charmeleon

One of three Garage VMs, providing S3-compatible storage.

Each node in the Garage cluster contains all of the data, so as long as one node survives, no data will be lost. Reads and writes can still be performed while one node is unavailable.

Each node also runs a service called spiffe-garage, which can serve Garage credentials to clients who have a key set up in Garage with a name that matches their SPIFFE ID. Clients that use this will have a tunnel listening on the IP that AWS uses for container credentials, so as long as the correct environment variable is set, S3 SDKs will be able to get credentials automatically by tunneling to spiffe-garage.

=> NixOS configuration

Specs

• CPU count: 2
• Memory: 1536 MiB
• Hypervisor: cloud-hypervisor