Reproducible OPAM Builds
This website offers binary MirageOS unikernels and supplementary OS packages. If you want to use our binary packages and setup unikernels, follow these instructions.
The unikernels are statically linked executables where the execution target is independent of the build platform - so even if they're compiled on a FreeBSD system they can be run on a Linux or OpenBSD host. Many are executed using a solo5 tender.
A persistent link to the latest successful build is available as /job/*jobname*/build/latest/. Each build can be reproduced with orb.
The builds are scheduled and executed daily by builder. This web interface is builder-web. Read further information on our project page.
This work has been funded by the European Union under the NGI Pointer program. Contact team AT robur.coop if you have questions or suggestions.
Execution Environments
- .hvt: hardware virtualized - requires solo5-hvt (Linux KVM, FreeBSD BHyve, or OpenBSD VMM)
- .xen: Xen PVH virtual machine (on a Xen or QubesOS host)
Packages
Albatross - orchestrate and manage MirageOS unikernels with Solo5
SHA256:1c7e16e6b664b1272d30e5c1159163cf946874b6e8e406d0da064a6a4d9e103d
SHA256:e7ecc5b270bddc343138db2bc197b216efe24466f4254b1d405af0023e28f380
SHA256:624eaf982b908dc01b6a2e6036329d0bb6e529ccb5da138a04edf8698beedebb
SHA256:37898caffe90a016af7e31ba3060ba4c1c8cc654baaa4ef4c8c192a3142c4d8f
SHA256:462ba2aae8b7b3e5f831310f6d87a7a02d18fe150e852a1a42a838b706851d28
Scheduling and executing shell jobs
SHA256:7aa883774f82aca603731bb6eb80723968006124f2e3c4942094f8b222216d5c
SHA256:58e501281994e2b70aa13e9bf74e65c94875dcea6340368bc7a39502da641e3e
SHA256:e2eb80e843bb4825f0b03acc63257edf520a9dd7fad7579164aeed8611ce13e2
SHA256:626de6764cbac5555cc6af001dff90616649603eac15dcf0da12dd207cc990f3
SHA256:3f9fff0d8096d1c75ff45fb7fa64af670b2ba273cb39df5d93069fb3e49a7f2c
Web interface for builder
SHA256:2f4ee5dd6ef0917dc4e0c23555d75d0ca0c10f1d339b9f154905fe26c89ffb2b
SHA256:50844768585b8f089fa295a0d4b18e24d34651cc603449601cb25f3e7e2571d5
SHA256:5dbee30bd3f875e1984f2af7b601e492db7817a7d6e193035a2cb21a627b374e
Dissect OCaml compiled programs, and weight their content
SHA256:08d16d35322f35b5166667d472c7888b385e763df78c5cf5a29103a51f741425
SHA256:566739664378f741326044b0f870f8a7df90dae920526e018a31e1d8d0492168
SHA256:8f6947164ff0625af31123db65db16ba1f15b85490b3fd5dcce721cfcc3bad92
SHA256:2868b4090dfaa57fa1802183eafaddd57e921de0d00b7cfdd09337b98c0562fa
Graphing dependencies of opam packages
SHA256:64aaf5e13564fd5bd7d2350f9544e90e7ba93d514631a590ef1ac5a7c8cfee2d
SHA256:3658ac85d60c620a5b2b9aaf811c5c2b32a05f36c72744717e3d4a21e725b146
SHA256:95d8d94871f440550c3bd51bf5df27492903bd201aea5fcfd760c1a00be76506
SHA256:f6f346b96af46c012486c7d3ab7ac2691c468ccee67f44096cdae7ac6dc84ba2
Check opam package reproducibility
Solo5 sandboxed execution environment
Unikernels
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage
An unikernel that provides an opam-repository, and is a conex snapshot and timestamp service
A DNS secondary server that pushes certificates signed by let's encrypt when certificate signing requests without a valid certificate are in the zone (using TLSA records)
SHA256:1c4f7b648be7989b5dfe39d2cad37bff702b08e6ac8cf7e8cae207661e756e78
A primary DNS server unikernel that stores zone files in a remote git repository
SHA256:164cd16d4249f247fb86337017e682b31ec6779902f3688abe4d1f4678c1f6d7
A secondary DNS server as unikernel
SHA256:7f4a2cc8f54630896f006ff37af12c64daea427429860a99b654506a68290105
A DNS stub resolver
SHA256:cdb9531736cdec694aca88ca3e09d22b3a4d3a78a9fe04aa600826228a185316
A DNS resolver and DHCP server MirageOS unikernel
SHA256:d7cad5f0ad5c9b4a53ec735b2b30e52552d8df1763a9c7082716be7ab5489daf
The famous hello world unikernel
SHA256:4bea543e042773e4896d5fe83b16d8b7dc40fe49d45467b281a034ec413da1df
An OpenVPN-compatible unikernel for QubesOS
SHA256:56ab42349954156b5c0185dd847385001214d1a2b77f4ec990ca5cdd204ccd49
SHA256:478058a32b737df81b71444ee9830f52d0d554a958219707d07990dc2af64c57
SHA256:1b21289b1532451f6bc9d07266a9fc7f736386a7837602661a2bf6055889dfef
An OpenVPN-compatible server unikernel.
SHA256:5d758126470680ad6bc030c37ea1eb1e522460e3882bf9465970009b8bbaa26a
Mollymawk is a web user interface and REST API for albatross, and a MirageOS unikernel
SHA256:81001ee5ffc8d0e54cebbef84dd8c5d94d34f8b5f1df16ad6302e3f901af894d
An unikernel implementing an opam-repository and archive mirror
A static website example unikernel
A TLS reverse proxy unikernel
SHA256:4a8ec4db549b7538741b7417c37337765569087dc47811d9793848d6ee5a34bd
A unikernel executing a traceroute
SHA256:de25716ece3be00227ede99b02299ca289f81160e09ae1ddf7470df0c2c86f5d
A web server unikernel which content is stored in a remote git repository, TLS certificate via ALPN let's encrypt challenge
Unikernels (with metrics reported to Influx)
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage, reports metrics to influx and certificate retrieval via DNS and let's encrypt
A CalDAV unikernel (RFC 4791) using a remote git repository for data storage, reports metrics to influx
A DNS secondary server that pushes certificates signed by let's encrypt when certificate signing requests without a valid certificate are in the zone (using TLSA records), reports metrics to influx
SHA256:b3589534b5396a8dad639c909d6fb939f9801249f47fc3bd4ef7e60cf0ab7bee
A primary DNS server unikernel that stores zone files in a remote git repository which reports metrics to influx
SHA256:0a49bfecdc92caa6800981ded57389fdd8c5aad5f1efd17ea99439fe9ae19a91
A secondary DNS server as unikernel which reports metrics to influx
SHA256:801011b32c88736c2b81a7ec8489d78196677060e45f41a7a0b06b6ec2e623b7
An OpenVPN-compatible router unikernel, the configuration is stored on a block device, reports metrics to influx
SHA256:b2d73019e653f064ddc58e8e190b683681d547b9e329cbd6471dd157c4497827
The unikernel serving https://retreat.mirageos.org with metrics reported to influx
SHA256:1144ba3a9bb10206519d63ed68a99b40a8219dd5374e1d4690713c5cdbdbe8f6
A TLS reverse proxy unikernel, reports metrics to influx
SHA256:bc1d8fdb425eb2c411c84a827e58f467a805f42fd83f781f6a94f2a84c21b358
A web server unikernel which content is stored in a remote git repository, TLS certificate via ALPN let's encrypt challenge, which reports metrics to influx