Job dns-letsencrypt


Skip to build

Let's encrypt DNS provisioning

This is a MirageOS unikernel which provisions TLS certificates using let's encrypt. It looks for certificate signing requests, stored as TLSA records in DNS zones, and uses the let's encrypt ACME DNS challenge to retrieve certificates. The certificate chain is stored in DNS as TLSA record as well. This unikernel also ensures that certificates are valid for at least two weeks.

This can be used with dns-primary-git.

Installation from source

To install this unikernel from source, you need to have opam (>= 2.0.0) and ocaml (>= 4.08.0) installed. Also, mirage is required (>= 3.10.6). Please follow the installation instructions.

The following steps will clone this git repository and compile the unikernel:

$ git clone
$ mirage configure -t <your-favourite-target>
$ make depend
$ make

Installing as binary

Binaries are available at Reproducible OPAM builds, see Deploying binary MirageOS unikernels and Reproducible MirageOS unikernel builds for details.


Please open an issue if you have questions, feature requests, or comments.

Build 2021-11-24 12:30:43Z

Back to readme

Built on platform freebsd-12

Build took 9min32s.

Execution result: exited 0.

Build info

Build artifacts

SHA256:e3edebeb55165ac81e8e6a4e806fcb18cf6a363caa473a5a1672b16afcd135e9 (8.03MB)
SHA256:ec01f8c2c39e688a862e189e1395f191f71dc349e0a6c0d062c31476b9364b0d (390B)
SHA256:2bf3118c267c23745137776c696ec26c0342a4662bbf8a433c1a91a3cab2e46c (11.8MB)
SHA256:5bd24b86df8b58159a3a011aed32c0c878d5a266dc81a7cccaa5da10ac97342b (233kB)
SHA256:dae2debc45b633a71e4fad4e919c25a0fbba99723c902869d4ce7592f4133748 (195B)

Reproduced by 2 builds

Comparisons with other builds on the same platform