https://github.com/yannh/openbsd_immutable_router
Packer/Ansible configuration for the automatic generation of an immutable OpenBSD image for a full router/firewall server
https://github.com/yannh/openbsd_immutable_router
immutable-infrastructure openbsd router
Last synced: 4 months ago
JSON representation
Packer/Ansible configuration for the automatic generation of an immutable OpenBSD image for a full router/firewall server
- Host: GitHub
- URL: https://github.com/yannh/openbsd_immutable_router
- Owner: yannh
- Created: 2015-08-17T21:08:07.000Z (over 9 years ago)
- Default Branch: master
- Last Pushed: 2020-06-20T17:09:28.000Z (almost 5 years ago)
- Last Synced: 2024-12-18T22:24:40.476Z (4 months ago)
- Topics: immutable-infrastructure, openbsd, router
- Language: Vim script
- Size: 35.2 KB
- Stars: 41
- Watchers: 5
- Forks: 4
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# OpenBSD immutable router image
This repository contains a packer script followed by an Ansible provisioning script for the
automated creation of an immutable OpenBSD ISO image for my personal router.
The goal is to create in one single command an image that can then be copied to a USB stick
on which a router/computer can boot on.
The image is "immutable" in the sense that the whole system is read-only, with particular mount
points mounted as mfs, to allow small amounts of writes in memory filesystems. This prevents
writes on the USB stick, making it very resilient to hard reboots, easy to recreate, and enforces
the full state of the system.
This repository has been made public for educational purposes, to provide an example of a
working "immutable server", and inspire people to start working on similar architectures. It can
also serve as a good read on the basic configuration of OpenBSD as a router.
Use make to generate the image file:
make build
Also a source of inspiration: https://github.com/tmatilai/packer-openbsd