FleetMDM is Flamingo's integration of the open-source Fleet device management platform into the OpenFrame unified MSP ecosystem. It provides cross-platform device management for Windows, macOS, Linux, ChromeOS, iOS/iPadOS, and Android — powered by osquery agents, MDM protocols, and AI-driven automation from Flamingo.
This repository (flamingo-stack/fleetmdm) is the Flamingo fork of Fleet, extending it with OpenFrame multitenancy, streaming analytics (Kafka → Pinot), and Flamingo AI capabilities.
- Cross-platform MDM — Manage macOS, iOS/iPadOS, Windows, Linux, Android, and ChromeOS from a single console
- osquery-powered inventory — Real-time SQL queries against device hardware, software, users, and processes
- Policy automation — Define compliance policies; automatically install software or run scripts on failure
- Vulnerability management — Continuous CVE scanning via NVD, OVAL, MSRC, and OSV with CVSS scoring and exploit probability
- Software management — Install, update, and uninstall packages at scale; Fleet-maintained app catalog (Homebrew, WinGet)
- GitOps support — Manage all Fleet configuration as code with
fleetctl gitops - Self-service portal — End users can install approved software without opening IT tickets
- OpenFrame streaming — Publish inventory and compliance events to Kafka → Cassandra → Pinot Analytics
- SCIM provisioning — Sync users and groups from your IdP automatically
- OpenTelemetry observability — Distributed tracing, metrics, and logs via SigNoz/OTLP
flowchart TD
subgraph Endpoints
WinAgent["Windows Agent (fleetd/orbit)"]
MacAgent["macOS Agent (fleetd/orbit)"]
LinuxAgent["Linux Agent (fleetd/orbit)"]
ChromeExt["Chrome Extension (fleetd-chrome)"]
iOSiPad["iOS / iPadOS (MDM)"]
AndroidDev["Android Enterprise"]
end
subgraph OpenFrame
GW["OpenFrame Gateway"]
FleetAPI["Fleet Server API (Go)"]
subgraph Storage
MySQL["MySQL 8.0 (inventory, policy, jobs)"]
Redis["Redis 6+ (cache, live query, pub/sub)"]
S3["S3 / GCS (software installers, carves)"]
end
subgraph Streaming
Stream["OpenFrame Stream"]
Kafka["Kafka"]
Pinot["Pinot Analytics"]
end
WebUI["React 18 / TypeScript Web Console"]
ArgoCD["ArgoCD GitOps"]
end
WinAgent -- "enroll / inventory / policy" --> GW
MacAgent -- "enroll / inventory / policy" --> GW
LinuxAgent -- "enroll / inventory / policy" --> GW
ChromeExt -- "inventory" --> GW
iOSiPad -- "APNs / DEP" --> GW
AndroidDev -- "Android Enterprise API" --> GW
GW --> FleetAPI
FleetAPI --> MySQL
FleetAPI --> Redis
FleetAPI --> S3
FleetAPI --> Stream
Stream --> Kafka
Kafka --> Pinot
WebUI --> FleetAPI
ArgoCD --> FleetAPI
| Layer | Technology |
|---|---|
| Backend server | Go 1.22+, Cobra, go-kit, sqlx, NanoMDM |
| Frontend | React 18, TypeScript 6, Webpack 5, react-query |
| Primary database | MySQL 8.0 |
| Caching / pub-sub | Redis 6+ |
| File storage | S3 / GCS |
| Streaming analytics | Kafka, Apache Pinot |
| Observability | OpenTelemetry, SigNoz |
| GitOps | ArgoCD, fleetctl gitops |
| Container orchestration | Docker Compose (dev), Kubernetes (prod) |
# 1. Clone the repository
git clone https://github.com/flamingo-stack/fleetmdm.git
cd fleetmdm
# 2. Start MySQL and Redis
docker compose up -d mysql redis
# 3. Install frontend dependencies
npm install
# 4. Build the web console
npm run build
# 5. Run database migrations
go run ./cmd/fleet/... prepare db \
--mysql_address=localhost:3306 \
--mysql_database=fleet \
--mysql_username=fleet \
--mysql_password=insecure
# 6. Start the Fleet server
go run ./cmd/fleet/... serve \
--dev \
--dev_license \
--mysql_address=localhost:3306 \
--mysql_database=fleet \
--mysql_username=fleet \
--mysql_password=insecure \
--redis_address=localhost:6379 \
--server_tls=false \
--logging_debugOpen http://localhost:8080 and complete the setup wizard to create your admin account.
Apple Silicon: Set
FLEET_MYSQL_IMAGE=arm64v8/mysql:oracleandFLEET_MYSQL_PLATFORM=linux/arm64/v8before starting Docker Compose.
| Component | Location | Language | Responsibility |
|---|---|---|---|
| Fleet Server | cmd/fleet/ |
Go | Main API server, cron scheduling, MDM orchestration |
| Web Console | frontend/ |
React 18 / TypeScript | Operator UI for managing devices, policies, and software |
fleetd / orbit agent |
orbit/ |
Go | Device-side agent: enrollment, config polling, script execution |
| MySQL Datastore | server/datastore/mysql/ |
Go | Primary persistence for inventory, policies, software |
| Redis Layer | server/datastore/redis/ |
Go | Caching, live query pub/sub, host status tracking |
| Apple MDM Stack | server/mdm/apple/ |
Go | APNs push, nanoMDM, DEP, SCEP, VPP |
| Microsoft MDM | server/mdm/microsoft/ |
Go | Windows MDM protocol, Entra/Azure integration |
| Android MDM | server/mdm/android/ |
Go | Android Enterprise service |
| Vulnerability Engine | server/vulnerabilities/ |
Go | NVD/CVE/MSRC/OSV/OVAL scanning |
| OpenFrame Integration | server/service/openframe/ |
Go | Multitenancy auth manager, token rotation |
fleetctl CLI |
cmd/fleetctl/ |
Go | GitOps apply, query runner, package builder |
| Chrome Extension | ee/fleetd-chrome/ |
TypeScript | Browser-based osquery agent for ChromeOS |
# Start the server
fleet serve --dev --dev_license
# Run database migrations
fleet prepare db
# Apply GitOps configuration
fleetctl gitops --config fleet.yml --fleet-url http://localhost:8080
# Run a live query across hosts
fleetctl query --hosts hostname --query "SELECT * FROM os_version"
# Build an enrollment package
fleetctl package --type=pkg --fleet-url=http://localhost:8080 --enroll-secret=<secret>📚 See the Documentation for comprehensive guides including getting started tutorials, development setup, architecture deep-dives, security guidelines, and testing instructions.
- Community Slack: openmsp.ai — join
#fleetmdm - Flamingo Platform: flamingo.run
- OpenFrame: openframe.ai
- Security issues: security@flamingo.run
- Fleet official docs: fleetdm.com/docs
- osquery tables reference: osquery.io/schema
Built with 💛 by the Flamingo team