Matchbox
Matchbox is a self-hosted service for matching bare-metal machines to profiles and provisioning clusters over a network.
What Matchbox is
Matchbox is a self-hosted service for matching bare-metal machines to profiles and provisioning clusters over a network. It provisions Fedora CoreOS or Flatcar Linux with Ignition configuration, using hardware labels such as a MAC address or UUID to assign machines to profiles. For startup, it can chainload through iPXE and generate network boot configuration for iPXE and GRUB2 clients. HTTP endpoints and an authenticated gRPC API let clients create or update resources; the gRPC API uses TLS credentials for authentication and secure communication. Matchbox supports Terraform through documented usage and a provider plugin. It can run as a Linux binary, a container image, or on Kubernetes, and Poseidon offers a dnsmasq container for DHCP, TFTP, and DNS. The maker describes its setting as lab or datacenter client machines. Matchbox is free open-source software. Its installation guide says to verify release signatures with the maker’s GPG key. Example Kubernetes manifests use temporary emptyDir storage, and the guide recommends changing to persistent storage when available.
Good
- Free open-source software.
- Matches machines using hardware labels.
- Supports iPXE and GRUB2 network boot.
- Offers Terraform integration and a provider plugin.
- Can run as a binary, container, or on Kubernetes.
Watch out
- Example Kubernetes manifests use ephemeral emptyDir storage.
- Provisioning is for Fedora CoreOS or Flatcar Linux.
Who it suits
Matchbox suits teams provisioning bare-metal client machines in a lab or datacenter, especially where Fedora CoreOS or Flatcar Linux and network booting are part of the setup. It is aimed at self-hosted Linux or Kubernetes deployments.
Verdict
Matchbox brings machine matching, network boot configuration, and cluster provisioning together for self-hosted environments. Teams using its Kubernetes examples should plan for persistent storage rather than the sample ephemeral setup.
Plans and prices
From Matchbox's own pricing page, checked 7 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Matchbox | Free | Open-source software · self-hosted service |
The facts
Each one read from Matchbox's own pages, with the date it was checked.
What it does
- APIs
- Matchbox provides HTTP endpoints and an authenticated gRPC API for clients to create or update resources.checked 7 Oct 2026
- Audience
- The maker describes Matchbox as serving client machines in a lab or datacenter.checked 7 Oct 2026
- Boot support
- Matchbox can chainload via iPXE and render network boot configuration for iPXE and GRUB2 clients.checked 7 Oct 2026
- Deployment
- The service can run as a Linux binary, a container image, or on a Kubernetes cluster.checked 7 Oct 2026
- Hardware matching
- Machines can be matched to profiles by hardware labels such as MAC address or UUID.checked 7 Oct 2026
- Integration
- The maker documents Terraform usage and provides a Terraform provider plugin for Matchbox.checked 7 Oct 2026
- Operational limit
- The example Kubernetes manifests use ephemeral emptyDir storage, and the guide recommends replacing it with persistent storage when available.checked 7 Oct 2026
- Provisioning
- It provisions Fedora CoreOS or Flatcar Linux using Ignition configuration.checked 7 Oct 2026
- Purpose
- Matchbox matches bare-metal machines to profiles for PXE booting and provisioning clusters.checked 7 Oct 2026
- Related tools
- Poseidon provides dnsmasq as a container for DHCP, TFTP, and DNS services.checked 7 Oct 2026
- Release verification
- The installation guide instructs users to verify release signatures with the maker's GPG signing key.checked 7 Oct 2026
- Security
- The gRPC API uses TLS credentials for client authentication and a secure communication channel.checked 7 Oct 2026
Alternatives to Matchbox
- 1

OPSI
Free planOpen sourceWebAPILinuxmacOS8.4From €4.99 a year - 2

Canonical MAAS
Free planOpen sourceWebAPILinuxSelf-hosted8.1From $30 a year - 3

FOG Project
Free planOpen sourceWebAPILinuxmacOS7.7Free plan - 4

Foreman
Free planWebAPILinuxSelf-hosted6.9Free plan - 5

Symantec IT Management Suite
WebAPILinuxmacOS6.8 - 6

Clonezilla
Free planLinuxmacOSSelf-hostedWindows6.7Free plan
