Allows you to boot your (or anyone's really) desktop PC with the exact same hard disk that your laptop is running from, basically exactly as if you'd unscrew the SSD from your laptop and plug it into the desktop.
The data transfer to the hard disk goes over a network link.
I don't like maintaining multiple operating systems and associated home folders.
On the other hand, I like being able to simply use the comfort and power of a desktop PC if I encounter one.
Unfortunately, on my laptop it takes longer than 3 seconds to unscrew the SSD, so I wrote this.
The laptop acts as the server. It first provides the initrd/kernel via HTTP, and then the entire block device for its main disk via NBD. A dedicated high-speed network link is recommended for this (henceforth referred to as: stiefellink).
I'm using a RTL8156-based 10/100/1G/2.5G USB3.2 NIC on both sides, in a point-to-point topology. The OS cannot be running on the laptop while it serves the disk, for obvious reasons. Thus, when the stiefellink NIC is detected by the stiefel-autokexec service, the laptop reboots into a custom ramdisk which acts as the stiefelsystem server that provides the aforementioned services. Configuration (IP addresses, block device identifiers, ...) is passed to this server through its kernel cmdline. The stiefelsystem server will set up the network on stiefellink and wait for requests.
On the desktop PC, a minimal stiefelsystem client ramdisk is booted from a USB flash drive; again, the configuration comes from the kernel cmdline. Apart from the cmdline, the ramdisk is actually identical to the server ramdisk. The steifelsystem client will search for the server on all of its network interfaces until it receives a correct reply. Once it does, it requests the kernel and initrd that it shall boot, and kexec's into them. The target system will use a nbd hook in its own initrd to mount the root partition, then boot as usual.
Authentication, encryption and MITM protection happens through a shared symmetric key and AES-EAX. Your nbd connection itself is unencrypted and unauthenticated, so I strongly recommend a point-to-point connection and not enabling IP forwarding.
time
|
|
| laptop computer desktop computer
| regular OS boot from usb stick or PXE
| | |
| autokexec service |
v | discovery message |
|<---------------------<---------------------+
| |
reboot to stiefel-server system (kexec) |
| |
| request kernel + initrd |
|<---------------------<---------------------+
| |
| send kernel + initrd |
+---------------------->-------------------->|
| kexec to received kernel
| and network-root compatible initramfs
serve root block device |
| map/mount root fs |
|<---------------------<---------------------+
| |
| switch root and enjoy!
| rootfs requests |
|<---------------------<---------------------+
v v
Basic steps (commands below):
- You create a Debian-based OS image which is booted on client and server
- This image is flashed on an USB drive, which is used to boot the client
- The same system is kexec'd on your server to serve the root disk
The scripts in this repo automate all of those task (apart from the thinking...)
-
Make shure you have all dependencies installed
cp config-example.yaml config.yamland edit it to your wishes.- Select the modules that are appropriate for your system.
-
create the stiefelsystem ramdisk (for use by server and client)
sudo ./create-initrdprepares the debian-based initrd, as a folder and as an archive- You can check out the initrd with
sudo ./test-nspawn - You can check out server and client interactions with
sudo ./test-qemu serverandsudo ./test-qemu client
-
Setup the
stiefel-autokexecservice on the laptop (and provide it with the ramdisk and config) and setup the nbd rootfs hook in your initfs on your OSsudo ./setup-server-ossets up your system, asking for permission for every operation. It sets up:- The
stiefel-autokexec.service - Initrd hooks that can mount your root disk from the network
- A network manager rule to disable control of the network partition network device
- The
-
Create a USB boot drive
sudo ./setup-client-usbdrive /dev/sdxxxcreates the usb drive
-
To reset the AES key, run
rm aes-key(newly created ramdisks won't work with older ones)
I tried X and it sucks.
(for some values of X, including but not limited to:)
- iSCSI (super-slow compared to
nbd, and overly complicated) - PXE (doesn't support my 2.5GBaseT USB NIC)
We'd really like to use Y, but you haven't implemented support yet.
- Unify create-initrd-nspawn and create-initrd-cpio
- Allow skipping some of the more time-consuming parts of create-initrd-nspawn
- setup-client-usbdrive: add a script to launch the client script in any linux's userland
- Allow enabling jumbo frames (8192 bytes?) for higher throughput with bigger files
- Run a DHCP server on the server (possibly also with PXE support) and support DHCP config on the client
- Allow server to request earlyboot crypto passphrase from the client in its / HTTP GET answer
- Search for the server on all network interfaces in parallel, with multiprocessing and network namespaces
- Produce warning beeps if not on AC power, especially when battery is low
- Re-setup interfaces as they disappear/appear
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent