microsoft/trident

microsoft/trident

Description: Azure Linux servicing agent - security focused install, provisioning, and update

Language: Rust

License: MIT

Stars: 27

Forks: 16

Open issues: 33

Created: 2024-11-20T00:27:26Z

Pushed: 2026-06-11T00:12:13Z

Default branch: main

Fork: no

Archived: no

README:

Trident

Trident is a declarative, security-first OS lifecycle agent designed primarily for Azure Linux. It supports clean installation and provisioning of bare-metal nodes, as well as A/B-style updates and runtime configuration for both bare-metal and virtual machines.

At the heart of Trident is its Host Configuration API, a declarative YAML-based interface that defines the desired state of a machine across storage, OS, networking, and firmware layers.

Trident supports a wide range of lifecycle and configuration capabilities:

• ✅ Disk partitioning and imaging
• ✅ RAID configuration
• ✅ Encrypted volumes with TPM/PCR support
• ✅ dm-verity support
• ✅ A/B update
• ✅ Bootloader configuration
• ✅ Networking configuration
• ✅ User management
• ✅ SELinux configuration
• ✅ Custom hooks
• ✅ ...and more

Getting Started

Read the [Official Documentation](https://microsoft.github.io/trident) for comprehensive guidance on installation, configuration, and usage.

Developing and Contributing

For detailed information about contributing to this project please read the contributing guide.

Getting Help

Have questions, found a bug, or need a new feature? Open an issue in our GitHub repository.

For security issues, please see the [security policy](./SECURITY.md).

Trademarks

This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft trademarks or logos is subject to and must follow Microsoft's Trademark & Brand Guidelines. Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship. Any use of third-party trademarks or logos are subject to those third-party's policies.