The Linux guest that runs in this page contains software under the GNU General Public License version 2 (the Linux kernel and BusyBox). For this guest image version, the complete corresponding source code is available at no charge from our public repository github.com/xuwaters/xvm-sources at commit
29f297441da1023d6f96e192d42aa1cf4f07b5b4: the upstream source of the Linux kernel and BusyBox at the exact tag this image was built from, and Alpine's build files with every patch. Every patch we applied, the kernel configuration, and the scripts used to build and assemble the binaries, with the digests of the public container images they run in (tools.txt), are in this directory. The source remains available for as long as we serve this version and for at least three years afterwards. This page lists each source archive the build used with its SHA-256 and the tag and commit in that repository it corresponds to;index.jsonhas the same in machine-readable form.
Machine-readable: index.json; checksums of this directory: SHA256SUMS; build-only tools (not distributed): tools.txt; the corresponding source: https://github.com/xuwaters/xvm-sources/tree/29f297441da1023d6f96e192d42aa1cf4f07b5b4.
Licence: GPL-2.0-only WITH Linux-syscall-note. In the image: kernel Image (manifest object `kernel`; resident in the snapshot RAM).
Corresponding source: github.com/xuwaters/linux (tag v6.18.56, commit 17ad2612c11a748b50d32eefc681344b26fea946, the submodule linux of xvm-sources).
libkrunfw patches 0001/0002 (authorship kept), the configuration `config` (= libkrunfw's riscv64 config + recipe/xvm.config, olddefconfig), built by recipe/kbuild.sh in recipe/Dockerfile's image (recipe/builders.lock pins it).
4633bbda2ab95eaf2a7af4041236451d6759c72e6946265531af4b3aacefbf89 (in xvm-sources: tag v6.18.56, commit 17ad2612c11a748b50d32eefc681344b26fea946)Licence: GPL-2.0-only. In the image: /bin/busybox and its applet links.
Corresponding source: github.com/xuwaters/busybox (tag 1_37_0, commit be7d1b7b1701d225379bc1665487ed0871b592a5, the submodule busybox of xvm-sources).
3311dff32e746499f4df0d5df04d7eb396382d7e108bb9250e7b519b837043a4 (in xvm-sources: tag 1_37_0, commit be7d1b7b1701d225379bc1665487ed0871b592a5)Licence: bzip2-1.0.6. In the image: /usr/lib/libbz2.so.1 (bz2).
ab5a03176ee106d3f0fa90e381da478ddae405918153cca248e682cd0c4a2269 (permissive licence: no source obligation; the archive is listed, not hosted)Licence: MIT. In the image: /usr/lib/libexpat.so.1 (xml.etree, xml.parsers.expat).
1e6371862cc31999b368c3b89b49994f0677e1bab5f1b2b85ae3741f5d803051 (permissive licence: no source obligation; the archive is listed, not hosted)Licence: MIT. In the image: /usr/lib/libffi.so.8 (ctypes).
f3a3082a23b37c293a4fcd1053147b371f2ff91fa7ea1b2a52e335676bac82dc (permissive licence: no source obligation; the archive is listed, not hosted)Licence: BSD-2-Clause. In the image: /usr/lib/libmpdec.so.4 (decimal; libmpdec++ of the package is not in the image).
96d33abb4bb0070c7be0fed4246cd38416188325f820468214471938545b1ac8 (permissive licence: no source obligation; the archive is listed, not hosted)Licence: MIT. In the image: /lib/ld-musl-riscv64.so.1 (libc).
d585fd3b613c66151fc3249e8ed44f77020cb5e6c1e635a616d3f9f82460512a (permissive licence: no source obligation; the archive is listed, not hosted)Licence: PSF-2.0. In the image: /usr/bin/python3.14, /usr/lib/libpython3.14.so.1.0 and the standard library /usr/lib/python3.14 with its bytecode (python3-pycache-pyc0), less the modules guest/images/python/drop.txt removes (python3/recipe/).
Alpine's build (alpine/python3/), installed without its install scripts; the standard library trimmed by python3/recipe/drop.txt (mkroot.sh MODE=python).
c2215904f02b175596dc49351585104f4bc20341e1c47378b26a2c274360ce73 (permissive licence: no source obligation; the archive is listed, not hosted)Licence: GPL-2.0-or-later AND 0BSD AND Public-Domain AND LGPL-2.1-or-later. In the image: /usr/lib/liblzma.so.5 (lzma; xz-libs: the library only, 0BSD).
b6b34c52e672e810d339db14e0c10b5b6f5f67a30d8d05cdac5d8cb4d82f78d5 (permissive licence: no source obligation; the archive is listed, not hosted)Licence: Zlib. In the image: /usr/lib/libz.so.1.3.2.
bb329a0a2cd0274d05519d61c667c062e06990d72e125ee2dfa8de64f0119d16 (permissive licence: no source obligation; the archive is listed, not hosted)Licence: MIT OR Apache-2.0. In the image: /sbin/xvm-agent (PID 1), statically linked with Rust's standard library, the crates below and musl (Rust's self-contained copy, MIT: musl/COPYRIGHT); /etc (passwd, group, profile, xvm/env, ...), the home template's .profile.
Our own code, MIT OR Apache-2.0: no source obligation. The scripts that build the GPL components are in their own directories here (kernel/recipe/).