Stronghold
A Fedora Remix for the home and the small office: first a firewall and router, managed from Cockpit. An early prototype, not in Fedora yet.
Install
Pick one. A box with two network ports is the point of it: one for the inside, one for the internet.
1. On a Fedora 44 you already have
sudo dnf config-manager addrepo --id=stronghold \
--set=baseurl=https://rpm.home.rydekull.se/ --set=gpgcheck=1 \
--set=gpgkey=https://rpm.home.rydekull.se/RPM-GPG-KEY-stronghold-lab
sudo dnf install stronghold
sudo systemctl enable --now strongholdd cockpit.socket
2. As an image (Fedora bootc)
On a box that runs a Fedora bootc image already:
sudo bootc switch containers.home.rydekull.se/stronghold:44
sudo systemctl reboot
3. From an ISO
It installs without asking and takes the whole first disk, so it carries a login of your own: make one in a few lines, or take one from there if it is listed.
Then
Open https://<the box>:9090/stronghold and log in with a user of the box
(Cockpit, with administrative access). Or on the box: sudo stronghold status.
On the first boot the ports are taken as they are found (first boot);
what the box does is turned on in Features, and each function installs when it is turned on.
Links
| Design notes | stronghold.home.rydekull.se/docs/: the areas, one note each |
|---|---|
| Packages | rpm.home.rydekull.se: a dnf repository, signed (key). Stronghold 0.5.10. |
| Containers | containers.home.rydekull.se: the host image stronghold:44 and the functions' images (version 0.5.1). |
| ISOs | stronghold.home.rydekull.se/iso/ |
The host image now: containers.home.rydekull.se/stronghold:44.20261021.2351. Stronghold — a Fedora Remix. Licenses may change before anything is published for good.
Fedora and the Fedora logo are trademarks of Red Hat, Inc.
What is in the registry
containers.home.rydekull.se/strongholdcontainers.home.rydekull.se/stronghold-acmecontainers.home.rydekull.se/stronghold-dhcpcontainers.home.rydekull.se/stronghold-dhcp-relaycontainers.home.rydekull.se/stronghold-dns-authcontainers.home.rydekull.se/stronghold-dns-resolvercontainers.home.rydekull.se/stronghold-dyndnscontainers.home.rydekull.se/stronghold-headscalecontainers.home.rydekull.se/stronghold-idscontainers.home.rydekull.se/stronghold-racontainers.home.rydekull.se/stronghold-reverse-proxycontainers.home.rydekull.se/stronghold-routingcontainers.home.rydekull.se/stronghold-tailscalecontainers.home.rydekull.se/stronghold-upnpcontainers.home.rydekull.se/stronghold-web-proxy