Reproducible OPAM Builds
This website offers binary MirageOS unikernels and supplementary OS packages. If you want to use our binary packages and setup unikernels, follow these instructions.
The unikernels are statically linked executables where the execution target is independent of the build platform - so even if they're compiled on a FreeBSD system they can be run on a Linux or OpenBSD host. Many are executed using a solo5 tender.
A persistent link to the latest successful build is available as /job/*jobname*/build/latest/. Each build can be reproduced with orb.
The builds are scheduled and executed daily by builder. This web interface is builder-web. Read further information on our project page.
This work has been funded by the European Union under the NGI Pointer program. Contact team AT robur.coop if you have questions or suggestions.
Execution Environments
- .hvt: hardware virtualized - requires solo5-hvt (Linux KVM, FreeBSD BHyve, or OpenBSD VMM)
- .xen: Xen PVH virtual machine (on a Xen or QubesOS host)
Packages
Albatross - orchestrate and manage MirageOS unikernels with Solo5
SHA256:911fe232e1dbaaab9bb07b05ef33340edbd1084560aaf80e4579a5a37bee3c7b
SHA256:b483293fb6da37ffb9ab7349e71433312dae2d3303e3dc1553b4836521d6ea33
SHA256:b79fbe682229484b95105c50e5e927a9ba232f755cb0a7fe2964c5983c413705
Scheduling and executing shell jobs
SHA256:87f5dcf612f01c4c2be13a079eaab56737829b75607940e28ff0a17c08aba8d7
SHA256:63aac666e372e06246e2d826ebea6e6b07af2c761af0ad865dbcc1589add2617
SHA256:020f1367d711f9bfa0fbbe7e33abada119d78499d056bc3ad47b3946eb02bcd4
Dissect OCaml compiled programs, and weight their content
SHA256:5fc36f635bf39b56b24aced14ee51739a3bd7fe0c8392d810843d2036348d897
SHA256:4eece232f0c457da70c3bf8e8306207f8c7eb7d9f7afc78fefcb18439087e8e8
SHA256:ef7a296a09bbe2ee700e4a8e0ee6aa30d6b0384bd82c748a71a4d6fc77e3e031
Graphing dependencies of opam packages
SHA256:1ca76c18609b2211631036f17423a0760d3762d14a7949423c550c930f44d924
SHA256:85056ed21450997b43ef9a3f741b6b06c359b3ed196d42faa156c994ce93224f
SHA256:13d17e6bccd96424f2b5cd530b0cc7dbb28498a34380fdf7c442cb6dd7a2c5db
Check opam package reproducibility
Solo5 sandboxed execution environment
Unikernels
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage
An unikernel that provides an opam-repository, and is a conex snapshot and timestamp service
A DNS secondary server that pushes certificates signed by let's encrypt when certificate signing requests without a valid certificate are in the zone (using TLSA records)
SHA256:f91f946c9088b65bf2d70286e6f887f72bfd335245ef20c54555a32cd4dcaabc
A primary DNS server unikernel that stores zone files in a remote git repository
SHA256:dceac36f104445475205b2ce47744685b056e69101fdd80cb114a9107d7109bd
A secondary DNS server as unikernel
SHA256:b04442ab3f1a4c2f8ce7886025cc69f70a7f56c83bf8e453ce869604cc6a2eeb
A DNS stub resolver
SHA256:6b8eea499ff596d8757c85787269fdf79c2ba16e69d969190d35b0b3b990abd9
A DNS resolver and DHCP server MirageOS unikernel
SHA256:17fde2cf762872d4820377543fbed5011648b54db4874bc1270240a239f36fa6
The famous hello world unikernel
SHA256:0d51ddee7fabb0e6b1ffaf4617f2cbec7efb8fe570a5e01ca752d8767afb98d8
An OpenVPN-compatible server unikernel.
SHA256:ab69ecc87908e1699ecb7d42eaa9e4f4e81772b3c71dd417768e826a9cc232fc
Mollymawk is a web user interface and REST API for albatross, and a MirageOS unikernel
SHA256:d50416271c9fd50da3aa32d939b597a663fb5cb6882e59cb2d51aef1db46b632
An unikernel implementing an opam-repository and archive mirror
A static website example unikernel
A TLS reverse proxy unikernel
SHA256:575eacb46feecb5054682a6056425054e38e9bc3daf9f9d64614df0d37244bec
A web server unikernel which content is stored in a remote git repository, TLS certificate via ALPN let's encrypt challenge
Unikernels (with metrics reported to Influx)
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage, reports metrics to influx and certificate retrieval via DNS and let's encrypt
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage, reports metrics to influx
A DNS secondary server that pushes certificates signed by let's encrypt when certificate signing requests without a valid certificate are in the zone (using TLSA records), reports metrics to influx
SHA256:cd39cedbf4c77ce47edc197d10606a4da9a2717791da6f03ea54fc02f8b9b571
A primary DNS server unikernel that stores zone files in a remote git repository which reports metrics to influx
SHA256:0105c96f447fc801c90f4a94848b97e77a45932129eb45023c3db84c4203cbb2
A secondary DNS server as unikernel which reports metrics to influx
SHA256:c887e7108c2fc18a081a2b5ab07739e14f5207992f331c003870483b92a9e253
An OpenVPN-compatible router unikernel, the configuration is stored on a block device, reports metrics to influx
SHA256:dd8e48c17d8f4b24e72bf6dd3f51613e216b072c8697654ee2be8cafdbd630ec
The unikernel serving https://retreat.mirageos.org with metrics reported to influx
SHA256:1beec8730f8b4bc448d3c00b0387dde7fd8f0463d95f687fab134af9fbf958d5
A TLS reverse proxy unikernel, reports metrics to influx
SHA256:9f6a72238a3f65e1d461a68207c16a078d2172fc444193c77e70d3f2e1f26efc
A web server unikernel which content is stored in a remote git repository, TLS certificate via ALPN let's encrypt challenge, which reports metrics to influx