mirror of
https://github.com/outbackdingo/matchbox.git
synced 2026-01-27 10:19:35 +00:00
af76aa6951
* A CA certificate (e.g. ca.crt) should be used to sign a server certificate (server.crt for a private key server.key) * gRPC API server requires a server certificate and key to be enabled (passed via -cert-file and -key-file) * gRPC client bootcmd tool must verify the server identity using a known CA (passed to bootcmd via -ca-file) * This provides transport security, it does not provide client authentication
CoreOS on Baremetal
CoreOS on Baremetal provides guides and a service for network booting and provisioning CoreOS clusters on virtual or physical hardware.
Guides
bootcfg
bootcfg is an HTTP and gRPC service that renders signed Ignition configs, cloud-configs, network boot configs, and metadata to machines to create CoreOS clusters. Groups match machines based on labels (e.g. UUID, MAC, stage, region) and use named Profiles for provisioning. Network boot endpoints provide PXE, iPXE, GRUB, and Pixiecore support. bootcfg can be deployed as a binary, as an appc container with rkt, or as a Docker container.
- bootcfg with rkt
- bootcfg with Docker
- bootcfg Service
- Flags
- API
- Backends
- Deployment via
- Troubleshooting
- Going Further
Examples
The examples show how to network boot and provision higher-order CoreOS clusters. Network boot libvirt VMs to try the examples on your Linux laptop.
- Multi-node Kubernetes cluster with TLS
- Multi-node self-hosted Kubernetes cluster
- Multi-node etcd cluster
- Multi-node Torus distributed storage cluster
- Network boot or Install to Disk
- Multi-stage CoreOS installs
- GRUB Netboot CoreOS
- iPXE Boot CoreOS with a root fs
- iPXE Boot CoreOS