The Linux guest that runs in this page contains software under the GNU General Public License version 2 (the Linux kernel and BusyBox) and version 3 with the GCC Runtime Library Exception (libgcc, libstdc++). For this guest image version, the complete corresponding source code of the Linux kernel and BusyBox is available at no charge from our public repository github.com/xuwaters/xvm-sources at commit
29f297441da1023d6f96e192d42aa1cf4f07b5b4: the upstream source at the exact tag this image was built from, and Alpine's build files with every patch. For libgcc and libstdc++ this page lists Alpine's build files with every patch (alpine/gcc/) and the upstream archive with its SHA-256. Every patch we applied, the kernel configuration, and the scripts used to build and assemble the binaries, with the digests of the public container images they run in (tools.txt), are in this directory. The source remains available for as long as we serve this version and for at least three years afterwards. This page lists each source archive the build used with its SHA-256 and the tag and commit in that repository it corresponds to;index.jsonhas the same in machine-readable form.
Machine-readable: index.json; checksums of this directory: SHA256SUMS; build-only tools (not distributed): tools.txt; the corresponding source: https://github.com/xuwaters/xvm-sources/tree/29f297441da1023d6f96e192d42aa1cf4f07b5b4.
Licence: GPL-2.0-only WITH Linux-syscall-note. In the image: kernel Image (manifest object `kernel`; resident in the snapshot RAM).
Corresponding source: github.com/xuwaters/linux (tag v6.18.56, commit 17ad2612c11a748b50d32eefc681344b26fea946, the submodule linux of xvm-sources).
libkrunfw patches 0001/0002 (authorship kept), the configuration `config` (= libkrunfw's riscv64 config + recipe/xvm.config, olddefconfig), built by recipe/kbuild.sh in recipe/Dockerfile's image (recipe/builders.lock pins it).
4633bbda2ab95eaf2a7af4041236451d6759c72e6946265531af4b3aacefbf89 (in xvm-sources: tag v6.18.56, commit 17ad2612c11a748b50d32eefc681344b26fea946)Licence: ( Apache-2.0 OR MIT ) AND MPL-2.0. In the image: /usr/lib/libada.so.3 (the WHATWG URL parser of node:url and URL).
75565e2d4cc8e3ce2dd7927f5c75cc5ebbd3b620468cb0226501dae68d8fe1cd (permissive licence: no source obligation; the archive is listed, not hosted)Licence: MIT. In the image: /usr/lib/libbrotlicommon.so.1, libbrotlidec.so.1, libbrotlienc.so.1 (node:zlib).
98d35d11a78dc453aebb7d10c3748f3f73ff78c8267c0dc697b8631f67bf7e8f (permissive licence: no source obligation; the archive is listed, not hosted)Licence: GPL-2.0-only. In the image: /bin/busybox and its applet links.
Corresponding source: github.com/xuwaters/busybox (tag 1_37_0, commit be7d1b7b1701d225379bc1665487ed0871b592a5, the submodule busybox of xvm-sources).
3311dff32e746499f4df0d5df04d7eb396382d7e108bb9250e7b519b837043a4 (in xvm-sources: tag 1_37_0, commit be7d1b7b1701d225379bc1665487ed0871b592a5)Licence: MIT. In the image: /usr/lib/libcares.so.2 (node:dns).
9364b70a12eb59a06830fb488d9357f90100dff0d98b23ea3593a183d43e6f2f (permissive licence: no source obligation; the archive is listed, not hosted)Licence: GPL-2.0-or-later AND LGPL-2.1-or-later, GPL-3.0-or-later WITH GCC-exception-3.1. In the image: /usr/lib/libstdc++.so.6 and /usr/lib/libgcc_s.so.1 (Alpine's libstdc++ and libgcc: the GCC runtime node links, GPL-3.0-or-later WITH GCC-exception-3.1 upstream).
libstdc++ and libgcc are GCC's runtime libraries, GPL-3.0-or-later with the GCC Runtime Library Exception 3.1 (gcc/COPYING3, gcc/COPYING.RUNTIME; Alpine labels the packages GPL-2.0-or-later AND LGPL-2.1-or-later). Alpine's build files and patches are in alpine/gcc/; the upstream archive is listed with its SHA-256.
438fd996826b0c82485a29da03a72d71d6e3541a83ec702df4271f6fe025d24e (permissive licence: no source obligation; the archive is listed, not hosted)Licence: ICU. In the image: /usr/lib/libicuuc.so.78, libicui18n.so.78, libicudata.so.78 and /usr/share/icu (icu-data-en: English locale data only, R3); libicuio and the ICU tools are not in the image (nodejs/recipe/drop.txt).
6217f58ca39b23127605cfc6c7e0d3475fe4b0d63157011383d716cb41617886 (permissive licence: no source obligation; the archive is listed, not hosted)e7b652244f27194e0ea46a0d21cfc714ee8a818e1fd82d51a93bc91516fdcf65 (permissive licence: no source obligation; the archive is listed, not hosted)bb35da6c14df2da52e0cda7739d0a4418464859ae5c64b6565e96a098b033d54 (permissive licence: no source obligation; the archive is listed, not hosted)0f7b03e88759b04b0d8e3b27efa5ccd6d01d2f7a03348e0de9317004ac167f51 (permissive licence: no source obligation; the archive is listed, not hosted)Licence: MIT. In the image: /lib/ld-musl-riscv64.so.1 (libc).
d585fd3b613c66151fc3249e8ed44f77020cb5e6c1e635a616d3f9f82460512a (permissive licence: no source obligation; the archive is listed, not hosted)Licence: MIT. In the image: /usr/lib/libnghttp2.so.14 (node:http2).
e05cb1388eaca3830aded4ccf20044b6e1ac1a61411dcca11b0437c4285c8bc2 (permissive licence: no source obligation; the archive is listed, not hosted)Licence: MIT. In the image: /usr/bin/node (Node.js with V8, libuv, llhttp and the other dependencies its LICENSE lists, built in; the rest are the shared libraries below), less nothing: Alpine's package is the binary alone.
Alpine's build (alpine/nodejs/), installed without its install scripts; its closure trimmed by nodejs/recipe/drop.txt and /home/package.json added (mkroot.sh MODE=javascript).
b62cd76de0a0a28dd9ff88580c92344bdeb008f21c1d7479c5d8659cd96ef4e2 (permissive licence: no source obligation; the archive is listed, not hosted)Licence: Apache-2.0. In the image: /usr/lib/libcrypto.so.3, /usr/lib/libssl.so.3 (node:crypto); the engines, providers and /etc/ssl are not in the image (nodejs/recipe/drop.txt).
603f5602e2eef00d77fbd429d34dcd5822bb301757a1bc9cdb24c670f1eb859a (permissive licence: no source obligation; the archive is listed, not hosted)Licence: Apache-2.0 OR MIT. In the image: /usr/lib/libsimdjson.so.29 (JSON parsing inside node).
6f942d018561a6c30838651a386a17e6e4abbfc396afd0f62740dea1810dedea (permissive licence: no source obligation; the archive is listed, not hosted)Licence: Apache-2.0 OR MIT. In the image: /usr/lib/libsimdutf.so.34 (Unicode transcoding inside node).
fd2ce975f29809a975a8da8843cfb3a7265af3f71be548f199d23cf65e101764 (permissive licence: no source obligation; the archive is listed, not hosted)Licence: blessing. In the image: /usr/lib/libsqlite3.so.0 (node:sqlite).
0e9483900e92cd5de8fd48d16bf9200145a61f7fd5be542a5ac81d8a9516eb9c (permissive licence: no source obligation; the archive is listed, not hosted)d18fa15aec74d8c17e1463f861095adc01b5ad190256acb4f91d22f0368d232b (permissive licence: no source obligation; the archive is listed, not hosted)Licence: Zlib. In the image: /usr/lib/libz.so.1.3.2.
bb329a0a2cd0274d05519d61c667c062e06990d72e125ee2dfa8de64f0119d16 (permissive licence: no source obligation; the archive is listed, not hosted)Licence: BSD-3-Clause OR GPL-2.0-or-later. In the image: /usr/lib/libzstd.so.1 (node:zlib; zstd-libs, used under BSD-3-Clause).
37d7284556b20954e56e1ca85b80226768902e2edabd3b649e9e72c0c9012ee3 (permissive licence: no source obligation; the archive is listed, not hosted)Licence: MIT OR Apache-2.0. In the image: /sbin/xvm-agent (PID 1), statically linked with Rust's standard library, the crates below and musl (Rust's self-contained copy, MIT: musl/COPYRIGHT); /etc (passwd, group, profile, xvm/env, ...), the home template's .profile.
Our own code, MIT OR Apache-2.0: no source obligation. The scripts that build the GPL components are in their own directories here (kernel/recipe/).