hn.today

Uniker.nl – Unikernels in OCaml

discuss.ocaml.org8 points0 comments
Screenshot of Uniker.nl – Unikernels in OCaml

Uniker.nl presents a new OCaml-5-centred unikernel ecosystem that emphasizes both development and deployment. The workflow introduces two core tools: unic, which infers an OCaml project's dependencies and computes which C stubs need cross-compilation (allowing reuse of pure OCaml libraries compiled with the host compiler and avoiding a dune-only constraint), and mfetch, which vendors sources from tarballs, git or local paths, generates locked manifests, and aids reproducible builds. A short example shows unic selecting digestif and mkernel for cross-compilation while leaving fmt untouched. The stack targets Solo5-based unikernels and supports static executables; ancillary tools include artefact analysers and integration with orb for reproducibility.

The ecosystem provides OCaml-5 libraries built for an effects-driven, direct-style approach: Miou (scheduler), mkernel (Solo5 I/O), mnet (TCP/IP), mhttp, msendmail, mfat, vifu and others, refactored for memory efficiency and CVE avoidance. On deployment, Albatross (service launcher) and Aussi (OCI runtime for Solo5) integrate with builds.robur.coop for supply-chain tracing and monitoring via InfluxDB/Telegraf/Grafana. Deployed services already include websites, DNS, VPN, time servers, CalDAV, mailing lists and TLS proxies. The project is cooperative-funded (NLnet, Ahrefs, Tarides, OCamlPro, OCaml Foundation) and diverges from MirageOS design choices - most notably replacing cstruct/bigarray buffers with bytes/string plus bstr/slice to improve throughput.

Read on discuss.ocaml.org0 comments on Hacker News

Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.

More in Programming

The daily digest

Today's best Hacker News stories, summarized and screenshotted, one email a day.