CPU/RAM limitations in `/etc/systemd/system/foo.service`
Since the service will have it's own unprivileged Linux user, it's possible to limit damage caused if that specific service is compromised. The reason for the creation of the disk image is simple -- if the service allows saving arbitrary files to disk, it should not be possible for the service to fill the host disk to the brim and crash the system; it also has a positive side-effect of making the service and it's files more portable.
Diamond also allows you to automatically mount all the disk images and start all the services automatically this way:
```bash
sudo -E diamond --mount-all
sudo -E diamond --start-all
```
and allows checking their status using `sudo -E diamond --list`.
# Downloads
## arm64
**Linux**: https://nightly.link/uditkarode/diamond/workflows/arm64/master/diamond-arm64.zip
## x86_64
**Linux**: https://nightly.link/uditkarode/diamond/workflows/x86_64/master/diamond-Linux.zip
> NOTE: untested on macOS
**macOS**: https://nightly.link/uditkarode/diamond/workflows/x86_64/master/diamond-macOS.zip