Stronghold

A Fedora Remix for the home and the small office: first a firewall and router, managed from Cockpit. An early prototype, not in Fedora yet.

Install

Pick one. A box with two network ports is the point of it: one for the inside, one for the internet.

1. On a Fedora 44 you already have

sudo dnf config-manager addrepo --id=stronghold \
    --set=baseurl=https://rpm.home.rydekull.se/ --set=gpgcheck=1 \
    --set=gpgkey=https://rpm.home.rydekull.se/RPM-GPG-KEY-stronghold-lab
sudo dnf install stronghold
sudo systemctl enable --now strongholdd cockpit.socket

2. As an image (Fedora bootc)

On a box that runs a Fedora bootc image already:

sudo bootc switch containers.home.rydekull.se/stronghold:44
sudo systemctl reboot

3. From an ISO

It installs without asking and takes the whole first disk, so it carries a login of your own: make one in a few lines, or take one from there if it is listed.

Then

Open https://<the box>:9090/stronghold and log in with a user of the box (Cockpit, with administrative access). Or on the box: sudo stronghold status. On the first boot the ports are taken as they are found (first boot); what the box does is turned on in Features, and each function installs when it is turned on.

Links

Design notesstronghold.home.rydekull.se/docs/: the areas, one note each
Packagesrpm.home.rydekull.se: a dnf repository, signed (key). Stronghold 0.5.10.
Containerscontainers.home.rydekull.se: the host image stronghold:44 and the functions' images (version 0.5.1).
ISOsstronghold.home.rydekull.se/iso/

The host image now: containers.home.rydekull.se/stronghold:44.20261021.2351. Stronghold — a Fedora Remix. Licenses may change before anything is published for good. Fedora and the Fedora logo are trademarks of Red Hat, Inc.

What is in the registry