• 0 Posts
  • 167 Comments
Joined 2 years ago
cake
Cake day: September 4th, 2024

help-circle


  • Unlike custom Windows ISOs, Atlas is more straightforward to audit due to the use of AME Wizard. AME Wizard is controlled by Playbooks, a customizable script-esque system that can perform various tasks.

    Playbooks are renamed .zip archives, with the password malte. As they primarily consist of plain text, Playbooks enable transparency, unlike custom Windows ISOs, which have many entry points for malicious activity.

    The few binaries in the Playbook are open source in our utilities repository, with the hashes listed here.

    Although the GUI is not open source for AME Wizard, AME Wizard’s entire backend (called TrustedUninstaller) is open source under MIT, which contains each action used to run Atlas. The Atlas Playbook is open source under the GPLv3 license.













  • I was very skeptical because I didn’t want to punch holes into that nice safe lan. Pangolin got me in the end after I left tail scale with its easy docker for a cheap vps (1GB ram) and its approach in general.

    For example I am running my services locally in a docker via compose. I add a newt endpoint (pangolin talk) that is a docker container with some with info for my pangolin instance ton said compose and I have only the content of said docker compose connected via wireguard.

    Next step is exposing a public resource where you choose a specific service and port to map to a public URL.

    It is all so compartmentalized its fantastic and makes me feel good about that public service.

    Securing that service itself is possible with an additional auth layer.