Reproducible OPAM Builds
This website offers binary MirageOS unikernels and supplementary OS packages. If you want to use our binary packages and setup unikernels, follow these instructions.
The unikernels are statically linked executables where the execution target is independent of the build platform - so even if they're compiled on a FreeBSD system they can be run on a Linux or OpenBSD host. Many are executed using a solo5 tender.
A persistent link to the latest successful build is available as /job/*jobname*/build/latest/. Each build can be reproduced with orb.
The builds are scheduled and executed daily by builder. This web interface is builder-web. Read further information on our project page.
This work has been funded by the European Union under the NGI Pointer program. Contact team AT robur.coop if you have questions or suggestions.
Execution Environments
- .hvt: hardware virtualized - requires solo5-hvt (Linux KVM, FreeBSD BHyve, or OpenBSD VMM)
- .xen: Xen PVH virtual machine (on a Xen or QubesOS host)
Packages
Albatross - orchestrate and manage MirageOS unikernels with Solo5
SHA256:858e91ebbd7cbbaad94a982fc3a87f660672e02d07fb64e76fce21e0f838b73a
SHA256:ff9e4a0469905279e4c7f074fbb6b6c812b2bd1fbccf5dc752bc15532ced3b7d
SHA256:149d41671654ce25f0a288406572a7013c8b1d1342c7ccc9888767ece66f0d6a
Scheduling and executing shell jobs
SHA256:764d34e6f4c25be0e3ff6e3a21679f31e57e88145bc272db87ac151bbaea3add
SHA256:f8c3722f75ff1a872e6e86937f9cc130a5cf08a3e8f499af2ccfa0f05cf51425
Dissect OCaml compiled programs, and weight their content
SHA256:15be9f42d238073b9a7c45191f414b43d4d63b277cbbbbf10b950117e323655a
SHA256:d2aa789fae9611d2437f8bbb48d5efe22026d0c2a597608255e27465997c15c1
SHA256:833eb546a0cd13bdebdafc13dfe62f33afa7b075a25df57d02036ad901c2d741
Graphing dependencies of opam packages
SHA256:b23991347aa5f83182d08e3ba5b203789d6299b09e3405e361c2023c8af77164
SHA256:a3965ba6e67a81bc68e5ab312a9ca5f88a5334010ad831e33e77cd7e2ad3461d
SHA256:77eacb301706472438ff22516ed8c7ced277d0533a6f987bc8cf15a68dc42559
Check opam package reproducibility
Solo5 sandboxed execution environment
Unikernels
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage
An unikernel that provides an opam-repository, and is a conex snapshot and timestamp service
A DNS secondary server that pushes certificates signed by let's encrypt when certificate signing requests without a valid certificate are in the zone (using TLSA records)
SHA256:bba30fd956084bfc118ef4b421364aa4b38b4aeefcc1f6801ada4e7cfc4263ba
A primary DNS server unikernel that stores zone files in a remote git repository
SHA256:059bc1e192403dcfa3d93dc7618c8be83a422921f9e7b274d03857c2d13ecf61
A secondary DNS server as unikernel
SHA256:28514196ee6e18f05f6785e4a4a4f8a123d90ae4cd4915fabe712457cb78f2d4
A DNS stub resolver
SHA256:608a302ec6eb5742edc79e42ec7af596475ddc8247627851886e769f85dd4f10
A DNS resolver and DHCP server MirageOS unikernel
SHA256:ec2e2af6a90dbe4fde236e4e280d291737905ab09821eb738f003e44208b4f5b
The famous hello world unikernel
SHA256:9c6d1771a35879d9cacd1fe294ba7ca306cc42fdb68204aca4a8c811896d8160
An OpenVPN-compatible server unikernel.
SHA256:5ff89ac4b7b551f7aa1a8214db3675a816683eb070ed537db9abb4adc92e74b5
Mollymawk is a web user interface and REST API for albatross, and a MirageOS unikernel
SHA256:228f3e9cda0be4c01a48df2129bdf1ae7b75260281395c5f07bd78693f2a8369
An unikernel implementing an opam-repository and archive mirror
A static website example unikernel
A TLS reverse proxy unikernel
SHA256:03c6d488fe4c32d1b968dbd1fb0d7a86b8e9db7feae3d74c845b58bdb6a89702
A web server unikernel which content is stored in a remote git repository, TLS certificate via ALPN let's encrypt challenge
Unikernels (with metrics reported to Influx)
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage, reports metrics to influx and certificate retrieval via DNS and let's encrypt
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage, reports metrics to influx
A DNS secondary server that pushes certificates signed by let's encrypt when certificate signing requests without a valid certificate are in the zone (using TLSA records), reports metrics to influx
SHA256:b4617d2c4106dbf88abd67aac6ca77fc7da2f801679d5e17cc96c82442d91709
A primary DNS server unikernel that stores zone files in a remote git repository which reports metrics to influx
SHA256:778cc42130674717bcd66e03c371e230a936459fe04caf0cac694459b71c6968
A secondary DNS server as unikernel which reports metrics to influx
SHA256:10b0513b947926b946a06b71f234f28cfe745e85a3c65a92b40552078231bb6e
An OpenVPN-compatible router unikernel, the configuration is stored on a block device, reports metrics to influx
SHA256:c1efc8d38a450365a078f33c1e91e3ea0e3d55d5b205aad7a20e539d1b704f44
The unikernel serving https://retreat.mirageos.org with metrics reported to influx
SHA256:c96a17ca9e5891d4e621611407aca1d8439ba5235452706e90167a191569d2c0
A TLS reverse proxy unikernel, reports metrics to influx
SHA256:9d15cc0cb72db67116dfdc03ed57dddc68142a089c0d929e97bf3647481ddb0c
A web server unikernel which content is stored in a remote git repository, TLS certificate via ALPN let's encrypt challenge, which reports metrics to influx