Frood, an Alpine Initramfs NAS (2024)

(words.filippo.io)

63 points | by ethanpil 21 hours ago ago

14 comments

  • moondev 15 hours ago ago
  • yjftsjthsd-h 20 hours ago ago

    If you already have a ZFS pool, I'd probably personally just throw on zfsbootmenu and a ZFS-root Alpine install. But, this is cooler and does have advantages:)

    • FiloSottile 19 hours ago ago

      TIL about ZFSBootMenu! Still, the whole frood system is significantly less complex than ZFSBootMenu alone.

    • sunshine-o 20 hours ago ago

      ZFSBootMenu and Alpine are a beautiful match.

  • CTDOCodebases 11 hours ago ago

    This looks interesting. I just set up an Alpine Diskless system that boots from a USB stick.

    I originally tried to set up a NixOS diskless system with persistence for the same reason as the author but the LLM jerked me around and I had little understanding of the implications of the commands I was using. So I thought it best to pull the plug on that and stick with something more familiar.

  • s_ting765 9 hours ago ago

    You can do the same from an USI made from mkosi (mainstream distros support) with kernel boot parameter systemd.volatile=overlay. https://github.com/rhee876527/UKIfy-Xubuntu

  • seemaze 20 hours ago ago
  • 20 hours ago ago
    [deleted]
  • MuffinFlavored 15 hours ago ago

    I'd like the see the author achieve the same setup but with Nix

    • sudobash1 14 hours ago ago

      Unlikely to happen (with the author anyway). From TFA:

      > Importantly to me, it’s not defined in some complex DSL

  • cassianoleal 20 hours ago ago

    > root/etc/ssh/ssh_host_ed25519_key and root/etc/ssh/ssh_host_ed25519_key.pub and root/root/.ssh/authorized_keys for obvious reasons.

    What are the _obvious_ reasons for the NAS root to have an SSH key?

    • yjftsjthsd-h 20 hours ago ago

      To log in and administer it? There's even an example; search for "extlinux --once". (There are other options, like a web UI or non-root SSH, but that's the obvious thing. Also if you want to advocate non-root I'm going to want to hear a threat model.)

      • cassianoleal 20 hours ago ago

        You don't need a private key on the host for that, only your public key in authorized_keys.

        Edit: Oh boy I should have paid more attention. Those are the host keys. :facepalm: