Guest image 2026.10.13.4: licences and source code

The Linux guest that runs in this page contains software under the GNU General Public License version 2 (the Linux kernel, BusyBox, and OpenJDK under GPL-2.0 with the Classpath Exception) and version 3 with the GCC Runtime Library Exception (libgcc, libstdc++). For this guest image version, the complete corresponding source code is available at no charge from our public repository github.com/xuwaters/xvm-sources at commit 29f297441da1023d6f96e192d42aa1cf4f07b5b4: the upstream source of the Linux kernel, BusyBox and OpenJDK at the exact tag this image was built from, and Alpine's build files with every patch. Every patch we applied, the kernel configuration, and the scripts used to build and assemble the binaries, with the digests of the public container images they run in (tools.txt), are in this directory. The source remains available for as long as we serve this version and for at least three years afterwards. This page lists each source archive the build used with its SHA-256 and the tag and commit in that repository it corresponds to; index.json has the same in machine-readable form.

Machine-readable: index.json; checksums of this directory: SHA256SUMS; build-only tools (not distributed): tools.txt; the corresponding source: https://github.com/xuwaters/xvm-sources/tree/29f297441da1023d6f96e192d42aa1cf4f07b5b4.

linux 6.18.56

Licence: GPL-2.0-only WITH Linux-syscall-note. In the image: kernel Image (manifest object `kernel`; resident in the snapshot RAM).

Corresponding source: github.com/xuwaters/linux (tag v6.18.56, commit 17ad2612c11a748b50d32eefc681344b26fea946, the submodule linux of xvm-sources).

libkrunfw patches 0001/0002 (authorship kept), the configuration `config` (= libkrunfw's riscv64 config + recipe/xvm.config, olddefconfig), built by recipe/kbuild.sh in recipe/Dockerfile's image (recipe/images.lock pins it).

Source archives

Licence texts, notices, patches and build files (18)

busybox 1.37.0-r31

Licence: GPL-2.0-only. In the image: /bin/busybox and its applet links.

Corresponding source: github.com/xuwaters/busybox (tag 1_37_0, commit be7d1b7b1701d225379bc1665487ed0871b592a5, the submodule busybox of xvm-sources).

Source archives

Licence texts, notices, patches and build files (82)

musl 1.2.6-r2

Licence: MIT. In the image: /lib/ld-musl-riscv64.so.1 (libc).

Source archives

Licence texts, notices, patches and build files (13)

openjdk 25.0.4_p7-r0

Licence: GPL-2.0-with-classpath-exception. In the image: /usr/lib/jvm/xvm: jlink of the modules in openjdk/recipe/jlink.args from openjdk25-jdk + -jmods (+ -jre-headless), native code stripped, CDS archives classes.jsa and javac.jsa dumped by openjdk/recipe/build.sh; resident pages in the snapshot RAM.

Corresponding source: github.com/xuwaters/jdk25u (tag jdk-25.0.4-ga, commit 0b8bc780f976dab23ec798018fef0b674e885b0c, the submodule openjdk/jdk25u of xvm-sources).

Alpine's patches (alpine/openjdk25/*.patch); our jlink options and CDS dumps are the statement of changes (openjdk/recipe/).

Source archives

Licence texts, notices, patches and build files (39)

zlib 1.3.2-r1

Licence: Zlib. In the image: /usr/lib/libz.so.1.3.2.

Source archives

Licence texts, notices, patches and build files (4)

gcc-runtime 15.2.0 (Alpine)

Licence: GPL-3.0-or-later WITH GCC-exception-3.1. In the image: libstdc++ and libgcc code linked statically into /usr/lib/jvm/xvm/lib/server/libjvm.so (its .comment: "GCC: (Alpine 15.2.0) 15.2.0"; DT_NEEDED is libc.musl and libz only).

The GCC Runtime Library Exception 3.1 permits distributing Target Code from an Eligible Compilation Process under terms of our choice; no source obligation follows. The texts are included as notice.

Licence texts, notices, patches and build files (2)

xvm 2026.10.13.4

Licence: MIT OR Apache-2.0. In the image: /sbin/xvm-agent (PID 1; also /usr/bin/javac, the shim), statically linked with Rust's standard library, the crates below and musl (Rust's self-contained copy, MIT: musl/COPYRIGHT); /usr/lib/xvm/xvm-compiled.jar, xvm-compiled.args (the compile server); /etc (passwd, group, profile, ...), the home template's .profile.

Our own code, MIT OR Apache-2.0: no source obligation. The scripts that build the GPL components are in their own directories here (kernel/recipe/, openjdk/recipe/).

Licence texts, notices, patches and build files (43)