Soverstack CLI_

Command-line interface for managing your sovereign infrastructure

Installation

install.sh

curl -sSL https://get.soverstack.io | sh

Typical workflow

~/my-cluster

$ soverstack init my-cluster
$ soverstack validate
$ soverstack preflight
$ soverstack plan
$ soverstack apply

Commands

$ soverstack init [project]

Scaffold a new project (platform.yaml, inventory tree, SSH keys, .env stubs).

$ soverstack validate [path]

Run Zod schema validation and cross-file consistency checks (offline, no SSH).

$ soverstack preflight [path]

SSH to every node (in rescue mode), collect hardware facts, compute the disk allocation plan, and persist it for apply to consume.

$ soverstack plan [path]

Diff the desired state (YAML) against the recorded state and print the actions apply would execute.

$ soverstack apply [path]

Run the bootstrap pipeline (reinstall Debian → bootstrap → Proxmox VE → network → cluster → Ceph) and deploy services. Requires a recent preflight snapshot.

$ soverstack add region|zone

Add a region or zone to an existing project; updates inventory and SSH keys accordingly.

$ soverstack generate ssh

Generate or rotate per-datacenter SSH keys; previous keys are kept in .ssh/.previous/ until apply deploys the new ones.

Rescue mode is required

Soverstack manages disk layout from scratch (RAID1 OS, LUKS data, Ceph OSDs) and must wipe the target disks. Boot every node into your provider's rescue mode (Hetzner Robot, OVH Manager, Scaleway Console, Latitude.sh, or USB/IPMI) before running preflight. Apply refuses to touch a node booted on installed storage.