tec3/ublue-forge
tec3/ublue-forge
1
0
Fork 0
mirror of https://github.com/ublue-os/forge.git synced 2025-04-16 11:33:43 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity
On-premises Universal Blue https://universal-blue.org
75 commits 6 branches 3 tags 5.9 MiB
Python 58.9%
Shell 35.2%
Dockerfile 5.9%
Find a file
Stephan Lüscher a2a37bd54c
feat(ansible): add role for variable debugging
2024-05-03 14:03:46 +00:00
.devcontainer feat(main): install ansible collections 2024-05-01 16:26:23 +00:00
.github chore(ci): streamline ci configuration with bluefin project 2024-04-30 18:47:22 +00:00
.vscode chore(devcontainer): update spell-check dictionary 2024-05-01 16:28:51 +00:00
ansible feat(ansible): add role for variable debugging 2024-05-03 14:03:46 +00:00
minica style: new line at end of file 2023-05-04 18:56:06 +00:00
registry feat: add container registry and mini ca (#3,#4) 2023-04-27 17:20:18 +00:00
traefik feat(main): replace caddy with traefik as reverse proxy 2024-04-29 10:58:10 +00:00
.gitignore chore: ignore locally installed ansible collections 2023-05-01 16:15:40 +00:00
.gitmessage chore: update gitmessage template 2024-04-30 18:53:23 +00:00
.markdownlint.yml refactor(devcontainer): new devcontainer specification based on debian 2024-04-26 21:29:40 +00:00
.prettierignore chore(devcontainer): init 2023-04-27 06:10:08 +00:00
.prettierrc.yml refactor(devcontainer): new devcontainer specification based on debian 2024-04-26 21:29:40 +00:00
forge-pod.yml feat(main): keep ansible running 2024-05-01 08:30:11 +00:00
forge.just feat(main): add just configuration file 2024-05-01 18:54:06 +00:00
forge.sh feat(main): keep ansible running 2024-05-01 08:30:11 +00:00
LICENSE Initial commit 2023-04-26 16:58:51 -04:00
README.md doc(main): add info about ansible 2024-05-01 08:46:57 +00:00

README.md

forge

On-premises Universal Blue

This repo is intended to provide the service units necessary to set up a self-hosted OS forge for custom images.

Warning

This project is "work in progress" and not ready for production

Vision

Imagine something like a home lab or a university lab:

  1. Deploy forge
  2. Go into the WebUI, clone in your favorite uBlue repo and make changes
  3. Forge automatically starts to build the images
  4. PXE boot the clients, select ublue in the menu
  5. Eat tacos
  6. Return to a fully deployed lab with centralized package management

What we have so far

We are still working on making the vision a reality. The following has been implemented so far:

Certificate Authority

We use a Minica as simple CA to generate a key pair and a root certificate for *.ublue.local. The wildcard certificate is then made available to all other components and are valid for 2 years and 30 days.

Reverse Proxy

As an entry point for all components we use Traefik as a reverse proxy. Based on URL routing it will redirect the traffic to the right container instance.

The reverse proxy dashboard is available at https://traefik.ublue.local

Container Registry

As container registry we make use of the Docker Registry 2.0 implementation for storing and distributing container images

The container registry API is available at https://registry.ublue.local/v2

Anvil

The blacksmith's work is done with Ansible.

The shiny GUI is missing but this should not shy us away. See usage for instructions.

Handling the forge

You can use the forge.sh to setup, heat-up and cool-down the forge.

Command Description
./forge.sh setup Setup the forge for the first time or update existing setup
./forge.sh heat-up Start the forge
./forge.sh cool-down Stop the forge

Usage

..tbd...