On-premises Universal Blue https://universal-blue.org
Find a file
2023-05-08 15:00:06 +00:00
.devcontainer chore(devcontainer): install ansible from semaphore 2023-05-08 15:00:06 +00:00
.github ci: workflows for conventional commit and release-please 2023-04-27 18:37:43 +00:00
.vscode chore(devcontainer): update spell-check dictionary 2023-05-05 21:24:28 +00:00
minica style: new line at end of file 2023-05-04 18:56:06 +00:00
registry feat: add container registry and mini ca (#3,#4) 2023-04-27 17:20:18 +00:00
rvproxy feat: create ssh key for automation tasks 2023-05-04 15:02:05 +00:00
semaphore refactor: build custom container (#13) 2023-05-08 14:26:06 +00:00
setup chore(devcontainer): install ansible from semaphore 2023-05-08 15:00:06 +00:00
.gitignore chore: ignore locally installed ansible collections 2023-05-01 16:15:40 +00:00
.gitmessage chore(devcontainer): init 2023-04-27 06:10:08 +00:00
.markdownlint.json chore(devcontainer): init 2023-04-27 06:10:08 +00:00
.prettierignore chore(devcontainer): init 2023-04-27 06:10:08 +00:00
.prettierrc chore(devcontainer): init 2023-04-27 06:10:08 +00:00
forge-pod.yml feat: configure host system (#12) 2023-05-05 21:23:16 +00:00
forge.sh feat: check installation pre-requisites (#14) 2023-05-06 17:03:12 +00:00
LICENSE Initial commit 2023-04-26 16:58:51 -04:00
README.md feat: manage forge with one command (#14) 2023-05-04 17:05:33 +00:00

forge

On-premises Universal Blue

This repo is intended to provide the service units necessary to set up a self-hosted OS forge for custom images.

Warning

This project is "work in progress" and not ready for production

Vision

Imagine something like a home lab or a university lab:

  1. Deploy forge
  2. Go into the WebUI, clone in your favorite uBlue repo and make changes
  3. Forge automatically starts to build the images
  4. PXE boot the clients, select ublue in the menu
  5. Eat tacos
  6. Return to a fully deployed lab with centralized package management

What we have so far

We are still working on making the vision a reality. The following has been implemented so far:

Certificate Authority

We use a Minica as simple CA to generate a key pair and a root certificate for *.ublue.local. The wildcard certificate is then made available to all other components and are valid for 2 years and 30 days.

Reverse Proxy

As an entry point for all components we use Caddy as a reverse proxy. Based on URL routing it will redirect the traffic to the right container instance.

Container Registry

As container registry we make use of the Docker Registry 2.0 implementation for storing and distributing container images

The container registry is available at registry.ublue.local

WebUI

As a WebUI we use Ansible Semaphore.

The WebUI is available at forge.ublue.local

You can use the the user ublue and password ublue to login.

Warning

At the moment there's only a dummy project included. Tasks for real life usage will be included soon.

Handling the forge

You can use the forge.sh to setup, heat-up and cool-down the forge.

Command Description
./forge.sh setup Setup the forge for the first time or update
./forge.sh heat-up Start the forge
./forge.sh cool-down Stop the forge