zbm-void-ts

ZFSBootMenu on Void Linux UEFI with Tailscale

Overview

I tried getting ZFSBootMenu to work with Tailscale at the initramfs level using the official documentation as well as ZQuickInit, but DHCP never worked right for me so I put together this script to run it post-boot on a single, unencrypted UEFI disk that automatically boots. If you want to try out ZFS on Linux, this is the easiest method I've found.

Instructions

1. Download the latest hrmpf ISO image
2. Load the image on to a bootable USB using balenaEtcher
3. Insert the bootable USB into the device and power on (note: you may need to select a function key or bios option to boot into it)
4. SSH into the device via the user anon and password voidlinux
5. Create a free Tailscale account
6. On the Access Controls tab, replace the existing code with:

{
	"tagOwners": {
		"tag:server": [
			"autogroup:admin"
		],
		"tag:admin": [
			"autogroup:admin"
		]
	},
	"grants": [
		{
			"src": ["tag:admin"],
			"dst": ["tag:server"],
			"ip": ["22"]
		},
		{
			"src": ["autogroup:member"],
			"dst": ["autogroup:internet"],
			"ip": ["*"]
		}
	],
	"ssh": [
		{
			"action": "accept",
			"src": [
				"tag:admin"
			],
			"dst": [
				"tag:server"
			],
			"users": [
				"autogroup:nonroot",
				"root"
			]
		}
	]
}

7. On the DNS tab, enter your desired nameservers and enable the Override DNS servers option
8. On the Settings tab, click on the Keys option in the left-hand column
9. Click the Generate auth key... button
10. Keep the defaults and click the Generate key button
11. Save the resulting key code in a safe, temporary location
12. In the hrmpf SSH terminal, run curl -s -o /tmp/zbm-void-ts.sh https://raw.githubusercontent.com/ascension-association/zbm-void-ts/refs/heads/main/zbm-void-ts.sh && sudo bash /tmp/zbm-void-ts.sh
13. Follow the prompts to install
14. After the installation and reboot, the device will appear in Tailscale under the Machines tab

TODO

• Encryption
• SSH key authentication
• Migrate from base-system to base-minimal