Reproducible OPAM Builds
This website offers binary MirageOS unikernels and supplementary OS packages. If you want to use our binary packages and setup unikernels, follow these instructions.
The unikernels are statically linked executables where the execution target is independent of the build platform - so even if they're compiled on a FreeBSD system they can be run on a Linux or OpenBSD host. Many are executed using a solo5 tender.
A persistent link to the latest successful build is available as /job/*jobname*/build/latest/. Each build can be reproduced with orb.
The builds are scheduled and executed daily by builder. This web interface is builder-web. Read further information on our project page.
This work has been funded by the European Union under the NGI Pointer program. Contact team AT robur.coop if you have questions or suggestions.
Execution Environments
- .hvt: hardware virtualized - requires solo5-hvt (Linux KVM, FreeBSD BHyve, or OpenBSD VMM)
- .xen: Xen PVH virtual machine (on a Xen or QubesOS host)
Packages
Albatross - orchestrate and manage MirageOS unikernels with Solo5
SHA256:1c7e16e6b664b1272d30e5c1159163cf946874b6e8e406d0da064a6a4d9e103d
SHA256:a2ce50882599d116b2585753d72596b780f77c23eaf0d29b529fd538a8b7608e
SHA256:f2666c03621e7835a15407324badd58d9e734f44ba2116e44e255f06d7fc5d9f
SHA256:37898caffe90a016af7e31ba3060ba4c1c8cc654baaa4ef4c8c192a3142c4d8f
SHA256:4260a791e6a336fd744cae2e47a1decceb2e55c0f56968003124c8ee982ede80
Scheduling and executing shell jobs
SHA256:7aa883774f82aca603731bb6eb80723968006124f2e3c4942094f8b222216d5c
SHA256:0ba08ee93f133904ed3e5aced358699058090aac8884bf1390e093902d1f7925
SHA256:e9eddd9a5465e78748f72d2da752515993bc0754c64384c56f14d45cbe1fb6db
SHA256:626de6764cbac5555cc6af001dff90616649603eac15dcf0da12dd207cc990f3
SHA256:549deae1836491a04a762aa94523bb6ed6001f71029057c017660efbf584daaf
Web interface for builder
SHA256:2f4ee5dd6ef0917dc4e0c23555d75d0ca0c10f1d339b9f154905fe26c89ffb2b
SHA256:bf0ef08fd18a00018af3cc34407fe35a664f02c00c7a7aa5222ea81769fc50cb
SHA256:270f4d2d003d083ba8827b9e2e1dad04a16ae8b6da4af7fd037ddc5b699e70a0
SHA256:87d7baf814be5a2bbede0c1fb230cd8842c79580b1ef63ba1a220cd5bd6dc35d
Unix command line DNS utilities
SHA256:d4e0f002cae3529e856045a151c6bfdeda17c0db340dc7d042ad7c30e9b01bb9
Dissect OCaml compiled programs, and weight their content
SHA256:08d16d35322f35b5166667d472c7888b385e763df78c5cf5a29103a51f741425
SHA256:15be9f42d238073b9a7c45191f414b43d4d63b277cbbbbf10b950117e323655a
SHA256:d2aa789fae9611d2437f8bbb48d5efe22026d0c2a597608255e27465997c15c1
SHA256:833eb546a0cd13bdebdafc13dfe62f33afa7b075a25df57d02036ad901c2d741
Graphing dependencies of opam packages
SHA256:64aaf5e13564fd5bd7d2350f9544e90e7ba93d514631a590ef1ac5a7c8cfee2d
SHA256:b23991347aa5f83182d08e3ba5b203789d6299b09e3405e361c2023c8af77164
SHA256:a3965ba6e67a81bc68e5ab312a9ca5f88a5334010ad831e33e77cd7e2ad3461d
SHA256:77eacb301706472438ff22516ed8c7ced277d0533a6f987bc8cf15a68dc42559
Check opam package reproducibility
Solo5 sandboxed execution environment
Unikernels
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage
An unikernel that provides an opam-repository, and is a conex snapshot and timestamp service
A DNS secondary server that pushes certificates signed by let's encrypt when certificate signing requests without a valid certificate are in the zone (using TLSA records)
SHA256:bfe85b86ff0f1fc04d8068cbcbd0a9a6c0077aee03201fa7e8b2e8f30ffe184a
A primary DNS server unikernel that stores zone files in a remote git repository
SHA256:a192689badd90b0f1dccf2df0c952ac51fdce617992fbccecbcac507308e0c07
A secondary DNS server as unikernel
SHA256:7fe3649a8473ad2d3ca476e3171ffcdf276731d243253a83c1ab75e6d18aed80
A DNS stub resolver
SHA256:f7b655b849759a65d74a5da987d52ea924c5e1fc29f40cc68fd9bc7ae2d363d4
A DNS resolver and DHCP server MirageOS unikernel
SHA256:b526aa091edf1b5c14ac26fe32ce3e3b927a0cd5e0c7e271609d9da18cbf28a9
The famous hello world unikernel
SHA256:358c9777bf7d16f7dc641ce2f319e2e5f06237805b599433c2540be491a95b98
An OpenVPN-compatible unikernel for QubesOS
SHA256:56ab42349954156b5c0185dd847385001214d1a2b77f4ec990ca5cdd204ccd49
SHA256:478058a32b737df81b71444ee9830f52d0d554a958219707d07990dc2af64c57
SHA256:1b21289b1532451f6bc9d07266a9fc7f736386a7837602661a2bf6055889dfef
An OpenVPN-compatible server unikernel.
SHA256:4c2ca544a919dbad80d99acefc7b0f0c14a392ad56e0c1972be0e3b2471cadb5
Mollymawk is a web user interface and REST API for albatross, and a MirageOS unikernel
SHA256:e34b89f45552c8d35997dea5833de06652dfd80c99143f0ca75bf2ed1c896f32
An unikernel implementing an opam-repository and archive mirror
A static website example unikernel
A TLS reverse proxy unikernel
SHA256:e5cec6e44a8a76bcb85daa0e7eee9739304cf0d95e3d34ca92bbf3d993a10775
A unikernel executing a traceroute
SHA256:de25716ece3be00227ede99b02299ca289f81160e09ae1ddf7470df0c2c86f5d
A web server unikernel which content is stored in a remote git repository, TLS certificate via ALPN let's encrypt challenge
Unikernels (with metrics reported to Influx)
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage, reports metrics to influx and certificate retrieval via DNS and let's encrypt
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage, reports metrics to influx
A DNS secondary server that pushes certificates signed by let's encrypt when certificate signing requests without a valid certificate are in the zone (using TLSA records), reports metrics to influx
SHA256:ca026c787ac8b59eed226e44deef514d211bdc1807a62c5bc2f5c3e0a7a4f0b2
A primary DNS server unikernel that stores zone files in a remote git repository which reports metrics to influx
SHA256:fc19b2cafd9550536c2082c7a003d9e4356f95d08eca6f34c752037f6f4afa2e
A secondary DNS server as unikernel which reports metrics to influx
SHA256:61742cf23340bc122922c2029b25232bb9fda64aca3de5708912010b08f89f22
An OpenVPN-compatible router unikernel, the configuration is stored on a block device, reports metrics to influx
SHA256:485d2145addd2f2b858310f9824474fe3707479ebc72b43ed71b90cb6c53bd29
The unikernel serving https://retreat.mirageos.org with metrics reported to influx
A TLS reverse proxy unikernel, reports metrics to influx
SHA256:3e3540a7cf1f48e999f91e920cbee7f603e1d6f5af88dbd40bcaa111f4d44d77
A web server unikernel which content is stored in a remote git repository, TLS certificate via ALPN let's encrypt challenge, which reports metrics to influx