GVM Next-generation virtualization platform

GirginOSVM Node ISO

GirginOSVM: KVM virtualization with one central panel, now with a bare-metal installer ISO

Hi LES,

We build GirginOSVM, a KVM based virtualization platform for people who run their own nodes. One GirginOS Center panel manages many nodes, VMs, networks and backups. We are getting the next big piece ready, a bare-metal Node ISO, and wanted to show it here first and hear what you think.


GirginOS Center

Fleet dashboard

VM list

VM detail

What the panel does today:

  • Multi-node KVM: create, clone, resize and live-migrate VMs between nodes
  • Real incremental backups (CBT): only changed blocks are sent, to SMB, SFTP, NFS, S3 or the Center itself
  • Replication and DR: replicate VMs to another site and take over from a chosen recovery point
  • High availability for clustered nodes
  • Networking: IP pools, floating IPs, security groups (per-VM firewall), VPN gateways
  • Built-in protection: SSH brute-force blocking, port gating and geo blocking on the nodes
  • WHMCS integration for hosting providers
  • Signed release channels (stable / canary / dev) for the panel and the node agent

Backups

Security groups


New: the Node ISO

Until now you installed the node agent on top of an existing AlmaLinux server. The ISO turns a bare server into a GirginOSVM node in a few minutes, ESXi style.

Disk setup with health info. Pick a system disk (or a mirror), build datastores with software RAID (RAID 0/1/5/6/10 with hot spare) and see SMART health before anything is erased. Disks you don't select are not touched.

Installer review screen

Console (DCUI) and CLI. A text console on the server screen for network, storage, logs, joining the Center and updates. Everything is also available as gvmcli over SSH.

DCUI

Own kernel and update channel. Nodes run kernel-gvm (Secure Boot signed). Updates come only from our signed channel into A/B system slots, so a bad update rolls back by booting the previous slot.

Ransomware recovery. The libvirt XML is treated as disposable. VM definitions are kept on the Center and next to the disks on the datastore, so if the host config is wiped you rebuild every VM with a few commands. Definitions are sanitised on rebuild: no host devices, no foreign disks.

gvmcli recover

Hardening. Datastores mounted nodev,nosuid,noexec, GRUB editing behind the root password, no serial console login, remote install only with a one-time PIN over TLS.


Status

  • Center and node agent: available now, docs at docs.girginos.net/en
  • Node ISO: in testing, public beta soon. If you want to try it on a spare box, reply here or send me a DM.

Pricing: TODO

Questions, feature requests and criticism are all welcome.

Center screenshots are from our dev cluster with names and IPs anonymised. Installer, DCUI and recovery images are mockups of the beta.

girginos.com · Docs

Comments

  • AnthonySmithAnthonySmith AdministratorProviderOG

    Even though this is a bit of an advert, i will allow it, mainly because of the faces I was pulling trying to figure out how to say "girginos" grr ginos gur gnos girg in os

    The link for a VPS panel probably should not lead people to an email service website.... just a thought.

    Why would I use this over VirtFusion ?

    TierHive - Hourly VPS - NAT Native - /24 per customer - DE, UK, SG, CA, USA x4, FR x2, AU, PL, NL, JP
    FREE tokens on sign up, try before you buy. | Static Hosting Free for life: https://tierhive.com/static-hosting/

  • girginosgirginos Provider

    @AnthonySmith said:
    Even though this is a bit of an advert, i will allow it, mainly because of the faces I was pulling trying to figure out how to say "girginos" grr ginos gur gnos girg in os

    The link for a VPS panel probably should not lead people to an email service website.... just a thought.

    Why would I use this over VirtFusion ?

    We can develop custom solutions.
    For example, hosting companies typically do not monitor SMTP traffic; if a subnet or ASN is blacklisted, we can develop plugins such as an SMTP monitor.

    We are also developing a zero-downtime HA engine that allows VMs to successfully switch to another node without shutting down—even on local disks without external storage—and without interrupting the SSH connection.

    Furthermore, our internal network isolation is far superior to that of other virtualization solutions. IP spoofing, ARP attacks, and local attacks are blocked.

    You don’t need to purchase switches or routers for L2 and L3 traffic. You can create rules based on location, operating system, node, and customer.

    With PatchManager, you can send commands to all your VMs with a single click and make bulk changes.

Sign In or Register to comment.