PROJECT / RD-002 · ACTIVE RESEARCH

SiloBSD
Reproducible air-gapped infrastructure

Reproducible infrastructure for building air-gapped systems with a controlled, inspectable, repeatable setup process.

AIR-GAPFREEBSDREPRODUCIBILITY
SYSTEM OVERVIEW

Designed for controlled experimentation.

SiloBSD treats an air-gapped machine as a reproducible system boundary. Inputs are prepared outside the final environment, transferred deliberately, verified, and consumed through a documented setup process.

PRIMARY COMPONENTS

What is inside.

  • Offline installation media
  • Declarative setup workflow
  • Controlled transfer boundary
  • Verification and audit points
ARCHITECTURE

Make the boundary visible.

Redoubt projects document their important boundaries so the system can be inspected before it is trusted.

RD-002 / RESEARCH MODEL

Inspect the flow.

SiloBSD treats an air-gapped machine as a reproducible system boundary. Inputs are prepared outside the final environment, transferred deliberately, verified, and consumed through a documented setup process.

AIR-GAPFREEBSDREPRODUCIBILITY
INPUT
CONTROL
OUTPUT
WORKFLOW

From setup to repeatable result.

A documented workflow makes an experiment easier to reset, compare, and reproduce.

STEPACTION
01Prepare and verify source material
02Build trusted installation media
03Install the base FreeBSD system
04Apply the SiloBSD configuration
05Verify the resulting offline state
SECURITY NOTES

Boundaries before convenience.

These are design constraints, not claims of absolute security.

CONTROL / 01

An air gap is a boundary, not a guarantee.

CONTROL / 02

Verify every removable or transferred artifact.

CONTROL / 03

Document the trusted computing base and maintenance procedure.

CONTROL / 04

Plan how updates enter the offline environment.

QUICK START

Inspect the repository first.

Clone or obtain the project source, read the documentation, verify inputs, then reproduce the environment in a disposable or appropriately isolated system.

$ git clone <project-source>
$ cd silobsd
$ read the documentation
$ verify inputs before execution