Job unipi


Skip to build

Unipi - serve git repository content as HTTPS

Unipi is a MirageOS unikernel that provides the contents of a git repository via HTTP and HTTPS. It embeds (optional) let's encrypt provisioning.

A webhook is provided to update the internal state of the git repository. An example deployment is, which serves the ocaml-dns documentation (using the gh-pages branch).

Some HTTP headers are added: "content-type", which value is looked up of the file ending using magic-mime. "last-modified" and "etag" are the timestamp of the most recent commit to the git remore, respective the hash of the most recent commit. If the client sends "if-modified-since" or "if-none-match", and either matches the most recent commit, the HTTP status Not modified (304) is returned with an empty body.

Inspiration for this unikernel is taken from Canopy after discussion with the Muen developers.


Unipi is only configured via boot parameters, as follows:

To use git via ssh (only public/private key authentication is supported):

For HTTPS service with let's encrypt certificate:

For a complete list of boot parameters, execute the binary with --help as argument.

Installation from source

To install this unikernel from source, you need to have opam (>= 2.0.0) and ocaml (>= 4.07.0) installed. Also, mirage is required (>= 3.7.7). Please follow the installation instructions.

The following steps will clone this git repository and compile the unikernel:

$ git clone
$ cd unipi
$ mirage configure -t <your-favourite-target> #i.e. hvt, spt, xen
$ make depend
$ make

Installing as binary

There are not yet any binaries available, but work is underway to provide reproducible binaries.


Please open an issue if you have questions, feature requests, or comments.

Build 2021-10-13 22:33:52 -00:00

Back to readme

Build took 16min35s.

Execution result: exited 0.

Reproduced by builds

2021-10-15 22:38:48 -00:00, 2021-10-14 22:47:44 -00:00,

Build info

Comparisons with other builds

With latest build
With build 2021-10-12 22:59:41 -00:00 (output is identical binary)
With build 2021-10-08 22:43:44 -00:00 (output is identical binary)

Build artifacts

SHA256:acf667a7d370f8610d57a43259d03f8b3aca9916e75ceedbb81291a759a66861 (11.9MB)
SHA256:87a787bf66a6f8ddfa9e4cd4b15c811a580c1ee5afbf2379e984d77e1890e060 (253B)
SHA256:5444a3a2aa16734e4e7eb2c495de7520c94ca9f9208d054475cafa624e50c315 (280kB)
SHA256:988bcce87c0157b9e31c7dac750f7814f8427a487268ce92dafc549c0b979b28 (184B)
SHA256:ab4407627dd94edaa7892ffe69aadb2573736cc10525234c08bc8aabe7bad45d (17.4MB)