jails collaborators wanted: software defined networking + jail orchestrators [bastille | cbsd]

toddg

toddg

Hey FreeBSD community.

I am looking for collaborators on a project for managing jails. I have written a software defined network in gleam that can create isolated jail networks. The original idea was to manage dev|stage|prod|global jails on a single host. However, it could be easily expanded to manage jails across a fleet of hosts. I have it working such that it can create parent jails that are isolated from each other, but that can be configured to reach external networks, if desired.

My intention is to give people an alternative to hosting on the big providers, e.g. Azure, GCP, AWS, etc. and instead provision bare metal and deploy there. The advantages being FreeBSD, fully open source, cost containment, decreased resource use.

If you are interested and would like to help or contribute, that'd be great. My next steps are:

* learn bastille
* learn cbsd
* replace my jail orchestration code by delegating to bastille and/or cbsd
* improve docs and tests
* flesh out hierarchical jail examples

For context, here are some discussion threads:
* https://github.com/BastilleBSD/bastille/issues/1657#issuecomment-5518325011
* https://github.com/cbsd/cbsd/discussions/890#discussioncomment-18210151
* https://forums.freebsd.org/threads/...g-to-fail-b-c-no-response.103733/#post-774214
* https://forums.freebsd.org/threads/...l-director-overlord.101425/page-3#post-773499

This has been a fun project so far, but it would be even more fun with collaborators!

-Todd
 
 
DtxdF Thank you for the links! I've spent the morning going down the rabbit hole:

I learned a lot from diving into gyptazy's blog
* https://gyptazy.com/blog/sylve-freebsd-ansible-module-automation/

This looks cool, if you are into web ui's and such (not what I'm looking for)
* https://sylve.io/

This is based on elixir and erlang BEAM, but it seems to be just one human dev using an LLM... I like elixir and BEAM, the docs are nice, it's easy to understand the Dockerfile interface...
* https://kleene.dev/

* It is true, AppJail looks very similar to what I want and what I am driving towards. It's just that every time I read the docs, I get confused. Part of this is because I need to better understand the underlying concepts... But it is also possible that the docs are confusing. The bastille and kleene docs are both examples of nicely organized and understandable docs. Unfortunately, as cool as cbsd is, the docs there are in disarray or just missing.

* Pot + Nomad looks very cool, but they also don't look like they are actively maintained...many of the docs pages are 5 years old (https://pot.pizzamig.dev/).

Still wandering around in the rabbit maze, more soon.
 
toddg said:
It is true, AppJail looks very similar to what I want and what I am driving towards. It's just that every time I read the docs, I get confused. Part of this is because I need to better understand the underlying concepts... But it is also possible that the docs are confusing.
Click to expand...

Thanks for the feedback. Maybe I need to improve the docs.

I have recently reworked the Getting Started guide just in case you want to give to AppJail a second opportunity.

toddg said:
Unfortunately, as cool as cbsd is, the docs there are in disarray or just missing.
Click to expand...

Yeah, CBSD is so cool. Sadly, bsdstore.ru is no longer active, but there are likely many captures in web archive:

* https://web.archive.org/web/20250818152851/https://www.bsdstore.ru/html/doc_en.html

But I think Oleg is migrating the documentation to GitHub.
 
You must log in or register to reply here.
Back
Top