EvoBSD is an ansible project used for customising OpenBSD hosts used by Evolix.
How to install an OpenBSD machine
Note : The system must be installed with a root account only. Put your public key in the remote root's autorized_keys (/root/.ssh/authorized_keys)
- Install ansible's prerequisites
ansible-playbook prerequisite.yml -CDi hosts -l HOSTNAME
- Run it
First use (become_method: su) :
ansible-playbook evolixisation.yml --ask-vault-pass -CDki hosts -u root -l HOSTNAME
Subsequent use (become_method: sudo) :
ansible-playbook evolixisation.yml --ask-vault-pass -CDKi hosts --skip-tags pf -l HOSTNAME
- This process depends on the Go programming language.
Needing a Golang eco system and some basics
pkg_add go-- packer-- git--
- We use the packer-builder-openbsd-vmm project to bridge Packer and vmm(4)
git clone https://github.com/double-p/packer-builder-openbsd-vmm.git
GOPATH (default: ~/go), if the 1.4GB dependencies wont fit.
make make install
- You need your unprivileged user to be able to run vmctl(8) through doas(1)
echo "permit nopass myunprivilegeduser as root cmd /usr/sbin/vmctl" >> /etc/doas.conf
See packer-builder-openbsd-vmm/examples/README.examples for further instructions
- Enable NAT on your host machine
pass out on em0 inet from tap0:network to any nat-to (em0)
assuming em0 is your egress interface
See the contribution guidelines