Builder & Core Services: Project Plan 🔄 #

Builder infrastructure, network automation, and core services required to provision and rebuild the mobile (mobile) site from bare metal.

GitHub: https://github.com/deevnet
Documentation: https://deevnet.github.io/deevnet-docs/

Roadmap item: Builder & Core Services

✓ 25 | ↻ 1 | ⏳ 1 (27 total)

Legend: ✅ Complete | 🔄 In Progress | ⏳ Planned

Project Vision & Scope #

Achieve fully automated, repeatable provisioning of the mobile (mobile) site from bare metal to running core services, with complete air-gap recovery capability.

In Scope

Bare-metal provisioning (PXE, Ansible)
Network infrastructure automation (switching, wireless, routing)
Image factory for all platforms
Full air-gap rebuild capability

Out of Scope

Extended management plane (logging, telemetry, secrets, identity — separate project)
Patch automation and firmware upgrades — see Patch Automation
Full site rebuild event — see Full Site Rebuild
Application/tenant workload automation (separate per-tenant)
Cloud infrastructure (this is on-prem only)

Requirements ✅ #

✅ Define substrate inventory and MAC addresses
✅ Define network topology and VLANs
✅ Define air-gap artifact requirements

Substrate Provisioning ✅ #

Core infrastructure for building and deploying the substrate.

✅ Builder Node Ansible Collection (deevnet.builder)
✅ Image Packaging - Proxmox Fedora template
✅ Image Packaging - Proxmox installer
✅ Image Packaging - Raspberry Pi Base Image
✅ Bootstrap Node Provisioning Playbook
✅ Full Air-Gap Support (Fedora Mirror)

Unattended Hypervisor Install 🔄 #

Both Proxmox nodes were installed by hand from the standard ISO, and a rebuild is still manual ( Build a Hypervisor).

🔄 Unattended ISO in deevnet-image-factory: an embedded answer file with the install disk pinned by serial builds, but has never installed a node
⏳ Install a hypervisor from it, and make it the runbook’s install step

Inventory & Standards ✅ #

Documentation and inventory definitions.

✅ Hugo-based Documentation Site
✅ Standards and Correctness Docs
✅ mobile Site Bare-Metal Inventory (MAC addresses)

Network Automation ✅ #

Automated configuration of network infrastructure. Migration from flat 192.168.10.0/24 to segmented 10.20.x.0/24 VLANs completed 2026-03-25. Authority transition automation completed 2026-03-26.

✅ OPNsense Alternatives Evaluation
✅ Document network build/rebuild steps in recovery plan
✅ mobile VLAN Plan
✅ DNS Automation
✅ DHCP Automation (Kea subnets auto-created, interface enablement automated)
✅ Core Router Automation (OPNsense VLAN creation, firewall rules via API)
✅ Access Switch Automation (SG2218 General mode, VLANs, trunk, access ports, default gateway)
✅ Implement Network Segmentation (12 VLANs, zone-based firewall policy)
✅ Migrate to RFC1918 10 space (10.20.x.0/24 subnets live)
✅ Wireless AP SSID-to-VLAN configuration (manual via standalone UI — automation gap documented)
✅ Document automation shortcomings and improvement backlog (see migration runbook and Patch Automation project)
✅ Authority transition automation (bootstrap-auth/core-auth playbooks, DNS/DHCP host records from inventory, IP swap)
✅ Unify build sequence documentation (authority transitions and network segmentation inline)