Blog
Guides for custom Linux ISOs, self-hosted app stacks, VPN topologies, Proxmox homelabs, and OpenFactory alternatives.
Browse by topic
Installation automation
Ubuntu Autoinstall, Debian Preseed, Fedora Kickstart, cloud-init, and tested image workflows.
VPN deployments
Road-warrior WireGuard and IKEv2 access, Linux site-to-site gateways, and managed Vyatta router topologies.
Custom Linux ISOs
Build bootable Ubuntu, Debian, Fedora, and app-specific images from prompts, repos, or recipes.
Self-hosted stacks
Jellyfin, Nextcloud, Immich, Vaultwarden, Pi-hole, Home Assistant, Paperless-ngx, and more.
Proxmox homelab
Single-node PVE, 3-node HA, Ceph, TrueNAS, and Proxmox Backup Server build prompts.
Builder alternatives
Compare SUSE Studio, DistroSea, Cubic, FAI.me, BlueBuild, and Red Hat Image Builder paths.
September 17, 2026
Fedora Kickstart Guide: Validate the File and the Installed Host
Write and validate an Anaconda Kickstart file, then prove disk selection, SSH, SELinux, services, and reboot behavior.
Read more→September 10, 2026
Debian Preseed Guide: Automate Installer Questions Safely
Control debian-installer through initrd, media, or network delivery without losing sight of disk and first-boot risks.
Read more→September 3, 2026
Ubuntu Autoinstall Guide: From YAML to a Tested Server
Define Subiquity identity, SSH, storage, packages, and commands, then release only after behavioral checks pass.
Read more→August 27, 2026
Linux Mint vs Zorin OS vs elementary OS: Which Desktop Fits?
A decision-first comparison of desktop models, hardware guidance, application experience, migration fit, and how to test each system before installing.
Read more→August 20, 2026
Build a Headless Debian or Ubuntu Server Image
Define, build, boot, and test a headless Linux server with SSH, services, storage, networking, and repeatable acceptance checks.
Read more→August 13, 2026
Packer vs OpenFactory: Two Ways to Build Machine Images
Compare template-driven machine-image automation with a hosted build, boot, inspection, and evidence loop.
Read more→August 6, 2026
Flox vs OpenFactory: Environment or Complete Linux System?
Choose the right boundary: a reproducible shell and package environment, or a complete bootable Linux system with machine-level tests.
Read more→July 26, 2026
Build a Six-Node Slurm HPC Cluster with OpenFactory
A real CPU lab with six Debian VMs, five kubeadm nodes, Slinky Slurm, shared NFS state, pinned operator tools, monitoring, and eight cross-machine acceptance checks.
Read more→July 22, 2026
OpenFactory Appliance: Run the Factory Inside Your Own Network
A technical preview of the planned open-source Debian appliance for running OpenFactory, its build workers, evidence, and model policy on customer-owned infrastructure.
Read more→July 20, 2026
Build a Vyatta IKEv2 Site-to-Site VPN
Two managed stock Vyatta/DANOS routers plus a computer on each protected LAN, with IKEv2, X.509 identities, private deployment material, and cross-site tests.
Read more→July 20, 2026
Build a WireGuard Site-to-Site VPN
Two Debian WireGuard gateways plus a computer on each protected LAN, distinct endpoint keys, explicit routes, an owner-only bundle, and cross-site traffic tests.
Read more→June 18, 2026
Organize, Queue, and Review App-Test Batches
Organize saved GUI scenarios by project and app, queue scoped background batches, and run up to available tester-pool capacity with explicit evidence and isolation limits.
Read more→June 16, 2026
Connected-App Agents: Catalog, Scope, and Data Boundaries
Review the current connected-app catalog, managed OAuth and token boundary, exact account assignment, approval controls, and planned integration patterns.
Read more→June 15, 2026
AI-Assisted Visual Workflow Testing: Evidence and Limits
Exercise a GUI workflow in a tester VM, preserve screenshots and video, and combine probabilistic visual reasoning with deterministic checks and evidence review.
Read more→June 13, 2026
From a Git Revision to an Immutable Preview URL
Build a supported Node or static-site revision into an immutable preview VM, health-check it, and cut over a public or login-gated route after success.
Read more→May 30, 2026
Build Your Own LLM Council on OpenFactory
Karpathy's LLM Council pattern asks multiple models, anonymizes peer review, and synthesizes a final answer. Build a reviewable lab without overstating consensus or reproducibility.
Read more→May 24, 2026
Plan a Proxmox Backup Preparation Lab
A three-VM Debian preparation lab with PBS-shaped configuration and compatibility endpoints. It does not install PVE or PBS, move backup data, or test a restore.
Read more→May 19, 2026
Plan a Proxmox and TrueNAS Preparation Lab
A three-VM Debian preparation lab with Proxmox- and TrueNAS-shaped configuration plus compatibility endpoints. It does not install either product or serve storage.
Read more→May 14, 2026
Plan a Proxmox and Ceph Preparation Lab
A four-VM Debian preparation lab with Ceph-shaped configuration and compatibility endpoints. It does not install Ceph, create storage, or demonstrate high availability.
Read more→May 9, 2026
Plan a Three-Node Proxmox HA Preparation Lab
A four-VM Debian preparation lab with Proxmox and Corosync configuration plus compatibility listeners. It does not form quorum or test node-loss behavior.
Read more→May 4, 2026
Plan a Proxmox Single-Node Preparation Lab
A three-VM Debian preparation lab with Proxmox-shaped configuration and compatibility endpoints. It does not install PVE, create an LXC container, or run a nested workload VM.
Read more→April 30, 2026
Plan an Audiobookshelf Preparation Lab on OpenFactory
A three-VM preparation topology with nginx, configuration templates, and compatibility endpoints. It does not install or exercise Audiobookshelf or observability.
Read more→April 25, 2026
Plan a Pi-hole DNS Preparation Lab on OpenFactory
A three-VM preparation topology with example configuration and compatibility listeners. It is not an operating DNS, ad-blocking, recursive, or failover cluster.
Read more→April 20, 2026
Plan an *arr Preparation Lab on OpenFactory
A four-VM preparation topology with configuration templates and compatibility endpoints. It does not install or exercise Sonarr, Radarr, Prowlarr, or Bazarr.
Read more→April 16, 2026
Red Hat Image Builder and OpenFactory: Different Boundaries
Compare RHEL Image Builder, upstream osbuild Image Builder, and OpenFactory by distribution, output, hardening, evidence, and deployment responsibility.
Read more→April 11, 2026
BlueBuild Alternative for Bootable Linux Images
BlueBuild is excellent for custom Fedora Atomic images. OpenFactory fits when you need prompt-driven bootable ISOs, app stacks, Git deploys, and fleet-oriented Linux image workflows.
Read more→April 6, 2026
FAI.me Alternative for Web-Based Linux ISO Builds
FAI.me builds unattended Debian, Ubuntu, and Linux Mint install media. OpenFactory goes broader with prompts, Git inputs, app stacks, and validation scenarios.
Read more→April 2, 2026
Cubic Alternative for Custom Linux ISOs
Cubic is useful for local Ubuntu and Debian ISO customization. OpenFactory is the alternative for browser-based builds, prompts, Git inputs, tests, and deployable images.
Read more→March 28, 2026
Plan a Nextcloud Preparation Lab on OpenFactory
A four-VM preparation topology with configuration templates and compatibility endpoints. Install and validate Nextcloud, PostgreSQL, Redis, and Collabora separately.
Read more→March 24, 2026
Plan a Paperless-ngx Preparation Lab on OpenFactory
A five-VM preparation topology with configuration templates and compatibility endpoints. It does not install or exercise Paperless-ngx, Tika, Gotenberg, PostgreSQL, or Redis.
Read more→March 19, 2026
Plan a Plex Preparation Lab on OpenFactory
A four-VM preparation topology with nginx, configuration templates, and compatibility endpoints. Install and validate Plex, Tdarr, and observability separately.
Read more→March 14, 2026
Plan a Vaultwarden Preparation Lab on OpenFactory
A three-VM preparation topology with configuration templates and compatibility endpoints. Install and security-test Vaultwarden, PostgreSQL, and the TLS edge separately.
Read more→March 10, 2026
Plan a Home Assistant Preparation Lab on OpenFactory
A four-VM preparation topology with example configuration and compatibility endpoints. It does not install Home Assistant, Mosquitto, Zigbee2MQTT, or Node-RED.
Read more→March 5, 2026
Build an nginx + TLS Reverse Proxy on OpenFactory
A production-grade four-VM build prompt: nginx-edge as the border gateway plus three useful backend services (status page, pastebin, URL shortener). Modern TLS, HSTS, rate limiting, hardened systemd, ACME-ready certbot, 13 scenario assertions.
Read more→March 1, 2026
Plan an Immich Preparation Lab on OpenFactory
A four-VM preparation topology with configuration templates and compatibility endpoints. Install and validate Immich, its ML worker, PostgreSQL, and Redis separately.
Read more→February 24, 2026
Plan a Jellyfin Preparation Lab on OpenFactory
A five-VM preparation topology with nginx, configuration templates, and compatibility endpoints. Install and validate Jellyfin, Sonarr, Radarr, and observability separately.
Read more→February 19, 2026
Designing Runtime Attestation for OpenFactory
A roadmap design for comparing measured boot state with an approved reference. It is not presented as a currently shipped attestation or fleet feature.
Read more→February 15, 2026
OpenFactory + ServiceNow for Linux Fleet Management
Connect ServiceNow change, CMDB, incident, event, and GRC workflows to verified Linux builds, live deploys, and runtime controls in OpenFactory.
Read more→February 10, 2026
Stop Renting Your VPN. Own It.
Commercial VPNs log your traffic, share your IP with thousands, and charge you monthly for the privilege. Build your own VPN appliance with OpenFactory and keep the keys.
Read more→February 5, 2026
Using OpenFactory Tools from an Agent Client
Connect an MCP-compatible client with account-scoped credentials, then review recipes, builds, tests, artifact access, and VM actions explicitly.
Read more→February 1, 2026
Build a Linux Host for Containerized AI Agents
Keep the bootable-host and OCI-image supply chains explicit: build and validate the Linux host in OpenFactory, then use container-native tools for workloads.
Read more→January 27, 2026
Designing a Safer Computer for an AI Agent
A threat-model-first guide to disposable KVM-backed guests and the network, identity, storage, and management controls that still surround them.
Read more→January 23, 2026
Designing Self-Hosted Browser Isolation
A practical architecture for browser VMs with explicit endpoint, rendering, network, identity, data-transfer, and operating boundaries.
Read more→January 18, 2026
Build a Road-Warrior VPN with OpenFactory
Build split-tunnel remote access with WireGuard or strongSwan IKEv2, including a computer on the protected LAN, then download the owner-only configuration bundle.
Read more→January 13, 2026
SUSE Studio Alternatives: Choose by Build Boundary
Compare KIWI NG and Studio Express, FAI.me, Cubic, BlueBuild, Image Builder, and OpenFactory by target, output, build location, and validation boundary.
Read more→January 9, 2026
DistroSea Alternative for Trying Linux Online
Compare DistroSea alternatives for trying Linux in a browser. DistroSea runs stock demos; OpenFactory's catalog does too, then continues to a downloadable image on supported targets.
Read more→January 4, 2026
Take Back Your Data
Read what California AB 1043 actually requires, then build a tested recovery plan with independent local exports, encrypted backups, and clear limits.
Read more→