nkanyezisolutions/blanketopsd repository overview

⁠🐳 BlanketOpsD — Docker Support

BlanketOpsD supports two Docker execution modes, depending on whether you want:

• a native privileged Linux daemon, or
• a full gokrazy OS virtual machine via QEMU.

⁠1. Native Mode (Privileged Linux Daemon) — Recommended

This runs the real blanketd node agent directly inside Docker with access to the host Linux kernel networking stack.

This is the same mode used for Kubernetes DaemonSets.

⁠✅ Requirements

• Linux host
• Docker
• wireguard-tools on the host (for key generation)
• Root / sudo

⁠🔧 Build

Using the daemon runtime Dockerfile:

docker build -t blanketopsd:daemon -f Dockerfile.daemon .

This image includes:

• blanketd
• blanketctl
• iproute2
• wireguard-tools

⁠🔑 Create WireGuard Key (Host)

sudo mkdir -p /etc/blanketd
sudo chmod 755 /etc/blanketd
wg genkey | sudo tee /etc/blanketd/wg0.key > /dev/null
sudo chmod 600 /etc/blanketd/wg0.key

⁠▶️ Run (Privileged + Host Network)

docker run -d --name blanketd-test \
 --privileged \
 --network host \
 -v /etc/blanketd:/etc/blanketd:ro \
 blanketopsd:daemon

⁠✅ This mode:

• Creates real Linux bridges
• Creates real WireGuard interfaces (wg0)
• Binds to:
• http://127.0.0.1:9000⁠

⁠🔍 Verify

./dist/blanketctl status
./dist/blanketctl list-interfaces

⁠Expected:

ready: true
bridges, heartbeat, wireguard = running
wg0 visible in ip a

⁠🧹 Stop & Cleanup

docker stop blanketd-test
docker rm blanketd-test
sudo ip link delete wg0 2>/dev/null || true
for br in br-basic br-fz-priv br-fz-pub br-wg-priv br-wg-pub; do
sudo ip link delete $br 2>/dev/null || true
done

⁠2. OS Mode — Run FULL gokrazy Inside Docker (via QEMU)

This boots a real gokrazy Linux OS inside a virtual machine running in Docker.

This is used for:

• Appliance testing
• Immutable OS validation
• CI virtualization

⁠🔧 Build

docker build -t blanketopsd-gokrazy -f Dockerfile.gokrazy .

⁠▶️ Run gokrazy VM

docker run --rm -it -p 8080:8080 blanketopsd-gokrazy

Then open:

👉 http://localhost:8080

You’ll get:

• gokrazy web dashboard
• running services (init, blanketd, blanketctl)
• logs
• update endpoint

⁠3. Docker Compose (Daemon + gokrazy VM Together)

Start everything:

docker compose up --build

⁠✅ Native daemon image

docker buildx build --platform linux/amd64,linux/arm64 --push \
 -t blanketops/blanketopsd:latest \
 -f Dockerfile.daemon .

⁠✅ gokrazy OS image

docker buildx build --platform linux/amd64 --push \
 -f Dockerfile.gokrazy \
 -t blanketops/blanketopsd-os:latest .

⁠🧠 Important Design Notes

• ✅ BlanketOpsD is Linux-kernel native
• ✅ Works in:
  • Docker (privileged)
  • Kubernetes (DaemonSet)
  • Bare metal
  • gokrazy

⁠❌ Does not run on Windows kernel directly

⁠✅ Runs perfectly on:

• AKS
• EKS
• GKE
• (because all nodes run Linux internally)