Reproducible OPAM Builds
This website offers binary MirageOS unikernels and supplementary OS packages. If you want to use our binary packages and setup unikernels, follow these instructions.
The unikernels are statically linked executables where the execution target is independent of the build platform - so even if they're compiled on a FreeBSD system they can be run on a Linux or OpenBSD host. Many are executed using a solo5 tender.
A persistent link to the latest successful build is available as /job/*jobname*/build/latest/. Each build can be reproduced with orb.
The builds are scheduled and executed daily by builder. This web interface is builder-web. Read further information on our project page.
This work has been funded by the European Union under the NGI Pointer program. Contact team AT robur.coop if you have questions or suggestions.
Execution Environments
- .hvt: hardware virtualized - requires solo5-hvt (Linux KVM, FreeBSD BHyve, or OpenBSD VMM)
- .xen: Xen PVH virtual machine (on a Xen or QubesOS host)
Packages
Albatross - orchestrate and manage MirageOS unikernels with Solo5
SHA256:39fb5cc2f448c7e2911c819bd8c16df1793c3f2d9ebac0fb0908cf507cc0dd09
SHA256:43fc22d8844a3ee782a513468962cb7e3781966881ee1defd836d8ba6d302f25
SHA256:9c7e30de74fb1d495da8d4791d8172d0f3e9295ba9c601951e254b7e7698fc2b
Scheduling and executing shell jobs
SHA256:41875c94ce30628ee53c36f799a7635df1ad830d674f4fdd85b5dbfa9ae6ca8c
SHA256:74ca925d8fc7b6d8d959b8b7c7eb21659710b48256cf078fba54875e22668350
SHA256:d4a54451153c575af37e3cc0f3debbd26ae6e50929c522327e2f633e38c70779
Dissect OCaml compiled programs, and weight their content
SHA256:5fc36f635bf39b56b24aced14ee51739a3bd7fe0c8392d810843d2036348d897
SHA256:4eece232f0c457da70c3bf8e8306207f8c7eb7d9f7afc78fefcb18439087e8e8
SHA256:ef7a296a09bbe2ee700e4a8e0ee6aa30d6b0384bd82c748a71a4d6fc77e3e031
Graphing dependencies of opam packages
SHA256:4878be17c11f21e22bf3d34834479b6b6946a0841af3ee16aff4cf5b02449538
SHA256:7ee1fe5ed95f99d5a78d80cb7d5a6c277421f222cfcc3eacd0fdc02848f5df65
SHA256:01fc7b5038c8ade9a08ef684aeee490ac19bce9daa4f7b9504e0f1773b9effcc
Check opam package reproducibility
Solo5 sandboxed execution environment
Unikernels
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage
An unikernel that provides an opam-repository, and is a conex snapshot and timestamp service
A DNS secondary server that pushes certificates signed by let's encrypt when certificate signing requests without a valid certificate are in the zone (using TLSA records)
SHA256:5fd69b6b9f30608c299e84a9d1683e87204234838518a6ede77b31e17bfe78ee
A primary DNS server unikernel that stores zone files in a remote git repository
SHA256:924b014f7c7fa8c704756756b6358e26444ee851bd92ad666f5fdc63f519eb5e
A secondary DNS server as unikernel
SHA256:7a33c140e30a4e89ec72970c980558c9a548c03474e960a79b5c3deeeccc31db
A DNS stub resolver
SHA256:e768cec919b6814e5adec606a9f4dc385e1d40420832f8ef22c4166bd876cb06
A DNS resolver and DHCP server MirageOS unikernel
SHA256:9f6d0c83ab3018060693c859a80563715883c069b1b15c75274e760b55438dc7
The famous hello world unikernel
SHA256:e376c863c7a7f1fe137d49b538661e96a06723b7ee6d84151da1b9cf224720ae
An OpenVPN-compatible server unikernel.
SHA256:49c3891d57b2d52adfd0313041e40b62ab08e4e69e633be24fdd47b04f1a5d1e
Mollymawk is a web user interface and REST API for albatross, and a MirageOS unikernel
SHA256:ede753a71a40ea5616b563c36093638eb093a999081d698ef923dd548733407d
An unikernel implementing an opam-repository and archive mirror
A static website example unikernel
A TLS reverse proxy unikernel
SHA256:6a02b7b575584532be29304f22b51769671ae95e8b57f7698cb4ae324324e0f4
A web server unikernel which content is stored in a remote git repository, TLS certificate via ALPN let's encrypt challenge
Unikernels (with metrics reported to Influx)
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage, reports metrics to influx and certificate retrieval via DNS and let's encrypt
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage, reports metrics to influx
A DNS secondary server that pushes certificates signed by let's encrypt when certificate signing requests without a valid certificate are in the zone (using TLSA records), reports metrics to influx
SHA256:c35abab64d81d97fad157ed3143ff4c988b97b12d9a0fd3d5feb2cd51c94b775
A primary DNS server unikernel that stores zone files in a remote git repository which reports metrics to influx
SHA256:a357daa4855754e926ea2a6bb56d05e8bedddc96a8c5bc5ee3221aa87db96b73
A secondary DNS server as unikernel which reports metrics to influx
SHA256:97118b7984cafafb59886a4d78b05ebc9aef6298e13bb6723210fce16c5bfc73
An OpenVPN-compatible router unikernel, the configuration is stored on a block device, reports metrics to influx
SHA256:c81d7f24f8ede847fa2f36df85d1d6d81ccaf45b3f5b4a8813d3761482108062
The unikernel serving https://retreat.mirageos.org with metrics reported to influx
SHA256:daa922899a79035f2df7de88b065519f617db300ed6dd974e2e6caa3e3bbf30f
A TLS reverse proxy unikernel, reports metrics to influx
SHA256:e417c7691d5eb28ae44e804e86d7c424776fc3effb866e4f2f8e9698cf4b9905
A web server unikernel which content is stored in a remote git repository, TLS certificate via ALPN let's encrypt challenge, which reports metrics to influx