robur/homepage-data
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

updated from main (commit 559f512a14)

Browse source
This commit is contained in:
Canopy bot 2022-11-17 15:26:00 +00:00
parent bf1b02050e
commit 87fccea1fb
1 changed files with 10 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
atom
View file

@ -1,4 +1,4 @@
<feed xmlns="http://www.w3.org/2005/Atom"><link href="https://robur.coop//atom" rel="self"/><id>urn:uuid:8167ecfe-9676-11e7-8dc1-68f728e7bbbc</id><title type="text">robur</title><updated>2022-11-17T12:59:08-00:00</updated><entry><published>2021-11-16T15:06:35-00:00</published><link href="Projects/Reproducible_builds" rel="alternate"/><content type="html">&lt;p&gt;In 2021 we in &lt;a href=&quot;https://robur.coop/&quot;&gt;Robur&lt;/a&gt; have been working towards easing deployment of reproducible mirage applications. The work has been funded by the European Union under the &lt;a href=&quot;https://pointer.ngi.eu/&quot;&gt;Next Generation Internet (NGI Pointer) initiative&lt;/a&gt;. The result is &lt;a href=&quot;https://builds.robur.coop&quot;&gt;online&lt;/a&gt;.&lt;/p&gt; <feed xmlns="http://www.w3.org/2005/Atom"><link href="https://robur.coop//atom" rel="self"/><id>urn:uuid:8167ecfe-9676-11e7-8dc1-68f728e7bbbc</id><title type="text">robur</title><updated>2022-11-17T12:59:08-00:00</updated><entry><published>2021-11-16T15:06:35-00:00</published><link href="/Projects/Reproducible_builds" rel="alternate"/><content type="html">&lt;p&gt;In 2021 we in &lt;a href=&quot;https://robur.coop/&quot;&gt;Robur&lt;/a&gt; have been working towards easing deployment of reproducible mirage applications. The work has been funded by the European Union under the &lt;a href=&quot;https://pointer.ngi.eu/&quot;&gt;Next Generation Internet (NGI Pointer) initiative&lt;/a&gt;. The result is &lt;a href=&quot;https://builds.robur.coop&quot;&gt;online&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;The overall goal is to push MirageOS into production in a trustworthy way. We worked on reproducible builds for &lt;a href=&quot;https://opam.ocaml.org&quot;&gt;Opam&lt;/a&gt; packages and &lt;a href=&quot;https://mirageos.org&quot;&gt;MirageOS&lt;/a&gt; - with the infrastructure being reproducible itself. Reproducible builds are crucial for supply chain security - everyone can reproduce the exact same binary (by using the same sources and environment), without reproducible builds we would not publish binaries.&lt;/p&gt; &lt;p&gt;The overall goal is to push MirageOS into production in a trustworthy way. We worked on reproducible builds for &lt;a href=&quot;https://opam.ocaml.org&quot;&gt;Opam&lt;/a&gt; packages and &lt;a href=&quot;https://mirageos.org&quot;&gt;MirageOS&lt;/a&gt; - with the infrastructure being reproducible itself. Reproducible builds are crucial for supply chain security - everyone can reproduce the exact same binary (by using the same sources and environment), without reproducible builds we would not publish binaries.&lt;/p&gt;
&lt;p&gt;Reproducible builds are also great for fleet management: by inspecting the hash of the binary that is executed, we can figure out which versions of which libraries are in the unikernel - and suggest updates if newer builds are available or if a used library has a security flaw -- &lt;code&gt;albatross-client-local update my-unikernel&lt;/code&gt; is everything needed for an update.&lt;/p&gt; &lt;p&gt;Reproducible builds are also great for fleet management: by inspecting the hash of the binary that is executed, we can figure out which versions of which libraries are in the unikernel - and suggest updates if newer builds are available or if a used library has a security flaw -- &lt;code&gt;albatross-client-local update my-unikernel&lt;/code&gt; is everything needed for an update.&lt;/p&gt;
&lt;p&gt;Several ready-to-use MirageOS unikernels are built on a daily basis - ranging from &lt;a href=&quot;https://builds.robur.coop/job/dns-primary-git/&quot;&gt;authoritative DNS servers&lt;/a&gt; (&lt;a href=&quot;https://builds.robur.coop/job/dns-secondary/&quot;&gt;secondary&lt;/a&gt;, &lt;a href=&quot;https://builds.robur.coop/job/dns-letsencrypt-secondary/&quot;&gt;let's encrypt DNS solver&lt;/a&gt;), &lt;a href=&quot;https://builds.robur.coop/job/dnsvizor/&quot;&gt;DNS-and-DHCP service (similar to dnsmasq)&lt;/a&gt;, &lt;a href=&quot;https://builds.robur.coop/job/tlstunnel/&quot;&gt;TLS reverse proxy&lt;/a&gt;, &lt;a href=&quot;https://builds.robur.coop/job/unipi/&quot;&gt;Unipi - a web server that delivers content from a git repository&lt;/a&gt;, &lt;a href=&quot;https://builds.robur.coop/job/dns-resolver/&quot;&gt;DNS resolver&lt;/a&gt;, &lt;a href=&quot;https://builds.robur.coop/job/caldav/&quot;&gt;CalDAV server&lt;/a&gt;, and of course your own MirageOS unikernel.&lt;/p&gt; &lt;p&gt;Several ready-to-use MirageOS unikernels are built on a daily basis - ranging from &lt;a href=&quot;https://builds.robur.coop/job/dns-primary-git/&quot;&gt;authoritative DNS servers&lt;/a&gt; (&lt;a href=&quot;https://builds.robur.coop/job/dns-secondary/&quot;&gt;secondary&lt;/a&gt;, &lt;a href=&quot;https://builds.robur.coop/job/dns-letsencrypt-secondary/&quot;&gt;let's encrypt DNS solver&lt;/a&gt;), &lt;a href=&quot;https://builds.robur.coop/job/dnsvizor/&quot;&gt;DNS-and-DHCP service (similar to dnsmasq)&lt;/a&gt;, &lt;a href=&quot;https://builds.robur.coop/job/tlstunnel/&quot;&gt;TLS reverse proxy&lt;/a&gt;, &lt;a href=&quot;https://builds.robur.coop/job/unipi/&quot;&gt;Unipi - a web server that delivers content from a git repository&lt;/a&gt;, &lt;a href=&quot;https://builds.robur.coop/job/dns-resolver/&quot;&gt;DNS resolver&lt;/a&gt;, &lt;a href=&quot;https://builds.robur.coop/job/caldav/&quot;&gt;CalDAV server&lt;/a&gt;, and of course your own MirageOS unikernel.&lt;/p&gt;
@ -115,7 +115,7 @@ $ fg # back to albatross-client-local console
$ Ctrl-C # kill that process $ Ctrl-C # kill that process
&lt;/code&gt;&lt;/pre&gt; &lt;/code&gt;&lt;/pre&gt;
&lt;p&gt;That's it. Albatross has more features, such as block devices, multiple bridges (for management, private networks, ...), restart if the unikernel exited with specific exit code, assignment of a unikernel to a specific CPU. It also has remote command execution and resource limits (you can allow your friends to execute a number of unikernels with limited memory and block storage accessing only some of your bridges). There is a daemon to collect metrics and report them to Grafana (via Telegraf and Influx). MirageOS unikernels also support IPv6, you're not limited to legacy IP.&lt;/p&gt; &lt;p&gt;That's it. Albatross has more features, such as block devices, multiple bridges (for management, private networks, ...), restart if the unikernel exited with specific exit code, assignment of a unikernel to a specific CPU. It also has remote command execution and resource limits (you can allow your friends to execute a number of unikernels with limited memory and block storage accessing only some of your bridges). There is a daemon to collect metrics and report them to Grafana (via Telegraf and Influx). MirageOS unikernels also support IPv6, you're not limited to legacy IP.&lt;/p&gt;
</content><id>urn:uuid:a225bf44-9230-569f-8852-1b5d2132a749</id><title type="text">Robur Reproducible Builds</title><updated>2022-11-17T12:59:08-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="Our%20Work/Technology-Employed" rel="alternate"/><content type="html">&lt;h1&gt;MirageOS&lt;/h1&gt; </content><id>urn:uuid:a225bf44-9230-569f-8852-1b5d2132a749</id><title type="text">Robur Reproducible Builds</title><updated>2022-11-17T12:59:08-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="/Our%20Work/Technology-Employed" rel="alternate"/><content type="html">&lt;h1&gt;MirageOS&lt;/h1&gt;
&lt;p&gt;MirageOS is a software suite to build custom-tailored operating systems from (mostly open source) small individual libraries. It has been developed since 2009 at the University of Cambridge, UK and is written in the programming language &lt;a href=&quot;/Our%20Work/Technology-Employed#OCaml&quot;&gt;OCaml&lt;/a&gt;.&lt;/p&gt; &lt;p&gt;MirageOS is a software suite to build custom-tailored operating systems from (mostly open source) small individual libraries. It has been developed since 2009 at the University of Cambridge, UK and is written in the programming language &lt;a href=&quot;/Our%20Work/Technology-Employed#OCaml&quot;&gt;OCaml&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;It compiles the necessary OCaml libraries into a unikernel - a small operating system, each built for a certain purpose. For each unikernel we can pick from hundreds of permissively licensed open source libraries which implement network protocols, storage on block devices, or interfaces to network devices via the hypervisor or host operating system. As we only put into each one exactly what is needed, each unikernel is fast; instantly booting and, as there is less code base, it is easier to maintain and keep secure.&lt;/p&gt; &lt;p&gt;It compiles the necessary OCaml libraries into a unikernel - a small operating system, each built for a certain purpose. For each unikernel we can pick from hundreds of permissively licensed open source libraries which implement network protocols, storage on block devices, or interfaces to network devices via the hypervisor or host operating system. As we only put into each one exactly what is needed, each unikernel is fast; instantly booting and, as there is less code base, it is easier to maintain and keep secure.&lt;/p&gt;
&lt;p&gt;As an example to see how lines of code compare, here are the number of lines of code needed for different elements of our &lt;a href=&quot;/Our%20Work/Projects#Bitcoin%20Pinata&quot;&gt;Bitcoin Pinata&lt;/a&gt;, measured in thousands of lines of code:&lt;/p&gt; &lt;p&gt;As an example to see how lines of code compare, here are the number of lines of code needed for different elements of our &lt;a href=&quot;/Our%20Work/Projects#Bitcoin%20Pinata&quot;&gt;Bitcoin Pinata&lt;/a&gt;, measured in thousands of lines of code:&lt;/p&gt;
@ -173,7 +173,7 @@ $ Ctrl-C # kill that process
&lt;p&gt;In 2016, Facebook developed ReasonML, a dialect of OCaml which syntax is closer to JavaScript, and easier to comprehend for beginners coming from that family of programming languages. ReasonML and OCaml code can be easily combined into a single application, since they use the same compiler.&lt;/p&gt; &lt;p&gt;In 2016, Facebook developed ReasonML, a dialect of OCaml which syntax is closer to JavaScript, and easier to comprehend for beginners coming from that family of programming languages. ReasonML and OCaml code can be easily combined into a single application, since they use the same compiler.&lt;/p&gt;
&lt;h3&gt;Further Information&lt;/h3&gt; &lt;h3&gt;Further Information&lt;/h3&gt;
&lt;p&gt;There is active work on OCaml language development and its runtime system. More literature on why OCaml is a good choice has been written by Yaron Minsky (Jane Street) in the article &lt;a href=&quot;https://queue.acm.org/detail.cfm?id=2038036&quot;&gt;OCaml for the masses&lt;/a&gt;, and more recently by the crypto-ledger &lt;a href=&quot;https://tezos.com/static/position_paper-841a0a56b573afb28da16f6650152fb4.pdf&quot;&gt;Tezos&lt;/a&gt;.&lt;/p&gt; &lt;p&gt;There is active work on OCaml language development and its runtime system. More literature on why OCaml is a good choice has been written by Yaron Minsky (Jane Street) in the article &lt;a href=&quot;https://queue.acm.org/detail.cfm?id=2038036&quot;&gt;OCaml for the masses&lt;/a&gt;, and more recently by the crypto-ledger &lt;a href=&quot;https://tezos.com/static/position_paper-841a0a56b573afb28da16f6650152fb4.pdf&quot;&gt;Tezos&lt;/a&gt;.&lt;/p&gt;
</content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Technology Employed</title><updated>2019-10-31T12:06:40-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="Our%20Work/Services" rel="alternate"/><content type="html">&lt;p&gt;We can work with you to design, develop and audit software and infrastructure to assist you in enhancing your technical security and reliability. Whilst we are not a service provider, and so can not offer to host applications, we can assist you in deploying MirageOS and OCaml services.&lt;/p&gt; </content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Technology Employed</title><updated>2019-10-31T12:06:40-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="/Our%20Work/Services" rel="alternate"/><content type="html">&lt;p&gt;We can work with you to design, develop and audit software and infrastructure to assist you in enhancing your technical security and reliability. Whilst we are not a service provider, and so can not offer to host applications, we can assist you in deploying MirageOS and OCaml services.&lt;/p&gt;
&lt;h3&gt;Design&lt;/h3&gt; &lt;h3&gt;Design&lt;/h3&gt;
&lt;p&gt;Working with you to understand the needs of your organization, and how your software infrastructure is currently setup and used, we can assist you in working out any improvements you might require.&lt;/p&gt; &lt;p&gt;Working with you to understand the needs of your organization, and how your software infrastructure is currently setup and used, we can assist you in working out any improvements you might require.&lt;/p&gt;
&lt;p&gt;We can consult on design for specific products to ensure you plan the best solution for a single application, or take a more holistic view of your infrastructure and protocols to improve speed, security and ease of use.&lt;/p&gt; &lt;p&gt;We can consult on design for specific products to ensure you plan the best solution for a single application, or take a more holistic view of your infrastructure and protocols to improve speed, security and ease of use.&lt;/p&gt;
@ -186,7 +186,7 @@ $ Ctrl-C # kill that process
&lt;p&gt;We can provide code auditing services, particularly focusing on security and reducing code base. We have team members who have thorough experience working with OCaml, C (embedded, kernel and userspace), x86 assembly, Scala, Java, Android, Haskell, PHP and Python.&lt;/p&gt; &lt;p&gt;We can provide code auditing services, particularly focusing on security and reducing code base. We have team members who have thorough experience working with OCaml, C (embedded, kernel and userspace), x86 assembly, Scala, Java, Android, Haskell, PHP and Python.&lt;/p&gt;
&lt;p&gt;Our audits can help ensure your environment is secure whilst also working with you to reduce attack service and increase speed. While we generally prefer “white-box” audits because we believe they yield the best results for the time invested, we also have experience with “black-box” penetration testing.&lt;/p&gt; &lt;p&gt;Our audits can help ensure your environment is secure whilst also working with you to reduce attack service and increase speed. While we generally prefer “white-box” audits because we believe they yield the best results for the time invested, we also have experience with “black-box” penetration testing.&lt;/p&gt;
&lt;p&gt;Please &lt;a href=&quot;/Contact&quot;&gt;contact us&lt;/a&gt; if you are interested in any of the above and we can discuss how we can assist you in developing a more secure architecture and for your organization.&lt;/p&gt; &lt;p&gt;Please &lt;a href=&quot;/Contact&quot;&gt;contact us&lt;/a&gt; if you are interested in any of the above and we can discuss how we can assist you in developing a more secure architecture and for your organization.&lt;/p&gt;
</content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Services</title><updated>2019-09-10T22:09:34-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="Our%20Work/Publications-and-Talks" rel="alternate"/><content type="html">&lt;p&gt;We regularly give talks and write publications about our work, OCaml and MirageOS and other aspects of coding, security and computer science that we have expertise in. Below are some examples of these, if you are interested in having a Robur member speak at your event please &lt;a href=&quot;/Contact&quot;&gt;reach out&lt;/a&gt; to us.&lt;/p&gt; </content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Services</title><updated>2019-09-10T22:09:34-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="/Our%20Work/Publications-and-Talks" rel="alternate"/><content type="html">&lt;p&gt;We regularly give talks and write publications about our work, OCaml and MirageOS and other aspects of coding, security and computer science that we have expertise in. Below are some examples of these, if you are interested in having a Robur member speak at your event please &lt;a href=&quot;/Contact&quot;&gt;reach out&lt;/a&gt; to us.&lt;/p&gt;
&lt;h1&gt;Hannes Mehnert&lt;/h1&gt; &lt;h1&gt;Hannes Mehnert&lt;/h1&gt;
&lt;h3&gt;Talks:&lt;/h3&gt; &lt;h3&gt;Talks:&lt;/h3&gt;
&lt;p&gt;Chaos Communication Congress 2019 (36c3) - &lt;a href=&quot;https://media.ccc.de/v/36c3-11172-leaving_legacy_behind&quot;&gt;Leaving Legacy Behind&lt;/a&gt;&lt;br /&gt; &lt;p&gt;Chaos Communication Congress 2019 (36c3) - &lt;a href=&quot;https://media.ccc.de/v/36c3-11172-leaving_legacy_behind&quot;&gt;Leaving Legacy Behind&lt;/a&gt;&lt;br /&gt;
@ -231,7 +231,7 @@ Talks about the case study of building an API-first architecture at Etsy. She ta
According to Wikipedia a shell script is a computer program designed to be run by a command line interpreter. Typical operations performed by shell scripts include file manipulation, program execution, and printing text. Sounds complicated? In this talk Stefanie Schirmer shows how to build a shell in ten minutes.&lt;/p&gt; According to Wikipedia a shell script is a computer program designed to be run by a command line interpreter. Typical operations performed by shell scripts include file manipulation, program execution, and printing text. Sounds complicated? In this talk Stefanie Schirmer shows how to build a shell in ten minutes.&lt;/p&gt;
&lt;p&gt;JSConf EU 2015 - &lt;a href=&quot;https://www.youtube.com/watch?v=6Qx5ZAbfqjo&quot;&gt;Functional programming and curry cooking in JS&lt;/a&gt;&lt;br /&gt; &lt;p&gt;JSConf EU 2015 - &lt;a href=&quot;https://www.youtube.com/watch?v=6Qx5ZAbfqjo&quot;&gt;Functional programming and curry cooking in JS&lt;/a&gt;&lt;br /&gt;
This talk explores functional programming concepts, which help us create powerful abstractions to master complex problems and create more simple and elegant programs. JavaScript allows us to ease into the functional programming style, letting us focus just on the concepts, without the distraction of learning a specific functional programming language. To make the dry functional programming concepts more digestible, we use cooking as an analogy. And since the logician Haskell Curry invented functional programming, we combine our journey in JavaScript with examples and recipes for tasty curry dishes.&lt;/p&gt; This talk explores functional programming concepts, which help us create powerful abstractions to master complex problems and create more simple and elegant programs. JavaScript allows us to ease into the functional programming style, letting us focus just on the concepts, without the distraction of learning a specific functional programming language. To make the dry functional programming concepts more digestible, we use cooking as an analogy. And since the logician Haskell Curry invented functional programming, we combine our journey in JavaScript with examples and recipes for tasty curry dishes.&lt;/p&gt;
</content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Publications and Talks</title><updated>2020-01-07T11:22:12-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="Our%20Work/Projects" rel="alternate"/><content type="html">&lt;h1&gt;Robur Reproducible Builds&lt;/h1&gt; </content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Publications and Talks</title><updated>2020-01-07T11:22:12-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="/Our%20Work/Projects" rel="alternate"/><content type="html">&lt;h1&gt;Robur Reproducible Builds&lt;/h1&gt;
&lt;p&gt;In 2021 we in &lt;a href=&quot;https://robur.coop/&quot;&gt;Robur&lt;/a&gt; have been working towards easing deployment of reproducible mirage applications. The work has been funded by the Eurepean Union under the &lt;a href=&quot;https://pointer.ngi.eu/&quot;&gt;Next Generation Internet (NGI Pointer) initiative&lt;/a&gt;. The result is &lt;a href=&quot;https://builds.robur.coop&quot;&gt;online&lt;/a&gt;.&lt;/p&gt; &lt;p&gt;In 2021 we in &lt;a href=&quot;https://robur.coop/&quot;&gt;Robur&lt;/a&gt; have been working towards easing deployment of reproducible mirage applications. The work has been funded by the Eurepean Union under the &lt;a href=&quot;https://pointer.ngi.eu/&quot;&gt;Next Generation Internet (NGI Pointer) initiative&lt;/a&gt;. The result is &lt;a href=&quot;https://builds.robur.coop&quot;&gt;online&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;The overall goal is to push MirageOS into production in a trustworthy way. We worked on reproducible builds for &lt;a href=&quot;https://opam.ocaml.org&quot;&gt;Opam&lt;/a&gt; packages and &lt;a href=&quot;https://mirageos.org&quot;&gt;MirageOS&lt;/a&gt; - with the infrastructure being reproducible itself. Reproducible builds are crucial for supply chain security - everyone can reproduce the exact same binary (by using the same sources and environment), without reproducible builds we would not publish binaries.&lt;/p&gt; &lt;p&gt;The overall goal is to push MirageOS into production in a trustworthy way. We worked on reproducible builds for &lt;a href=&quot;https://opam.ocaml.org&quot;&gt;Opam&lt;/a&gt; packages and &lt;a href=&quot;https://mirageos.org&quot;&gt;MirageOS&lt;/a&gt; - with the infrastructure being reproducible itself. Reproducible builds are crucial for supply chain security - everyone can reproduce the exact same binary (by using the same sources and environment), without reproducible builds we would not publish binaries.&lt;/p&gt;
&lt;p&gt;Reproducible builds are also great for fleet management: by inspecting the hash of the binary that is executed, we can figure out which versions of which libraries are in the unikernel - and suggest updates if newer builds are available or if a used library has a security flaw -- &lt;code&gt;albatross-client-local update my-unikernel&lt;/code&gt; is everything needed for an update.&lt;/p&gt; &lt;p&gt;Reproducible builds are also great for fleet management: by inspecting the hash of the binary that is executed, we can figure out which versions of which libraries are in the unikernel - and suggest updates if newer builds are available or if a used library has a security flaw -- &lt;code&gt;albatross-client-local update my-unikernel&lt;/code&gt; is everything needed for an update.&lt;/p&gt;
@ -333,7 +333,7 @@ This talk explores functional programming concepts, which help us create powerfu
&lt;p&gt;Compared to existing technologies, such as traditional virtualization using KVM/QEMU, VMWare, crosvm and so on, Solo5 is several orders of magnitude smaller (around 10,000 lines of C) and is tailored to running unikernels in a legacy-free and minimalist fashion.&lt;/p&gt; &lt;p&gt;Compared to existing technologies, such as traditional virtualization using KVM/QEMU, VMWare, crosvm and so on, Solo5 is several orders of magnitude smaller (around 10,000 lines of C) and is tailored to running unikernels in a legacy-free and minimalist fashion.&lt;/p&gt;
&lt;p&gt;Our goal for Solo5 is to enable the use of unikernel technology to build hybrid, disaggregated systems where the designer/developer can choose which components are untrusted or security-sensitive and &amp;quot;split them out&amp;quot; from the monolithic host system. At the same time the developer can continue to use existing, familiar, technology as the base or &amp;quot;control plane&amp;quot; for the overall system design/deployment, or mix and match traditional applications and unikernels as appropriate.&lt;/p&gt; &lt;p&gt;Our goal for Solo5 is to enable the use of unikernel technology to build hybrid, disaggregated systems where the designer/developer can choose which components are untrusted or security-sensitive and &amp;quot;split them out&amp;quot; from the monolithic host system. At the same time the developer can continue to use existing, familiar, technology as the base or &amp;quot;control plane&amp;quot; for the overall system design/deployment, or mix and match traditional applications and unikernels as appropriate.&lt;/p&gt;
&lt;p&gt;The software is available &lt;a href=&quot;https://github.com/solo5&quot;&gt;on Github&lt;/a&gt;.&lt;/p&gt; &lt;p&gt;The software is available &lt;a href=&quot;https://github.com/solo5&quot;&gt;on Github&lt;/a&gt;.&lt;/p&gt;
</content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Projects</title><updated>2022-03-01T22:03:39-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="Our%20Work/Our-Approach" rel="alternate"/><content type="html">&lt;p&gt;We are a nonprofit open source software cooperative whose mission is to develop robust and secure digital infrastructure. We strive to enable more people to reliably run their own infrastructure by producing correct, surprise-free software to be deployed in real environments. Our software aims to meet the needs of anyone working in an environment where security and dependability is vital.&lt;/p&gt; </content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Projects</title><updated>2022-03-01T22:03:39-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="/Our%20Work/Our-Approach" rel="alternate"/><content type="html">&lt;p&gt;We are a nonprofit open source software cooperative whose mission is to develop robust and secure digital infrastructure. We strive to enable more people to reliably run their own infrastructure by producing correct, surprise-free software to be deployed in real environments. Our software aims to meet the needs of anyone working in an environment where security and dependability is vital.&lt;/p&gt;
&lt;p&gt;We write all our code in a high-level memory-safe (and more secure) programming language called &lt;a href=&quot;/Our%20Work/Technology-Employed#OCaml&quot;&gt;OCaml&lt;/a&gt;. In addition each piece of software leverages &lt;a href=&quot;/Our%20Work/Technology-Employed#MirageOS&quot;&gt;MirageOS&lt;/a&gt; (a minimal operating system) to produce bespoke applications tailored to only contain their required functionality. Each service is executed on virtual machines with a size usually around 1-10 MB, much smaller than a UNIX / Linux system, and it boots within milliseconds.&lt;/p&gt; &lt;p&gt;We write all our code in a high-level memory-safe (and more secure) programming language called &lt;a href=&quot;/Our%20Work/Technology-Employed#OCaml&quot;&gt;OCaml&lt;/a&gt;. In addition each piece of software leverages &lt;a href=&quot;/Our%20Work/Technology-Employed#MirageOS&quot;&gt;MirageOS&lt;/a&gt; (a minimal operating system) to produce bespoke applications tailored to only contain their required functionality. Each service is executed on virtual machines with a size usually around 1-10 MB, much smaller than a UNIX / Linux system, and it boots within milliseconds.&lt;/p&gt;
&lt;p&gt;Where other approaches try to patch general purpose operating systems by adding more layers, we strive to build a secure system from the ground up.&lt;/p&gt; &lt;p&gt;Where other approaches try to patch general purpose operating systems by adding more layers, we strive to build a secure system from the ground up.&lt;/p&gt;
&lt;p&gt;Our approach means our software has a number of security and ease-of-use benefits:&lt;/p&gt; &lt;p&gt;Our approach means our software has a number of security and ease-of-use benefits:&lt;/p&gt;
@ -357,7 +357,7 @@ This talk explores functional programming concepts, which help us create powerfu
&lt;p&gt;If you are interested in seeing how we can assist you in improving your organization's digital infrastructure please see our &lt;a href=&quot;/Our%20Work/Services&quot;&gt;services offered&lt;/a&gt;.&lt;/p&gt; &lt;p&gt;If you are interested in seeing how we can assist you in improving your organization's digital infrastructure please see our &lt;a href=&quot;/Our%20Work/Services&quot;&gt;services offered&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;If you like our approach to open source software and want to support our work please consider a &lt;a href=&quot;/Donate&quot;&gt;donation&lt;/a&gt;.&lt;/p&gt; &lt;p&gt;If you like our approach to open source software and want to support our work please consider a &lt;a href=&quot;/Donate&quot;&gt;donation&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;Or if you are a funder of open source projects focused on security and reliability and like our approach we would love to hear from &lt;a href=&quot;/Contact&quot;&gt;you&lt;/a&gt;.&lt;/p&gt; &lt;p&gt;Or if you are a funder of open source projects focused on security and reliability and like our approach we would love to hear from &lt;a href=&quot;/Contact&quot;&gt;you&lt;/a&gt;.&lt;/p&gt;
</content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Our Approach</title><updated>2019-09-10T22:16:40-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="About%20Us/Team" rel="alternate"/><content type="html">&lt;p&gt;Robur is a software development cooperative specializing in robust and secure digital infrastructure written in OCaml.&lt;/p&gt; </content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Our Approach</title><updated>2019-09-10T22:16:40-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="/About%20Us/Team" rel="alternate"/><content type="html">&lt;p&gt;Robur is a software development cooperative specializing in robust and secure digital infrastructure written in OCaml.&lt;/p&gt;
&lt;h2&gt;Current members&lt;/h2&gt; &lt;h2&gt;Current members&lt;/h2&gt;
&lt;h3&gt;Hannes&lt;/h3&gt; &lt;h3&gt;Hannes&lt;/h3&gt;
&lt;p&gt;Hannes enjoys living in Berlin, Germany. Until end of 2017, he used to be a research associate at the University of Cambridge in the rems project. He enjoys to write code, and also traveling and repairing his recumbent bicycle, and being a barista.&lt;/p&gt; &lt;p&gt;Hannes enjoys living in Berlin, Germany. Until end of 2017, he used to be a research associate at the University of Cambridge in the rems project. He enjoys to write code, and also traveling and repairing his recumbent bicycle, and being a barista.&lt;/p&gt;
@ -393,10 +393,10 @@ He is still heavily involved as a developer and system administrator in &lt;a hr
&lt;p&gt;Joe has a background in penetration testing, protocol design, applied cryptography, and architectural IT security system design for customers, especially in the banking, insurance, and pension fund sectors. He has been consulting on BPAY integration in Australia, and conducting web and network security assessments for customers throughout the world.&lt;/p&gt; &lt;p&gt;Joe has a background in penetration testing, protocol design, applied cryptography, and architectural IT security system design for customers, especially in the banking, insurance, and pension fund sectors. He has been consulting on BPAY integration in Australia, and conducting web and network security assessments for customers throughout the world.&lt;/p&gt;
&lt;p&gt;Lately he has spent the last couple of years writing OCaml and has been working with IT security, dev-ops and automated deployment for customers specializing in Enterprise Resource Planning, Internet of Things, and medical technology.&lt;/p&gt; &lt;p&gt;Lately he has spent the last couple of years writing OCaml and has been working with IT security, dev-ops and automated deployment for customers specializing in Enterprise Resource Planning, Internet of Things, and medical technology.&lt;/p&gt;
&lt;p&gt;In his spare time he dabbles in research into similar topics and serialization frameworks, in addition to the enjoyable pursuit of tabletop roleplaying and social interactions in smoky pubs - two disciplines that he excels in, but that have somehow not been of particular interest to paying customers (yet).&lt;/p&gt; &lt;p&gt;In his spare time he dabbles in research into similar topics and serialization frameworks, in addition to the enjoyable pursuit of tabletop roleplaying and social interactions in smoky pubs - two disciplines that he excels in, but that have somehow not been of particular interest to paying customers (yet).&lt;/p&gt;
</content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Team</title><updated>2022-11-10T16:46:33-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="About%20Us/Retreats" rel="alternate"/><content type="html">&lt;p&gt;Twice a year the Robur team meet with others from the OCaml and MirageOS community at a week long hack retreat in Marrakesh, Morocco.&lt;/p&gt; </content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Team</title><updated>2022-11-10T16:46:33-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="/About%20Us/Retreats" rel="alternate"/><content type="html">&lt;p&gt;Twice a year the Robur team meet with others from the OCaml and MirageOS community at a week long hack retreat in Marrakesh, Morocco.&lt;/p&gt;
&lt;p&gt;We use these times to discuss and learn about new developments in the MirageOS ecosystem and meet in person about our Robur projects. And of course we have fun whilst we are at it!&lt;/p&gt; &lt;p&gt;We use these times to discuss and learn about new developments in the MirageOS ecosystem and meet in person about our Robur projects. And of course we have fun whilst we are at it!&lt;/p&gt;
&lt;p&gt;The retreats are held in a hostel in the center of the city, which we wholly rent out for the period, with food provided. If you are interested in participating in the next retreat please &lt;a href=&quot;http://retreat.mirage.io/&quot;&gt;see the MirageOS site&lt;/a&gt; for more details and sign-up method.&lt;/p&gt; &lt;p&gt;The retreats are held in a hostel in the center of the city, which we wholly rent out for the period, with food provided. If you are interested in participating in the next retreat please &lt;a href=&quot;http://retreat.mirage.io/&quot;&gt;see the MirageOS site&lt;/a&gt; for more details and sign-up method.&lt;/p&gt;
</content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Retreats</title><updated>2019-09-10T21:40:09-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="About%20Us/Network" rel="alternate"/><content type="html">&lt;h1&gt;Collaborations&lt;/h1&gt; </content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Retreats</title><updated>2019-09-10T21:40:09-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="/About%20Us/Network" rel="alternate"/><content type="html">&lt;h1&gt;Collaborations&lt;/h1&gt;
&lt;p&gt;&lt;a href=&quot;https://techcultivation.org&quot;&gt;The Center for the Cultivation of Technology&lt;/a&gt;&lt;br /&gt; &lt;p&gt;&lt;a href=&quot;https://techcultivation.org&quot;&gt;The Center for the Cultivation of Technology&lt;/a&gt;&lt;br /&gt;
The Center for the Cultivation of Technology is a &amp;quot;back-end provider&amp;quot; for the open source community. They work with Robur to assist us in our financial processes and administration.&lt;/p&gt; The Center for the Cultivation of Technology is a &amp;quot;back-end provider&amp;quot; for the open source community. They work with Robur to assist us in our financial processes and administration.&lt;/p&gt;
&lt;p&gt;&lt;a href=&quot;https://leastauthority.com&quot;&gt;Least Authority&lt;/a&gt; &lt;p&gt;&lt;a href=&quot;https://leastauthority.com&quot;&gt;Least Authority&lt;/a&gt;
@ -413,7 +413,7 @@ Is a for-profit distributed engineering team based in Paris and Cambridge that m
In 2019 NLnet Foundation granted Robur funding to develop a secure DNS resolver in OCaml. NLnet is a Dutch foundation that receives money from donations, legacies and collaborative funding and sub-granting mechanisms after starting with substantial capital established by pioneers of the European internet in 1997. It grants money to organizations and people that contribute to an open information society and secure internet projects.&lt;/p&gt; In 2019 NLnet Foundation granted Robur funding to develop a secure DNS resolver in OCaml. NLnet is a Dutch foundation that receives money from donations, legacies and collaborative funding and sub-granting mechanisms after starting with substantial capital established by pioneers of the European internet in 1997. It grants money to organizations and people that contribute to an open information society and secure internet projects.&lt;/p&gt;
&lt;p&gt;&lt;a href=&quot;https://prototypefund.de/en&quot;&gt;The Prototype Fund&lt;/a&gt;&lt;br /&gt; &lt;p&gt;&lt;a href=&quot;https://prototypefund.de/en&quot;&gt;The Prototype Fund&lt;/a&gt;&lt;br /&gt;
The Prototype Fund has awarded Robur several grants for various projects such as the CalDAV Server, the Mirage Firewall and our OCaml implementation of an OpenVPN client. The Prototype Fund is a funding program of the Federal Ministry of Education and Research (BMBF) that is supported and evaluated by the Open Knowledge Foundation Germany. It funds individuals and small organizations to develop open source applications designed for the common good.&lt;/p&gt; The Prototype Fund has awarded Robur several grants for various projects such as the CalDAV Server, the Mirage Firewall and our OCaml implementation of an OpenVPN client. The Prototype Fund is a funding program of the Federal Ministry of Education and Research (BMBF) that is supported and evaluated by the Open Knowledge Foundation Germany. It funds individuals and small organizations to develop open source applications designed for the common good.&lt;/p&gt;
</content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Network</title><updated>2020-02-18T17:34:49-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="About%20Us/Funding" rel="alternate"/><content type="html">&lt;p&gt;At Robur our focus is on the software we develop. We are passionate about our work and believe in the importance of creating and maintaining secure digital infrastructure.&lt;/p&gt; </content><id>urn:uuid:a4887de7-8629-5578-836f-d31b51fe75aa</id><title type="text">Network</title><updated>2020-02-18T17:34:49-00:00</updated><author><name>canopy</name></author></entry><entry><published>2019-09-10T19:40:14-00:00</published><link href="/About%20Us/Funding" rel="alternate"/><content type="html">&lt;p&gt;At Robur our focus is on the software we develop. We are passionate about our work and believe in the importance of creating and maintaining secure digital infrastructure.&lt;/p&gt;
&lt;p&gt;We get our funding through three avenues: grants for particular open-source projects, contracts for specific work including development and auditing, and public donations that help allow us to continue the work that isn't otherwise funded.&lt;/p&gt; &lt;p&gt;We get our funding through three avenues: grants for particular open-source projects, contracts for specific work including development and auditing, and public donations that help allow us to continue the work that isn't otherwise funded.&lt;/p&gt;
&lt;p&gt;We spend most of our funding on salaries, ensuring Robur keeps developing the software we think is important. We do not spend money on fancy parties or first class business trips. Our general breakdown of spending per year is:&lt;/p&gt; &lt;p&gt;We spend most of our funding on salaries, ensuring Robur keeps developing the software we think is important. We do not spend money on fancy parties or first class business trips. Our general breakdown of spending per year is:&lt;/p&gt;
&lt;ul&gt; &lt;ul&gt;