barycenter/deploy/illumos/README.md
Till Wegmueller 9b0481b258
refactor: update crabidp references to barycenter and add Gateway API support
Replace all remaining references to "crabidp" with "barycenter" across:
- Source code (error diagnostics, CLI name, comments)
- Configuration files and defaults
- Environment variable prefixes (CRABIDP__ → BARYCENTER__)
- Documentation (CLAUDE.md, README.md, DEPLOYMENT.md)
- Deployment configurations (Docker Compose, Helm, systemd, FreeBSD, illumos)
- Database filenames (crabidp.db → barycenter.db)

Add Kubernetes Gateway API support to Helm chart:
- New HTTPRoute template for Gateway API
- Configurable parentRefs, hostnames, filters, and weights
- Support for advanced traffic management features
- Gateway API as modern alternative to traditional Ingress
- Documentation and examples in DEPLOYMENT.md

Benefits of Gateway API:
- More expressive and extensible routing
- Role-oriented design with separation of concerns
- Better vendor portability
- Advanced traffic management capabilities

The Helm chart now supports both traditional Ingress and
Gateway API, allowing users to choose based on their cluster
capabilities and requirements.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-29 15:38:07 +01:00

3.1 KiB

illumos/Solaris Deployment

This directory contains SMF (Service Management Facility) manifest for running Barycenter on illumos and Solaris systems.

Installation

  1. Install Rust and build the binary:

    # On OmniOS/OpenIndiana, install rust from pkgsrc
    pkg install rust
    cargo build --release
    
  2. Create the barycenter user:

    useradd -d /var/barycenter -s /usr/bin/false -c "Barycenter IdP" barycenter
    
  3. Create required directories:

    mkdir -p /opt/barycenter/bin
    mkdir -p /etc/barycenter
    mkdir -p /var/barycenter/data
    chown -R barycenter:barycenter /var/barycenter
    
  4. Install the binary:

    cp target/release/barycenter /opt/barycenter/bin/
    chmod 755 /opt/barycenter/bin/barycenter
    
  5. Install the configuration:

    cp config.toml /etc/barycenter/config.toml
    chown root:barycenter /etc/barycenter/config.toml
    chmod 640 /etc/barycenter/config.toml
    

    Edit /etc/barycenter/config.toml and update paths:

    [database]
    url = "sqlite:///var/barycenter/barycenter.db?mode=rwc"
    
    [keys]
    jwks_path = "/var/barycenter/data/jwks.json"
    private_key_path = "/var/barycenter/data/private_key.pem"
    
  6. Import the SMF manifest:

    svccfg import deploy/illumos/barycenter.xml
    
  7. Enable the service:

    svcadm enable barycenter
    

Management

Check status:

svcs -l barycenter

View logs:

svcs -L barycenter  # Show log file location
tail -f /var/svc/log/application-barycenter:default.log

Restart service:

svcadm restart barycenter

Stop service:

svcadm disable barycenter

Clear maintenance state:

svcadm clear barycenter

Configuration

Modifying Service Properties

To change the config file location:

svccfg -s barycenter setprop application/config_file = /custom/path/config.toml
svcadm refresh barycenter
svcadm restart barycenter

To change the data directory:

svccfg -s barycenter setprop application/data_dir = /custom/data/dir
svcadm refresh barycenter
svcadm restart barycenter

Environment Variables

To set environment variables, edit the manifest and modify the method_environment section:

<method_environment>
    <envvar name='RUST_LOG' value='debug' />
    <envvar name='BARYCENTER__SERVER__PUBLIC_BASE_URL' value='https://idp.example.com' />
</method_environment>

Then reimport:

svccfg import deploy/illumos/barycenter.xml
svcadm refresh barycenter
svcadm restart barycenter

Troubleshooting

Service won't start:

# Check the service log
svcs -L barycenter
tail -50 /var/svc/log/application-barycenter:default.log

# Check service state
svcs -x barycenter

Permission issues: Ensure the barycenter user has write access to the data directory:

chown -R barycenter:barycenter /var/barycenter
chmod 755 /var/barycenter

SMF Features

SMF provides:

  • Automatic restart on failure
  • Dependency management
  • Log file rotation
  • Process contract management
  • Property-based configuration