| Master Console |
The MFCloud control plane — FastAPI + PostgreSQL + Celery + RabbitMQ. Runs as containers behind Caddy. |
| Compute Node |
A physical hypervisor host running KVM/QEMU + libvirt + the MFCloud agent. |
| Emergency Host UI |
The local web UI that runs on every compute node at https://<node>:8443/. Independent of the master console — works even when the master is offline. |
| mfcloud-agent |
The systemd service on each compute node that exposes the Emergency UI and accepts orchestration commands from the master. |
| Imaged Node |
A compute node installed from the official MFCloud ISO. Has all components pre-baked. |
| Agent Trust API |
Onboarding path where a node POSTs to /api/internal/node-join with an Ed25519 challenge response. |
| SSH-Push |
Onboarding path where the master SSHes into an existing host and installs the agent stack. |
| Datacenter / Cluster / Host |
The three-level inventory hierarchy. A Datacenter contains Clusters; a Cluster contains Hosts. |
| Tenant |
An isolated logical environment with its own VLAN, OVN logical switch, IP pool, and quota. |
| Portgroup |
An OVS VLAN tag bound to a physical bridge. Used as the network attachment for VMs. |
| Logical Switch |
An OVN overlay network. Multiple tenants get separate logical switches. |
| IPAM |
IP Address Management. The platform tracks ip_pools and per-VM ip_leases in PostgreSQL. |
| LINSTOR / DRBD |
Default block storage backend. DRBD replicates volumes across hosts; LINSTOR orchestrates. |
| Ceph RBD |
Alternative storage backend — distributed object store with RADOS Block Device interface. |
| ZFS |
Per-host storage backend. Single-host pools, copy-on-write, snapshots. |
| Cloud-Init |
Standard cloud VM bootstrap that sets hostname, IP, SSH keys, and runs first-boot scripts. MFCloud injects user-data + network-config via a CIDATA ISO. |
| iDRAC / IPMI / Redfish |
Out-of-band BMC management. MFCloud queries Redfish for hardware health (temps, fans, PSU, power). |
| htpasswd |
The file at /etc/mfcloud-agent.htpasswd storing the bcrypt hash of the Emergency UI password. |