Skip to content
Branch: master
Find file Copy path
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
42 lines (28 sloc) 1 KB


Use this tool to seal the contents of a directory into a static unikernel, serving its contents over HTTPS.


For now on, you need to set up few opam pins:

opam remote add mirage-dev

The you can install mirage-seal using opam:

$ opam install mirage-seal


To serve the data in files/ using the certificates secrets/server.key and secrets/server.pem, simply do:

$ mirage-seal --data=files/ --keys=secrets/ [--ip=<IP>]
$ xl create seal.xl -c

If --ip is not specified, the unikernel will use DHCP to acquire an IP address on boot.


If you want to test mirage-seal locally, you can generate a self-signed certificate using openSSL (from StackOverflow):

$ mkdir secrets
$ openssl req -x509 -newkey rsa:2048 -nodes -keyout secrets/server.key -out secrets/server.pem -days 365 -subj '/CN=<IP>'
You can’t perform that action at this time.