Reproducible OPAM Builds
This website offers binary MirageOS unikernels and supplementary OS packages. If you want to use our binary packages and setup unikernels, follow these instructions.
The unikernels are statically linked executables where the execution target is independent of the build platform - so even if they're compiled on a FreeBSD system they can be run on a Linux or OpenBSD host. Many are executed using a solo5 tender.
A persistent link to the latest successful build is available as /job/*jobname*/build/latest/. Each build can be reproduced with orb.
The builds are scheduled and executed daily by builder. This web interface is builder-web. Read further information on our project page.
This work has been funded by the European Union under the NGI Pointer program. Contact team AT robur.coop if you have questions or suggestions.
Execution Environments
- .hvt: hardware virtualized - requires solo5-hvt (Linux KVM, FreeBSD BHyve, or OpenBSD VMM)
- .xen: Xen PVH virtual machine (on a Xen or QubesOS host)
Packages
Albatross - orchestrate and manage MirageOS unikernels with Solo5
SHA256:1c7e16e6b664b1272d30e5c1159163cf946874b6e8e406d0da064a6a4d9e103d
SHA256:fa17897bfbacfcb08802ea23a9fc323a59d95829cf5dbafb65b9b21150b25d4a
SHA256:26592427807c584bc8608513f396c4bae9d48bcd21be6911f0da36cd6e8c4370
SHA256:37898caffe90a016af7e31ba3060ba4c1c8cc654baaa4ef4c8c192a3142c4d8f
SHA256:c225f85adeac4edd5bd4844b9cfab0278b61d9a90779aa0abd7e67e30d09165c
Scheduling and executing shell jobs
SHA256:7aa883774f82aca603731bb6eb80723968006124f2e3c4942094f8b222216d5c
SHA256:71a55d4e87d64fcca53fcf2ea2e804fabe2a7dcb83d0bc1bbeb9e83faf8c8574
SHA256:e2ba191a67e12ec7e7287d2a6a59a6d9f22f8735e01fc30cf2feaa1af3b4e96d
SHA256:626de6764cbac5555cc6af001dff90616649603eac15dcf0da12dd207cc990f3
SHA256:3f9fff0d8096d1c75ff45fb7fa64af670b2ba273cb39df5d93069fb3e49a7f2c
Web interface for builder
SHA256:2f4ee5dd6ef0917dc4e0c23555d75d0ca0c10f1d339b9f154905fe26c89ffb2b
SHA256:50844768585b8f089fa295a0d4b18e24d34651cc603449601cb25f3e7e2571d5
SHA256:5dbee30bd3f875e1984f2af7b601e492db7817a7d6e193035a2cb21a627b374e
Dissect OCaml compiled programs, and weight their content
SHA256:08d16d35322f35b5166667d472c7888b385e763df78c5cf5a29103a51f741425
SHA256:566739664378f741326044b0f870f8a7df90dae920526e018a31e1d8d0492168
SHA256:8f6947164ff0625af31123db65db16ba1f15b85490b3fd5dcce721cfcc3bad92
SHA256:2868b4090dfaa57fa1802183eafaddd57e921de0d00b7cfdd09337b98c0562fa
Graphing dependencies of opam packages
SHA256:64aaf5e13564fd5bd7d2350f9544e90e7ba93d514631a590ef1ac5a7c8cfee2d
SHA256:8d14b9e1e5922ca3ed767ea3270e5e0da0dc119f66eeca1c343fcb9c2f7a4cf9
SHA256:56615b4a6462c684a389f3d2de23cab579a9fcd06652f54b82869ab0a198d54c
SHA256:0a73228bf1040fa6a980e35bfab1df26ca07bd3241d6e7d24066c042370c72d6
Check opam package reproducibility
Solo5 sandboxed execution environment
Unikernels
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage
An unikernel that provides an opam-repository, and is a conex snapshot and timestamp service
A DNS secondary server that pushes certificates signed by let's encrypt when certificate signing requests without a valid certificate are in the zone (using TLSA records)
SHA256:931f351256861479d0e61e81ddd2950dc8cb97b2be9499814f15503e9d43badb
A primary DNS server unikernel that stores zone files in a remote git repository
SHA256:fe33688179ff4e30891125927fea29d5846a7e3d8cc8c7404a9bb5d887bb0aaa
A secondary DNS server as unikernel
SHA256:c8d883be80f7a24fb4f9eaa8f320000dcfda7c18783a54dd1e8ab9b0f78c66a2
A DNS stub resolver
SHA256:a931467981ab335d34d0622d6be24e02f048a5972bc730009ce26fc0fa0c79ff
A DNS resolver and DHCP server MirageOS unikernel
SHA256:cfe2d3d58bbd77b9659fa1153c648c0d690272cf779008a4d0794d881e60c701
The famous hello world unikernel
SHA256:667a535d7c3e320cffd643399887e4b7d00c32400b651ab0e5f841951418cfd2
An OpenVPN-compatible unikernel for QubesOS
SHA256:56ab42349954156b5c0185dd847385001214d1a2b77f4ec990ca5cdd204ccd49
SHA256:478058a32b737df81b71444ee9830f52d0d554a958219707d07990dc2af64c57
SHA256:1b21289b1532451f6bc9d07266a9fc7f736386a7837602661a2bf6055889dfef
An OpenVPN-compatible server unikernel.
SHA256:9bb1f7cee28bdda937fb9dbef508f994a5eb3cb3807f72b7a4aa82cbd2685ea9
Mollymawk is a web user interface and REST API for albatross, and a MirageOS unikernel
SHA256:5ccbe9dfcc33ba2ad9df6ca584a1b822f77e0e2abd58125599f12c023b8883ad
An unikernel implementing an opam-repository and archive mirror
A static website example unikernel
A TLS reverse proxy unikernel
SHA256:a947bf2c6aba14f1f54526f95ead06b1c9105c9b2c753323f5a633cc8bacd1eb
A unikernel executing a traceroute
SHA256:33bdfcd9da350b7ce7e0c382322c4dbad5b284e1b77ec462e3f3ce18a9df4c1b
A web server unikernel which content is stored in a remote git repository, TLS certificate via ALPN let's encrypt challenge
Unikernels (with metrics reported to Influx)
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage, reports metrics to influx and certificate retrieval via DNS and let's encrypt
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage, reports metrics to influx
A DNS secondary server that pushes certificates signed by let's encrypt when certificate signing requests without a valid certificate are in the zone (using TLSA records), reports metrics to influx
SHA256:34741dc63ae73542385060006122c07cb92267c295be5c1313e7e31e5339e4c1
A primary DNS server unikernel that stores zone files in a remote git repository which reports metrics to influx
SHA256:0f4e1d92e51d09a5915bf346cf6dd145c7950d1eecac82fdfeeeb31dd6388d78
A secondary DNS server as unikernel which reports metrics to influx
SHA256:ccf5e72c90a8dbbb77b5d53addfe898bdbd14288e92d4bc513c25f2c5143bba2
An OpenVPN-compatible router unikernel, the configuration is stored on a block device, reports metrics to influx
SHA256:41b452064e194abdf478127b180f1347b44ce515610b5eb770436d2d41d519be
The unikernel serving https://retreat.mirageos.org with metrics reported to influx
SHA256:7d6ac9f1997f5c3ffee8dfa36f3aba027927aee83cc4242172b9f955e3686590
A TLS reverse proxy unikernel, reports metrics to influx
SHA256:c0b9df29f058a44a56a28e3ed6decb17f6ab66e9d09bb9c4450cdf6bf3f8e62d
A web server unikernel which content is stored in a remote git repository, TLS certificate via ALPN let's encrypt challenge, which reports metrics to influx