Opsy is a minimalistic DevSecOps reference framework that bootstraps Linux servers and applications with essential security hardening, scanning, secrets detection, and container optimization.
Opsy is a barebones reference to DevSecOps patterns for applications and Linux management.
Opsy is designed for developers and system administrators who want to quickly set up secure Linux environments and containerized applications using established DevSecOps patterns. It provides templates and scripts to automate security hardening, vulnerability scanning, secrets management, and Kubernetes local development, making it ideal for small deployments and local development environments.
The default configurations, especially sysctl settings, may be too aggressive for some environments and compliance requirements; users should review and customize scripts accordingly. The install.sh script installs 'cmon' for system metrics reporting to ElasticSearch, which can be removed if not needed. Slack integration requires setting SLACK_TOKEN and SLACK_CHANNELS in start.sh for build notifications.
Clone the repository
For linux-ops, download and run install.sh with: curl -LO https://raw.githubusercontent.com/perlogix/opsy/main/linux-ops/install.sh && chmod 0755 ./install.sh && ./install.sh
For vagrant-envs, navigate to the vagrant-envs directory and run: vagrant up
SSH into the Vagrant VM using: vagrant ssh
Copy app-starter language files to your project
Update Docker build stages and start.sh script as needed./start.sh build
Builds the Docker container image
./start.sh run
Runs the Docker container
./start.sh clean
Cleans the Docker system
./start.sh mkcert
Generates a self-signed certificate
./start.sh
Runs custom commands by uncommenting function calls at the bottom of start.sh
curl -LO https://raw.githubusercontent.com/perlogix/opsy/main/linux-ops/install.sh && chmod 0755 ./install.sh && ./install.sh
Installs and runs linux-ops scripts for server setup and hardening
vagrant up
Starts the Vagrant Linux VM with k3s environment
vagrant ssh
SSH into the Vagrant VM