Add link to demo video
This repository contains the full code (minus the secrets) used to deploy
y.bitfehler.net, the authoritative name servers for
bitfehler.net, anemos.io, and a few other zones.
All aspects of the systems are described in code in the form of a makeimg IMGBUILD. Anemos is used for deployment. Besides the obvious utility of this repository its main purpose is to serve as a demo for these projects.
A server is redeployed by running e.g.
make BF_HOST=y deploy. This assumes it
is already running the system as described in this repo.
If one of the servers has to be remotely re-imaged (e.g. because something
broke beyond repair) or a new server is brought in, using the
deploy can achieve the same thing off of a stock Leaseweb Debian
image (they do not offer Alpine).
You can see this in action here.
In rough terms, this is what happens:
makeimgis used to reveal all used secrets - these secrets are only accessible on my laptop and need to be shipped somehow.
IMGBUILDfile plus additional input files), an Anemos env file, and the secrets
The execution of Anemos will lead to the following events:
makeimg, bootstrapping a system exactly as described in the IMGBUILD
The system description includes low-level details like disk partitioning, file systems, and boot loader setup. These things can be changed because the deploy is performed by an initramfs.
In this case, the secrets are resolved on the workstation triggering the deploy and then transferred to the server with the IMGBUILD. In larger environments that feature network-based secrets management systems, this step could be performed on the host itself.
A deployment requires relatively little bandwidth for the client triggering it. Only the IMGBUILD definition has to transferred to the server. All the packages are then pulled from the server, which presumably has a decent connection.
It might be obvious, but still worth pointing out: this method of deployment provides ample opportunity to render a system unbootable. You should not attempt this on systems unless you have some means to restore an unbootable system, e.g. physical access, recovery systems, or vendor-supplied remote re-imaging.