https://github.com/yannh/openbsd_immutable_router

Packer/Ansible configuration for the automatic generation of an immutable OpenBSD image for a full router/firewall server
https://github.com/yannh/openbsd_immutable_router

immutable-infrastructure openbsd router

Last synced: about 2 months ago
JSON representation

Packer/Ansible configuration for the automatic generation of an immutable OpenBSD image for a full router/firewall server

• Host: GitHub
• URL: https://github.com/yannh/openbsd_immutable_router
• Owner: yannh
• Created: 2015-08-17T21:08:07.000Z (about 9 years ago)
• Default Branch: master
• Last Pushed: 2020-06-20T17:09:28.000Z (over 4 years ago)
• Last Synced: 2024-06-11T05:32:01.134Z (3 months ago)
• Topics: immutable-infrastructure, openbsd, router
• Language: Vim script
• Size: 35.2 KB
• Stars: 41
• Watchers: 5
• Forks: 4
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# OpenBSD immutable router image

This repository contains a packer script followed by an Ansible provisioning script for the

automated creation of an immutable OpenBSD ISO image for my personal router.

The goal is to create in one single command an image that can then be copied to a USB stick

on which a router/computer can boot on.

The image is "immutable" in the sense that the whole system is read-only, with particular mount

points mounted as mfs, to allow small amounts of writes in memory filesystems. This prevents

writes on the USB stick, making it very resilient to hard reboots, easy to recreate, and enforces

the full state of the system.

This repository has been made public for educational purposes, to provide an example of a

working "immutable server", and inspire people to start working on similar architectures. It can

also serve as a good read on the basic configuration of OpenBSD as a router.

Use make to generate the image file:

    make build

Also a source of inspiration: https://github.com/tmatilai/packer-openbsd