OpenCloud - File sync and share (TurnKey appliance)

OpenCloud is an open source file sync and share platform (a community-driven fork of ownCloud Infinite Scale): a single Go binary that embeds the web UI, an LDAP identity backend (IDM), an OpenID Connect provider (IDP), full text search and thumbnailing - with no external database required (all data lives on the filesystem).

This appliance includes all the standard features in TurnKey Core, and on top of that:

• OpenCloud (single upstream Go binary, pinned version, sha256-verified at build time) installed to /usr/local/lib/opencloud with a stable /usr/local/bin/opencloud symlink, running as the unprivileged opencloud system user via systemd.
• nginx reverse proxy terminating TLS on 443 (integrates with confconsole Let's Encrypt); OpenCloud's own proxy bound to 127.0.0.1:9200.
• turnkey-oc admin CLI:
  • turnkey-oc update [version [X.Y.Z]] - update the OpenCloud binary (checksum-verified, automatic rollback on failed health check).
  • turnkey-oc status / turnkey-oc logs - service overview and journal.
  • any other subcommand is delegated to the opencloud binary as the service user, e.g. turnkey-oc version, turnkey-oc idm resetpassword, turnkey-oc backup consistency.
• Firstboot inithooks (interactive or preseedable via /etc/inithooks.conf): regenerate all build-time secrets, set the admin password and the domain to serve.

Configuration lives in /etc/opencloud (opencloud.yaml, opencloud.env, turnkey-oc.conf); user data in /var/lib/opencloud.

Credentials & access

• Web UI: https://<domain> - user admin, password set at firstboot.
• Webmin: https://<ip>:12321; SSH: root (port 22).

Notes

• OC_URL must be HTTPS; the firstboot hook also maps the chosen domain to the host in /etc/hosts so the embedded IDP can resolve its own OIDC callbacks.
• Upstream publishes per-binary sha256 checksums but no GPG/cosign signatures; downloads are checksum-verified over HTTPS.
• Upstream officially supports container deployments; bare-metal single binary is community-supported (works well and keeps the appliance simple).
• Licensing: OpenCloud server is Apache-2.0; the embedded web frontend is AGPL-3.0. Per-release third-party licenses ship upstream as third-party-licenses.tar.gz.

Development

Built with TKLDev. Clone into /turnkey/fab/products/ and run make to produce build/product.iso. Issues and pull requests: https://github.com/popsolutions/turnkeylinux-opencloud