yomimono

MirageOS/Unikernels (but secretly something else)

• speaking now: @mindypreston (@yomimono on github)

Very Quick MirageOS Update

• we released version 3.0 in February
• tl;dr: supports KVM via the solo5 project
  • better errors
• better logs

yomimono

user@whale:~/minim$ cat Dockerfile 
FROM ocaml/opam:alpine-3.5_ocaml-4.04.0 as ocaml

FROM scratch

COPY --from=ocaml /bin/sh /
CMD ["/sh"]
user@whale:~/minim$ docker build -t minim .
Sending build context to Docker daemon  53.76kB
Step 1/4 : FROM ocaml/opam:alpine-3.5_ocaml-4.04.0 as ocaml

yomimono

Hello all,

We are happy to announce the release of version 3.1.0 of MirageOS.  Full release notes are available at https://github.com/mirage/mirage/releases/tag/3.1.0.  Thanks to hannes for handling this release, and to mato for documentation updates!

3.1.0 is compatible with the recently-released version 0.3.0 of the solo5 execution environment.  solo5 (and, in 3.1.0, therefore MirageOS) now includes experimental support for several new environments:

* the Muen Separation Kernel[1] (with `mirage configure -t muen`)
* FreeBSD vmm (with `mirage configure -t ukvm`)
* OpenBSD vmm (with `mirage configure -t ukvm`)
* ARM64 hosts[2] (with `mirage configure -t ukvm`)

yomimono

I figured out some of the wiring for this script to clear out and add firewall rules.  Change `ocamldev` to the dev VM you'll launch, and `fetchmotron` to the VM which is a client of the firewall under test if necessary (you should only need to do this in update-firewall).

In dom0:

make a file in /etc/qubes-rpc called yomimono.updateFirewall:

```

sudo bash