In other news, I got a very simple #uxn hello world running as a #solo5 unikernel, as part of the #mirageos retreat. Hello from Marrakesh :)
left some swag at the #mirageOS retreat
Hi @naturzukunft,
Du bist nicht gerade in #Marrakesch (Deine Hashtags)? Sonst bestelle Grüße an @hannes und meine #OCaml-Freunde im #MirageOs Retreat!
#introduction: I'm a software engineer working on #MirageOS (a unikernel operating system developed in #OCaml) as part of the robur.coop collective. All open source.
Besides, I'm a #tree_warden apprentice, a #lomilomi apprentice, anarchist, antifascist. I have various non-violent communication background, a PhD in computer science, and enjoy doing permaculture.
Happy to be here and connect with you :) (moved from hannesm at mastodon.social)
Meet Mollymawk, our web UI for orchestrating #MirageOS unikernels, funded by NLnet @NGIZero https://blog.robur.coop/articles/mollymawk-first-milestone.html #OCaml #unikernel
Everything is a file in #linux
But what is a file?
protocol followed by url
For torrent its protocol://url+hash
In a repo dir its git://path
....
Wait wtf
This library contains a database of MIME types that maps filename extensions into MIME types suitable for use in many Internet protocols such as HTTP or e-mail. It is generated from the mime.types file found in Unix systems, but has no dependency on a filesystem since it includes the contents of the database as an ML datastructure.
#mirageos
https://github.com/mirage/ocaml-magic-mime
til #mirageos unikernel can have muen separation kernel as a target
Is there such a #unikernel written in #rust ?
#Ocaml
https://github.com/RyanGibb/hillingar/blob/fc15f4d8f8795d726439590272b65414a4c3dbaf/src/mirage.nix#L120
cc @hannesm
Next #MirageOS retreat May 13th-20th in Marrakesh. Sign up and spread the word https://retreat.mirageos.org
Happy to see you there :) If you've and questions, don't hesitate to ask.
edit: stream over! we had some fun with opam-monorepo and ended up starting a VNC server implementation with eio .
Starting at 16:30 UTC-6 (in about 30 minutes), I'll be streaming some #OCaml software development over at https://twitch.tv/yomimono .
I plan to work on my little VNC server implementation, which is intended for use with #MirageOS unikernels. There's not much there yet, so there's plenty to do 😅
On our blog @dinosaure wrote about "Git, Carton and emails" https://blog.robur.coop/articles/2025-01-07-carton-and-cachet.html which is part of our PTT funding proposal at @NGIZero / @nlnet -- great work to see how pack files can be used for a mail archive #OCaml #MirageOS
Unikernels on the other hand don’t have system calls. They only have function calls. For an attacker this means they’ll have to know the exact memory layout of your application in order to invoke the operating system. You’ll need to know the exact 64 bit address of the function you’re invoking. Good luck guessing that address. Our own unikernel, IncludeOS, randomizes addresses at each build, so even with access to source code you still don’t know the memory layout.
#IBM research has spearheaded a new effort with their ukvm project. Ukvm is a replacement for QEMU specifically built for unikernels. Solo5 provides a framework for unikernels to boot a VM that is backed by ukvm instead of QEMU. Both IncludeOS and #MirageOS are already capable of booting using the Solo5 core and efforts are underway to port HaLVM to Solo5/ukvm. The Muen Separation Kernel also has a Solo5 port and it’ll be exciting to see if the more traditional operating systems will follow suit.
I found a syscall shim for it
https://github.com/unikraft/unikraft/tree/staging/lib/syscall_shim
#Unikernel
http://unikernel.org/blog/2017/unikernels-are-secure
For those who want to sponsor our work (#MirageOS #OCaml), and for whom a wire transfer is not the right thing, you can now sponsor us (robur.coop) via GitHub sponsors, just a click away 💵 https://github.com/sponsors/robur-coop/
If you're interested how we use money 💰, please go and read our article on funding https://blog.robur.coop/articles/finances.html (this doesn't clearly say that we use most of our money to pay us something for a living).
@catsalad @Viss @foone That's one case where unikernels like #MirageOS are really tweaking my interest.
Basically picture a flock of tiny Xen VMs working together, each of which is compiled with only the types of access it needs. Don't need a network? Then there is no network interface, no drivers. Ditto filesystem, etc.
https://mirageos.org/
Some news from our https://robur.coop cooperative :tada:, @reynir did a release of GPTar with some insights about `bsdtar`: https://blog.robur.coop/articles/gptar-update.html. One my side, I revived our SMTP stack and started some experimentations about mailing-lists: https://blog.robur.coop/articles/2024-10-29-ptt.html #OCaml #MirageOS
Pleased to announce our latest project DNSvizor https://blog.robur.coop/articles/dnsvizor01.html funded by #NGI0_entrust #nlnet @NGIZero @nlnet #MirageOS #OCaml #DNS #DHCP #unikernel
We wrote some history of runtime arguments in MirageOS - the last decade of hello world https://blog.robur.coop/articles/arguments.html #MirageOS #OCaml #unikernel https://asciinema.org/a/681922
We just published our funding structure and detailed income since the beginning of robur -- https://blog.robur.coop/articles/finances.html #cooperative #mirageos #ocaml #money #transparency -- and why we're doing what we're doing. :)