KEMBAR78
RootStack - Devfactory | PDF
Experts in Linux & Open Source Solutions
RootStack
Devfactory
OSS
Experts in Linux & Open Source Solutions
What?
A runtime scheduler for containers, VMs and
native binaries, with full observability.
Experts in Linux & Open Source Solutions
Why?
The cost of starting a new team and their
tooling is way too high. This allows for a fast,
cheap and repeatable buildout.
Experts in Linux & Open Source Solutions
Requirements
Experts in Linux & Open Source Solutions
What were the requirements?
◇ Spin up workloads easily, cheap and across architectures (RPi)
◇ Low learning curve
◇ Worry-free about
⋄ SSL encryption
⋄ Storage sharing
⋄ Logging
⋄ Audit
◇ Repeatable without much hassle
◇ Small footprint
Experts in Linux & Open Source Solutions
Questions…
◇ What tools, 2 big deciders: Runtime, Orchestration.
◇ Are they available on arm64?
◇ Can they integrate?
◇ Free, open source?
◇ Automatable?
◇ Complexity?
Experts in Linux & Open Source Solutions
Orchestration considered
● Terraform
○ only useful cloud-native, cannot setup the environment
● Ansible
○ Easy to install, low learning curve
● Puppet
○ Learning curve, extra server, slow development
Experts in Linux & Open Source Solutions
Runtime considered
● Kubernetes
○ Complex to install, learning curve to steep
● k3s
○ Easy to install, steep learning curve
● Nomad
○ Easy to install, low learning curve
Experts in Linux & Open Source Solutions
Integrations
Experts in Linux & Open Source Solutions
Architecture
Experts in Linux & Open Source Solutions
Experts in Linux & Open Source Solutions
Experts in Linux & Open Source Solutions
Versions
● Consul: 1.11.4
● Nomad: 1.2.6
● Traefik: 2.6.2
● Prometheus:
● Grafana Loki & promtail: 1.16.2
● Grafana: 8.4.4
● Minio: 2022-03-26T06-49-28Z
Experts in Linux & Open Source Solutions
Installation Flow
Experts in Linux & Open Source Solutions
Installation flow
● Docker + Consul setup
● Nomad setup
● Observability and Ingress stack
Experts in Linux & Open Source Solutions
Experts in Linux & Open Source Solutions
Experts in Linux & Open Source Solutions
Experts in Linux & Open Source Solutions
Experts in Linux & Open Source Solutions
Experts in Linux & Open Source Solutions
Screenshots setup
Experts in Linux & Open Source Solutions
Screenshots setup
Experts in Linux & Open Source Solutions
How to test?
● Run the molecule scenarios
○ Rocky Linux 8
○ Ubuntu 20.04 LTS
● Create minimal inventory (see docs) & buildout on internal environment.
Experts in Linux & Open Source Solutions
Next steps open source version…
● Full test suite for environment buildout
● Merge the RPI setup with the current OSS version
○ Document the requirements
○ Document the devices needed
● Full mTLS support internal tools (Consul + Nomad mostly)
● Authentication + Authorization?
● …
What would you like to see?
Experts in Linux & Open Source Solutions
Devfactory - Managed
● Adds Vault to the environment as credential store
○ Hashicorp Vault Open Source
○ Azure/AWS/GCP Key Vault for unseal
● Adds Boundary to the environment for access and gating
○ extra dependencies
→ PostgreSQL
→ Ansible boundary collection
Experts in Linux & Open Source Solutions
Experts in Linux & Open Source Solutions
Questions?

RootStack - Devfactory

  • 1.
    Experts in Linux& Open Source Solutions RootStack Devfactory OSS
  • 2.
    Experts in Linux& Open Source Solutions What? A runtime scheduler for containers, VMs and native binaries, with full observability.
  • 3.
    Experts in Linux& Open Source Solutions Why? The cost of starting a new team and their tooling is way too high. This allows for a fast, cheap and repeatable buildout.
  • 4.
    Experts in Linux& Open Source Solutions Requirements
  • 5.
    Experts in Linux& Open Source Solutions What were the requirements? ◇ Spin up workloads easily, cheap and across architectures (RPi) ◇ Low learning curve ◇ Worry-free about ⋄ SSL encryption ⋄ Storage sharing ⋄ Logging ⋄ Audit ◇ Repeatable without much hassle ◇ Small footprint
  • 6.
    Experts in Linux& Open Source Solutions Questions… ◇ What tools, 2 big deciders: Runtime, Orchestration. ◇ Are they available on arm64? ◇ Can they integrate? ◇ Free, open source? ◇ Automatable? ◇ Complexity?
  • 7.
    Experts in Linux& Open Source Solutions Orchestration considered ● Terraform ○ only useful cloud-native, cannot setup the environment ● Ansible ○ Easy to install, low learning curve ● Puppet ○ Learning curve, extra server, slow development
  • 8.
    Experts in Linux& Open Source Solutions Runtime considered ● Kubernetes ○ Complex to install, learning curve to steep ● k3s ○ Easy to install, steep learning curve ● Nomad ○ Easy to install, low learning curve
  • 9.
    Experts in Linux& Open Source Solutions Integrations
  • 10.
    Experts in Linux& Open Source Solutions Architecture
  • 11.
    Experts in Linux& Open Source Solutions
  • 12.
    Experts in Linux& Open Source Solutions
  • 13.
    Experts in Linux& Open Source Solutions Versions ● Consul: 1.11.4 ● Nomad: 1.2.6 ● Traefik: 2.6.2 ● Prometheus: ● Grafana Loki & promtail: 1.16.2 ● Grafana: 8.4.4 ● Minio: 2022-03-26T06-49-28Z
  • 14.
    Experts in Linux& Open Source Solutions Installation Flow
  • 15.
    Experts in Linux& Open Source Solutions Installation flow ● Docker + Consul setup ● Nomad setup ● Observability and Ingress stack
  • 16.
    Experts in Linux& Open Source Solutions
  • 17.
    Experts in Linux& Open Source Solutions
  • 18.
    Experts in Linux& Open Source Solutions
  • 19.
    Experts in Linux& Open Source Solutions
  • 20.
    Experts in Linux& Open Source Solutions
  • 21.
    Experts in Linux& Open Source Solutions Screenshots setup
  • 22.
    Experts in Linux& Open Source Solutions Screenshots setup
  • 23.
    Experts in Linux& Open Source Solutions How to test? ● Run the molecule scenarios ○ Rocky Linux 8 ○ Ubuntu 20.04 LTS ● Create minimal inventory (see docs) & buildout on internal environment.
  • 24.
    Experts in Linux& Open Source Solutions Next steps open source version… ● Full test suite for environment buildout ● Merge the RPI setup with the current OSS version ○ Document the requirements ○ Document the devices needed ● Full mTLS support internal tools (Consul + Nomad mostly) ● Authentication + Authorization? ● … What would you like to see?
  • 25.
    Experts in Linux& Open Source Solutions Devfactory - Managed ● Adds Vault to the environment as credential store ○ Hashicorp Vault Open Source ○ Azure/AWS/GCP Key Vault for unseal ● Adds Boundary to the environment for access and gating ○ extra dependencies → PostgreSQL → Ansible boundary collection
  • 26.
    Experts in Linux& Open Source Solutions
  • 27.
    Experts in Linux& Open Source Solutions Questions?