Reproducible OPAM Builds
This website offers binary MirageOS unikernels and supplementary OS packages. If you want to use our binary packages and setup unikernels, follow these instructions.
The unikernels are statically linked executables where the execution target is independent of the build platform - so even if they're compiled on a FreeBSD system they can be run on a Linux, DragonFly BSD or OpenBSD host. Many are executed using a solo5 tender.
A persistent link to the latest successful build is available as /job/*jobname*/build/latest/. Each build can be reproduced with orb.
The builds are scheduled and executed daily by builder. This web interface is builder-web. Read further information on our project page.
This work has been funded by the European Union under the NGI Pointer program. Contact team AT robur.coop if you have questions or suggestions.
Execution Environments
- .hvt: hardware virtualized - requires solo5-hvt (Linux KVM, FreeBSD BHyve, OpenBSD VMM, or DragonFly BSD NVMM)
- .xen: Xen PVH virtual machine (on a Xen or QubesOS host)
Packages
Albatross - orchestrate and manage MirageOS unikernels with Solo5
SHA256:d102a96fa8c2ec7278ed5e67423a476d244ee127a319017e6413718d43dbf603
SHA256:ad30480d9f069b83fb9124b2c75a7d12a25110f0d6b78834d55faf2bd1316b37
SHA256:3535bf114111372af02a1c98c29565445874bd9cb598c0b3744e067d5d21aa29
OCI runtime for Solo5 unikernels
A boringly simpleconfiguration format
Scheduling and executing shell jobs
SHA256:1352b323c1a56c4a2f9f8b8d0ec713059628f0f69e8d03f4bcd1991232987653
SHA256:ecbd6ce04ff138fb417617fb5b3ddcd6a670d856599d0873526bea5df73aff33
SHA256:c87fcc6cc72a1395b92bbdc5364ab2b0cf21bcff08843b6697b2546084219a34
Web interface for builder
SHA256:72e3b29e0eed6b581246b13e1e6f1122dd92ac0d8b3b99a2a0c7e4928429fe81
SHA256:ec1e30c1332bffec3f6859f348466449aca61592645f4565becffd429ae84ab7
SHA256:fd197e505be1fd24b7bbc2f3b710f6fafb97f5102c9bd34660653537359c2942
Unix command line DNS utilities
SHA256:3d613c4812a1da1fd9c3c76a031f29a70d3fbdac5fdf2c5e498b153af9277e6c
SHA256:6ca856d2445cf501aad7d54e9e2ae0648ddcb8640509ca2ed3c214cb14e60f78
SHA256:dc880a9046498638662ece771434a8dc3e4f8ce79f890845d24c2ef681dd3988
Dissect OCaml compiled programs, and weight their content
SHA256:b5911cf0252862a66c7c4bdfd4546add95b0aeb94e6eea0870c51821ec4e2427
SHA256:6582409f44189ace190753478d812a0788284f244c88a4ba7df14e957e587ecc
SHA256:00ac6601611962d8b8d80b2f081e38674c9479769cdfc3c014e43dd7a7d4a490
Graphing dependencies of opam packages
SHA256:4fe93336714f696d79d08fd0c3ae3a844fcd5076ffa7f0380a63d5f13d472f60
SHA256:bbad4b4142bbc20eaaccd4d02f8c7df912c8c62b552c56dc00c0c84bf6f2d4c2
SHA256:e881475312c3aa4e51c6f8564303e2eec988c7571dc75d8f7cb245b73cd694a7
Check opam package reproducibility
Solo5 sandboxed execution environment
Unikernels
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage
An unikernel that provides an opam-repository, and is a conex snapshot and timestamp service
A DNS secondary server that pushes certificates signed by let's encrypt when certificate signing requests without a valid certificate are in the zone (using TLSA records)
SHA256:8df23cf1f3de8ac5725a40575f2f8556828e81d3144ebad8b45e95ec79076ce9
A primary DNS server unikernel that stores zone files in a remote git repository
SHA256:91c3d1c88e7e1d0c2dca28aacea33cf00ebd9c371a69737b6a8a82a8af79559e
A secondary DNS server as unikernel
SHA256:e5bddd31659991985532ef23e2dd5cef6d98bd8ff5e23108d619b12696f2e2f2
A DNS stub resolver
SHA256:cd2c09c75d9903364009a222b9460c1b6e6ea6b8fe13f4fcb31ac204ba410b2f
A DNS resolver and DHCP server MirageOS unikernel
SHA256:972db34617201f68f36d44e5c09c15c59e6710e49baf25f8f59b0faace4bd913
The famous hello world unikernel
SHA256:8fd2b96c1a7b313a5673ccc1aade515454c0fe0228834f49337aa106945cc9dc
An OpenVPN-compatible server unikernel.
SHA256:02467f76c9f509a7593935cfc5aea23f48665fd521851e38a95f970d21ea7ac9
Mollymawk is a web user interface and REST API for albatross, and a MirageOS unikernel
SHA256:0e8cf9eb6f046fa010fe51049fb95c29b1d6476effdba1c3e5364ab92607fc75
An unikernel implementing an opam-repository and archive mirror
A static website example unikernel
A TLS reverse proxy unikernel
SHA256:0d35a0ad671829e083c03f03b7b6ec6d5d60cec2eda45cb8c848d11af7877d62
A unikernel executing a traceroute
SHA256:51a44c40f72e87c826fe6a101d514103fea9f2ba9fa8e3e8050d22faaa5c67b8
A web server unikernel which content is stored in a remote git repository, TLS certificate via ALPN let's encrypt challenge
Unikernels (with metrics reported to Influx)
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage, reports metrics to influx and certificate retrieval via DNS and let's encrypt
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage, reports metrics to influx
A DNS secondary server that pushes certificates signed by let's encrypt when certificate signing requests without a valid certificate are in the zone (using TLSA records), reports metrics to influx
SHA256:dd1e32d037d2d16c34df7180ea34b8f3af7367936d9ac0204e6b74b5e2c69372
A primary DNS server unikernel that stores zone files in a remote git repository which reports metrics to influx
SHA256:570a5c7c510277fea849f05e799d3790df563432e6a41151fa307a31e02c87df
A secondary DNS server as unikernel which reports metrics to influx
SHA256:64f99185692c2987305722dd96542f0ae5a6edf3d4ff02466b42bae58a59cec8
An OpenVPN-compatible router unikernel, the configuration is stored on a block device, reports metrics to influx
SHA256:ce33d1158c03164450f950709ff2045f733e76a9c7ffee0f43d3afbcd50802d0
The unikernel serving https://retreat.mirageos.org with metrics reported to influx
A TLS reverse proxy unikernel, reports metrics to influx
SHA256:058d5b35ece78bd71c580e2bc1fcfd414ea93198258a2346f28bdc33a6351e52
A web server unikernel which content is stored in a remote git repository, TLS certificate via ALPN let's encrypt challenge, which reports metrics to influx