[ { "path": ".circleci/config.yml", "content": "version: 2.1\n\njobs:\n deploy:\n docker:\n - image: cimg/node:22.9\n resource_class: medium\n steps:\n - add_ssh_keys:\n fingerprints:\n - \"86:3b:c9:a6:d1:b9:a8:dc:0e:00:db:99:8d:19:c4:3e\"\n - run:\n name: Add known hosts\n command: |\n mkdir -p ~/.ssh\n echo $GH_HOST >> ~/.ssh/known_hosts\n echo $HAVANA_HOST >> ~/.ssh/known_hosts\n - run:\n name: Install NPM\n command: |\n sudo apt-get update && sudo apt-get install -y rsync npm\n - run:\n name: Clone WebVM\n command: |\n git clone --branch $CIRCLE_BRANCH --single-branch git@github.com:leaningtech/webvm.git\n - run:\n name: Build WebVM\n command: |\n cd webvm/\n npm install\n npm run build\n - run:\n name: Deploy webvm\n command: |\n rsync -avz --chown circleci:runtimes webvm/build/ circleci@havana.leaningtech.com:webvm/\n\nworkflows:\n deploy:\n when:\n equal: [ << pipeline.trigger_source >>, \"api\" ]\n jobs:\n - deploy\n" }, { "path": ".github/workflows/deploy.yml", "content": "name: Deploy\n\n# Define when the workflow should run\non:\n # Allow manual triggering of the workflow from the Actions tab\n workflow_dispatch:\n\n # Allow inputs to be passed when manually triggering the workflow from the Actions tab\n inputs:\n DOCKERFILE_PATH:\n type: string\n description: 'Path to the Dockerfile'\n required: true\n default: 'dockerfiles/debian_mini'\n\n IMAGE_SIZE:\n type: string\n description: 'Image size, 950M max'\n required: true\n default: '750M'\n\n DEPLOY_TO_GITHUB_PAGES:\n type: boolean\n description: 'Deploy to Github pages'\n required: true\n default: true\n\n GITHUB_RELEASE:\n type: boolean\n description: 'Upload GitHub release'\n required: true\n default: false\n\njobs:\n\n guard_clause:\n runs-on: ubuntu-latest\n \n env:\n GH_TOKEN: ${{ github.token }} # As required by the GitHub-CLI \n\n permissions:\n actions: 'write' # Required in order to terminate the workflow run.\n \n steps:\n - uses: actions/checkout@v4\n # Guard clause that cancels the workflow in case of an invalid DOCKERFILE_PATH and/or incorrectly configured Github Pages. \n # The main reason for choosing this workaround for aborting the workflow is the fact that it does not display the workflow as successful, which can set false expectations.\n - name: DOCKERFILE_PATH.\n shell: bash\n run: |\n # We check whether the Dockerfile_path is valid. \n if [ ! -f ${{ github.event.inputs.DOCKERFILE_PATH }} ]; then\n echo \"::error title=Invalid Dockerfile path::No file found at ${{ github.event.inputs.DOCKERFILE_PATH }}\"\n echo \"terminate=true\" >> $GITHUB_ENV\n fi\n\n - name: Github Pages config guard clause\n if: ${{ github.event.inputs.DEPLOY_TO_GITHUB_PAGES == 'true' }}\n run: |\n # We use the Github Rest api to get information regarding pages for the Github Repository and store it into a temporary file named \"pages_response\".\n set +e\n gh api \\\n -H \"Accept: application/vnd.github+json\" \\\n -H \"X-GitHub-Api-Version: 2022-11-28\" \\\n /repos/${{ github.repository_owner }}/$(basename ${{ github.repository }})/pages > pages_response\n\n # We make sure Github Pages has been enabled for this repository.\n if [ \"$?\" -ne 0 ]; then\n echo \"::error title=Potential pages configuration error.::Please make sure you have enabled Github pages for the ${{ github.repository }} repository. If already enabled then Github pages might be down\"\n echo \"terminate=true\" >> $GITHUB_ENV\n fi\n set -e\n\n # We make sure the Github pages build & deployment source is set to \"workflow\" (Github Actions). Instead of a \"legacy\" (branch).\n if [[ \"$(jq --compact-output --raw-output .build_type pages_response)\" != \"workflow\" ]]; then\n echo \"Undefined behaviour, Make sure the Github Pages source is correctly configured in the Github Pages settings.\"\n echo \"::error title=Pages configuration error.::Please make sure you have correctly picked \\\"Github Actions\\\" as the build and deployment source for the Github Pages.\"\n echo \"terminate=true\" >> $GITHUB_ENV\n fi\n rm pages_response\n\n - name: Terminate run if error occurred.\n run: |\n if [[ $terminate == \"true\" ]]; then\n gh run cancel ${{ github.run_id }}\n gh run watch ${{ github.run_id }}\n fi\n\n build:\n needs: guard_clause # Dependency\n runs-on: ubuntu-latest # Image to run the worker on.\n\n env:\n TAG: \"ext2-webvm-base-image\" # Tag of docker image.\n IMAGE_SIZE: '${{ github.event.inputs.IMAGE_SIZE }}'\n DEPLOY_DIR: /webvm_deploy/ # Path to directory where we host the final image from.\n\n permissions: # Permissions to grant the GITHUB_TOKEN.\n contents: write # Required permission to make a github release.\n\n steps:\n # Checks-out our repository under $GITHUB_WORKSPACE, so our job can access it\n - uses: actions/checkout@v4\n\n # Setting the IMAGE_NAME variable in GITHUB_ENV to __.ext2.\n - name: Generate the image_name.\n id: image_name_gen\n run: |\n echo \"IMAGE_NAME=$(basename ${{ github.event.inputs.DOCKERFILE_PATH }})_$(date +%Y%m%d)_${{ github.run_id }}.ext2\" >> $GITHUB_ENV\n\n # Create directory to host the image from.\n - run: sudo mkdir -p $DEPLOY_DIR\n\n # Build the i386 Dockerfile image.\n - run: docker build . --tag $TAG --file ${{ github.event.inputs.DOCKERFILE_PATH }} --platform=i386\n \n # Run the docker image so that we can export the container.\n # Run the Docker container with the Google Public DNS nameservers: 8.8.8.8, 8.8.4.4\n - run: |\n docker run --dns 8.8.8.8 --dns 8.8.4.4 -d $TAG\n echo \"CONTAINER_ID=$(sudo docker ps -aq)\" >> $GITHUB_ENV\n\n # We extract the CMD, we first need to figure whether the Dockerfile uses CMD or an Entrypoint.\n - name: Extracting CMD / Entrypoint and args\n shell: bash\n run: |\n cmd=$(sudo docker inspect --format='{{json .Config.Cmd}}' $CONTAINER_ID)\n entrypoint=$(sudo docker inspect --format='{{json .Config.Entrypoint}}' $CONTAINER_ID)\n if [[ $entrypoint != \"null\" && $cmd != \"null\" ]]; then\n echo \"CMD=$( sudo docker inspect $CONTAINER_ID | jq --compact-output '.[0].Config.Entrypoint' )\" >> $GITHUB_ENV\n echo \"ARGS=$( sudo docker inspect $CONTAINER_ID | jq --compact-output '.[0].Config.Cmd' )\" >> $GITHUB_ENV\n elif [[ $cmd != \"null\" ]]; then\n echo \"CMD=$( sudo docker inspect $CONTAINER_ID | jq --compact-output '.[0].Config.Cmd[:1]' )\" >> $GITHUB_ENV\n echo \"ARGS=$( sudo docker inspect $CONTAINER_ID | jq --compact-output '.[0].Config.Cmd[1:]' )\" >> $GITHUB_ENV\n else\n echo \"CMD=$( sudo docker inspect $CONTAINER_ID | jq --compact-output '.[0].Config.Entrypoint[:1]' )\" >> $GITHUB_ENV\n echo \"ARGS=$( sudo docker inspect $CONTAINER_ID | jq --compact-output '.[0].Config.Entrypoint[1:]' )\" >> $GITHUB_ENV\n fi\n\n # We extract the ENV, CMD/Entrypoint and cwd from the Docker container with docker inspect.\n - name: Extracting env, args and cwd.\n shell: bash\n run: |\n echo \"ENV=$( sudo docker inspect $CONTAINER_ID | jq --compact-output '.[0].Config.Env' )\" >> $GITHUB_ENV\n echo \"CWD=$( sudo docker inspect $CONTAINER_ID | jq --compact-output '.[0].Config.WorkingDir' )\" >> $GITHUB_ENV\n\n # We create and mount the base ext2 image to extract the Docker container's filesystem its contents into.\n - name: Create ext2 image.\n run: |\n # Preallocate space for the ext2 image\n sudo fallocate -l $IMAGE_SIZE ${IMAGE_NAME}\n # Format to ext2 linux kernel revision 0\n sudo mkfs.ext2 -r 0 ${IMAGE_NAME}\n # Mount the ext2 image to modify it\n sudo mount -o loop -t ext2 ${IMAGE_NAME} /mnt/\n\n # We opt for 'docker cp --archive' over 'docker save' since our focus is solely on the end product rather than individual layers and metadata.\n # However, it's important to note that despite being specified in the documentation, the '--archive' flag does not currently preserve uid/gid information when copying files from the container to the host machine.\n # Another compelling reason to use 'docker cp' is that it preserves resolv.conf.\n - name: Export and unpack container filesystem contents into mounted ext2 image.\n run: | \n sudo docker cp -a ${CONTAINER_ID}:/ /mnt/\n sudo umount /mnt/\n # Result is an ext2 image for webvm.\n\n # The .txt suffix enabled HTTP compression for free\n - name: Generate image split chunks and .meta file\n run: |\n sudo split ${{ env.IMAGE_NAME }} ${{ env.DEPLOY_DIR }}/${{ env.IMAGE_NAME }}.c -a 6 -b 128k -x --additional-suffix=.txt\n sudo bash -c \"stat -c%s ${{ env.IMAGE_NAME }} > ${{ env.DEPLOY_DIR }}/${{ env.IMAGE_NAME }}.meta\"\n\n # This step updates the default config_github_terminal.js file by performing the following actions:\n # 1. Replaces all occurrences of IMAGE_URL with the URL to the image.\n # 2. Replace CMD with the Dockerfile entry command.\n # 3. Replace args with the Dockerfile CMD / Entrypoint args.\n # 4. Replace ENV with the container's environment values.\n # 5. Replace CWD with the container's current working directory.\n - name: Adjust config_github_terminal.js\n run: |\n sed -i 's#IMAGE_URL#\"${{ env.IMAGE_NAME }}\"#g' config_github_terminal.js\n sed -i 's#CMD#${{ env.CMD }}#g' config_github_terminal.js\n sed -i 's#ARGS#${{ env.ARGS }}#g' config_github_terminal.js\n sed -i 's#ENV#${{ env.ENV }}#g' config_github_terminal.js\n sed -i 's#CWD#${{ env.CWD }}#g' config_github_terminal.js\n\n - name: Build NPM package\n run: |\n npm install\n WEBVM_MODE=github npm run build\n\n # Move required files for gh-pages deployment to the deployment directory $DEPLOY_DIR.\n - name: Copy build\n run: |\n rm build/alpine.html\n sudo mv build/* $DEPLOY_DIR/\n\n # We generate index.list files for our httpfs to function properly.\n - name: make index.list\n shell: bash\n run: |\n find $DEPLOY_DIR -type d | while read -r dir;\n do\n index_list=\"$dir/index.list\";\n sudo rm -f \"$index_list\";\n sudo ls \"$dir\" | sudo tee \"$index_list\" > /dev/null;\n sudo chmod +rw \"$index_list\"; \n sudo echo \"created $index_list\"; \n done\n\n # Create a gh-pages artifact in order to deploy to gh-pages.\n - name: Upload GitHub Pages artifact\n uses: actions/upload-pages-artifact@v3\n with:\n # Path of the directory containing the static assets for our gh pages deployment.\n path: ${{ env.DEPLOY_DIR }} # optional, default is _site/\n\n - name: github release # To upload our final ext2 image as a github release.\n if: ${{ github.event.inputs.GITHUB_RELEASE == 'true' }}\n uses: softprops/action-gh-release@v2\n with:\n target_commitish: ${{ github.sha }} # Last commit on the GITHUB_REF branch or tag\n tag_name: ext2_image\n fail_on_unmatched_files: 'true' # Fail in case of no matches with the file(s) glob(s).\n files: | # Assets to upload as release.\n ${{ env.IMAGE_NAME }}\n\n deploy_to_github_pages: # Job that deploys the github-pages artifact to github-pages.\n if: ${{ github.event.inputs.DEPLOY_TO_GITHUB_PAGES == 'true' }}\n needs: build\n environment:\n name: github-pages\n url: ${{ steps.deployment.outputs.page_url }}\n\n # Grant GITHUB_TOKEN the permissions required to make a Pages deployment\n permissions:\n pages: write # to deploy to Pages\n id-token: write # to verify the deployment originates from an appropriate source\n\n runs-on: ubuntu-latest\n steps:\n # Deployment to github pages\n - name: Deploy GitHub Pages site\n id: deployment\n uses: actions/deploy-pages@v4\n" }, { "path": ".gitignore", "content": "/node_modules\n/.svelte-kit\npnpm-lock.yaml\nbuild/" }, { "path": ".npmrc", "content": "engine-strict=true\n" }, { "path": "LICENSE.txt", "content": "\n Apache License\n Version 2.0, January 2004\n http://www.apache.org/licenses/\n\n TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n 1. Definitions.\n\n \"License\" shall mean the terms and conditions for use, reproduction,\n and distribution as defined by Sections 1 through 9 of this document.\n\n \"Licensor\" shall mean the copyright owner or entity authorized by\n the copyright owner that is granting the License.\n\n \"Legal Entity\" shall mean the union of the acting entity and all\n other entities that control, are controlled by, or are under common\n control with that entity. For the purposes of this definition,\n \"control\" means (i) the power, direct or indirect, to cause the\n direction or management of such entity, whether by contract or\n otherwise, or (ii) ownership of fifty percent (50%) or more of the\n outstanding shares, or (iii) beneficial ownership of such entity.\n\n \"You\" (or \"Your\") shall mean an individual or Legal Entity\n exercising permissions granted by this License.\n\n \"Source\" form shall mean the preferred form for making modifications,\n including but not limited to software source code, documentation\n source, and configuration files.\n\n \"Object\" form shall mean any form resulting from mechanical\n transformation or translation of a Source form, including but\n not limited to compiled object code, generated documentation,\n and conversions to other media types.\n\n \"Work\" shall mean the work of authorship, whether in Source or\n Object form, made available under the License, as indicated by a\n copyright notice that is included in or attached to the work\n (an example is provided in the Appendix below).\n\n \"Derivative Works\" shall mean any work, whether in Source or Object\n form, that is based on (or derived from) the Work and for which the\n editorial revisions, annotations, elaborations, or other modifications\n represent, as a whole, an original work of authorship. For the purposes\n of this License, Derivative Works shall not include works that remain\n separable from, or merely link (or bind by name) to the interfaces of,\n the Work and Derivative Works thereof.\n\n \"Contribution\" shall mean any work of authorship, including\n the original version of the Work and any modifications or additions\n to that Work or Derivative Works thereof, that is intentionally\n submitted to Licensor for inclusion in the Work by the copyright owner\n or by an individual or Legal Entity authorized to submit on behalf of\n the copyright owner. For the purposes of this definition, \"submitted\"\n means any form of electronic, verbal, or written communication sent\n to the Licensor or its representatives, including but not limited to\n communication on electronic mailing lists, source code control systems,\n and issue tracking systems that are managed by, or on behalf of, the\n Licensor for the purpose of discussing and improving the Work, but\n excluding communication that is conspicuously marked or otherwise\n designated in writing by the copyright owner as \"Not a Contribution.\"\n\n \"Contributor\" shall mean Licensor and any individual or Legal Entity\n on behalf of whom a Contribution has been received by Licensor and\n subsequently incorporated within the Work.\n\n 2. Grant of Copyright License. Subject to the terms and conditions of\n this License, each Contributor hereby grants to You a perpetual,\n worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n copyright license to reproduce, prepare Derivative Works of,\n publicly display, publicly perform, sublicense, and distribute the\n Work and such Derivative Works in Source or Object form.\n\n 3. Grant of Patent License. Subject to the terms and conditions of\n this License, each Contributor hereby grants to You a perpetual,\n worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n (except as stated in this section) patent license to make, have made,\n use, offer to sell, sell, import, and otherwise transfer the Work,\n where such license applies only to those patent claims licensable\n by such Contributor that are necessarily infringed by their\n Contribution(s) alone or by combination of their Contribution(s)\n with the Work to which such Contribution(s) was submitted. If You\n institute patent litigation against any entity (including a\n cross-claim or counterclaim in a lawsuit) alleging that the Work\n or a Contribution incorporated within the Work constitutes direct\n or contributory patent infringement, then any patent licenses\n granted to You under this License for that Work shall terminate\n as of the date such litigation is filed.\n\n 4. Redistribution. You may reproduce and distribute copies of the\n Work or Derivative Works thereof in any medium, with or without\n modifications, and in Source or Object form, provided that You\n meet the following conditions:\n\n (a) You must give any other recipients of the Work or\n Derivative Works a copy of this License; and\n\n (b) You must cause any modified files to carry prominent notices\n stating that You changed the files; and\n\n (c) You must retain, in the Source form of any Derivative Works\n that You distribute, all copyright, patent, trademark, and\n attribution notices from the Source form of the Work,\n excluding those notices that do not pertain to any part of\n the Derivative Works; and\n\n (d) If the Work includes a \"NOTICE\" text file as part of its\n distribution, then any Derivative Works that You distribute must\n include a readable copy of the attribution notices contained\n within such NOTICE file, excluding those notices that do not\n pertain to any part of the Derivative Works, in at least one\n of the following places: within a NOTICE text file distributed\n as part of the Derivative Works; within the Source form or\n documentation, if provided along with the Derivative Works; or,\n within a display generated by the Derivative Works, if and\n wherever such third-party notices normally appear. The contents\n of the NOTICE file are for informational purposes only and\n do not modify the License. You may add Your own attribution\n notices within Derivative Works that You distribute, alongside\n or as an addendum to the NOTICE text from the Work, provided\n that such additional attribution notices cannot be construed\n as modifying the License.\n\n You may add Your own copyright statement to Your modifications and\n may provide additional or different license terms and conditions\n for use, reproduction, or distribution of Your modifications, or\n for any such Derivative Works as a whole, provided Your use,\n reproduction, and distribution of the Work otherwise complies with\n the conditions stated in this License.\n\n 5. Submission of Contributions. Unless You explicitly state otherwise,\n any Contribution intentionally submitted for inclusion in the Work\n by You to the Licensor shall be under the terms and conditions of\n this License, without any additional terms or conditions.\n Notwithstanding the above, nothing herein shall supersede or modify\n the terms of any separate license agreement you may have executed\n with Licensor regarding such Contributions.\n\n 6. Trademarks. This License does not grant permission to use the trade\n names, trademarks, service marks, or product names of the Licensor,\n except as required for reasonable and customary use in describing the\n origin of the Work and reproducing the content of the NOTICE file.\n\n 7. Disclaimer of Warranty. Unless required by applicable law or\n agreed to in writing, Licensor provides the Work (and each\n Contributor provides its Contributions) on an \"AS IS\" BASIS,\n WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n implied, including, without limitation, any warranties or conditions\n of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n PARTICULAR PURPOSE. You are solely responsible for determining the\n appropriateness of using or redistributing the Work and assume any\n risks associated with Your exercise of permissions under this License.\n\n 8. Limitation of Liability. In no event and under no legal theory,\n whether in tort (including negligence), contract, or otherwise,\n unless required by applicable law (such as deliberate and grossly\n negligent acts) or agreed to in writing, shall any Contributor be\n liable to You for damages, including any direct, indirect, special,\n incidental, or consequential damages of any character arising as a\n result of this License or out of the use or inability to use the\n Work (including but not limited to damages for loss of goodwill,\n work stoppage, computer failure or malfunction, or any and all\n other commercial damages or losses), even if such Contributor\n has been advised of the possibility of such damages.\n\n 9. Accepting Warranty or Additional Liability. While redistributing\n the Work or Derivative Works thereof, You may choose to offer,\n and charge a fee for, acceptance of support, warranty, indemnity,\n or other liability obligations and/or rights consistent with this\n License. However, in accepting such obligations, You may act only\n on Your own behalf and on Your sole responsibility, not on behalf\n of any other Contributor, and only if You agree to indemnify,\n defend, and hold each Contributor harmless for any liability\n incurred by, or claims asserted against, such Contributor by reason\n of your accepting any such warranty or additional liability.\n\n END OF TERMS AND CONDITIONS\n\n APPENDIX: How to apply the Apache License to your work.\n\n To apply the Apache License to your work, attach the following\n boilerplate notice, with the fields enclosed by brackets \"[]\"\n replaced with your own identifying information. (Don't include\n the brackets!) The text should be enclosed in the appropriate\n comment syntax for the file format. We also recommend that a\n file or class name and description of purpose be included on the\n same \"printed page\" as the copyright notice for easier\n identification within third-party archives.\n\n Copyright [yyyy] [name of copyright owner]\n\n Licensed under the Apache License, Version 2.0 (the \"License\");\n you may not use this file except in compliance with the License.\n You may obtain a copy of the License at\n\n http://www.apache.org/licenses/LICENSE-2.0\n\n Unless required by applicable law or agreed to in writing, software\n distributed under the License is distributed on an \"AS IS\" BASIS,\n WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n See the License for the specific language governing permissions and\n limitations under the License.\n" }, { "path": "README.md", "content": "# WebVM\n\n[![Discord server](https://img.shields.io/discord/988743885121548329?color=%235865F2&logo=discord&logoColor=%23fff)](https://discord.gg/yWRr2YnD9c)\n[![Issues](https://img.shields.io/github/issues/leaningtech/webvm)](https://github.com/leaningtech/webvm/issues)\n\nThis repository hosts the source code for [https://webvm.io](https://webvm.io), a Linux virtual machine that runs in your browser.\n\nTry out the new Alpine / Xorg / i3 graphical environment: [https://webvm.io/alpine.html](https://webvm.io/alpine.html)\n\n\n\nWebVM is a server-less virtual environment running fully client-side in HTML5/WebAssembly. It's designed to be Linux ABI-compatible. It runs an unmodified Debian distribution including many native development toolchains.\n\nWebVM is powered by the CheerpX virtualization engine, and enables safe, sandboxed client-side execution of x86 binaries on any browser. CheerpX includes an x86-to-WebAssembly JIT compiler, a virtual block-based file system, and a Linux syscall emulator. \n\n## Table of Contents\n\n- [Fork, deploy, customize](#fork-deploy-customize)\n- [Running WebVM locally with a custom Debian mini disk image](#run-webvm-locally-with-a-custom-debian-mini-disk-image)\n- [Example customization: Python3 REPL](#example-customization-python3-repl)\n- [How to use Claude AI](#how-to-use-claude-ai)\n- [Bugs and Issues](#bugs-and-issues)\n- [More links](#more-links)\n- [Thanks to...](#thanks-to)\n- [Versioning](#versioning)\n- [License](#license)\n\n# Enable networking\n\nModern browsers do not provide APIs to directly use TCP or UDP. WebVM provides networking support by integrating with Tailscale, a VPN network that supports WebSockets as a transport layer.\n\n1. Open the \"Networking\" panel from the side-bar\n2. Click \"Connect to Tailscale\" from the panel\n3. Log in to Tailscale (create an account if you don't have one)\n4. Click \"Connect\" when prompted by Tailscale\n\nWebVM now has access to machines in your own local Tailscale Network!\n\n## The world wide web\n\nIf you would like to access the public internet, you will need to set up an Exit Node on one of your _non-WebVM_ tailscale network devices.\nSee the _\"Advertise a device as an exit node\"_ section of the [Tailscale Exit Node quickstart guide](https://tailscale.com/kb/1408/quick-guide-exit-nodes?tab=linux) for instructions. (The _“Use an exit node”_ section can be skipped, as WebVM automatically uses an available exit node once one is advertised).\n\n> [!NOTE]\n> While we support most network commands there are a few that rely on kernel-level features not available in modern browsers and are therefore not supported, most notably `ping`.You could use `curl` or `wget` for testing instead.\n\n(Depending on your network speed, you may need to wait a few moments for the Tailscale Wasm module to be downloaded.)\nOnce that is set up:\n1. Log in with your Tailscale credentials.\n2. Go back to the WebVM tab.\n3. The `Connect to Tailscale` button in the Networking side-panel should be replaced by your IP address.\n\n> [!TIP]\n> You can also check your connection status by checking the dot colour on the \"connect to tailscale\" button (which should now show your tailscale IP). On local network connectivity it will be orange, global will be green.\n\n## Using an authkey\n\nAs an alternative to manually logging in, you can add your tailscale auth Key at the end of the webvm URL.\n\n`https://webvm.io/#authKey=`\n\nIt is recommended to use an ephemeral key.\n\n## Selfhosting your tailscale network\n\nWe also support [headscale](https://headscale.net/stable/), a selfhosted open source implementation of the Tailscale control server.\n\nThough as headscale unfortunately doesn't support adding CORS headers. You will have to set up a proxy server to add them. Headscales instructions on doing so can be found [here](https://headscale.net/stable/ref/integration/reverse-proxy/#nginx). \n\nOnce ready, add the following line to your `location /` block in your nginx config file.\n\n``` Nginx\n if ($http_origin = \"https://webvm.io\") {\n add_header 'Access-Control-Allow-Origin' \"$http_origin\";\n\t\t\tadd_header 'Access-Control-Allow-Credentials' 'true' always;\n }\n```\n\n\nTo log in to your headscale network add `#controlUrl=` to the webVM url.\n\n**Notes:**\n\n- If self hosting, replace \"https://webvm.io\" with your own url.\n- This is equivelant to the tailscale `--login-server` command line option.\n- If used with authkey, don't forget to seperate the URL fragments with a `&` inbetween.\n\n\n# Fork, deploy, customize\n\n\"deploy_instructions_gif\"\n\n- Fork the repository.\n- Enable Github pages in settings.\n\t- Click on `Settings`.\n\t- Go to the `Pages` section.\n\t- Select `Github Actions` as the source.\n - If you are using a custom domain, ensure `Enforce HTTPS` is enabled. \n- Run the workflow.\n\t- Click on `Actions`.\n\t- Accept the prompt. This is required only once to enable Actions for your fork.\n\t- Click on the workflow named `Deploy`.\n\t- Click `Run workflow` and then once more `Run workflow` in the menu.\n- After a few seconds a new `Deploy` workflow will start, click on it to see details.\n- After the workflow completes, which takes a few minutes, it will show the URL below the `deploy_to_github_pages` job.\n\n\n\nYou can now customize `dockerfiles/debian_mini` to suit your needs, or make a new Dockerfile from scratch. Use the `Path to Dockerfile` workflow parameter to select it.\n\n- If you would like to use our full desktop Alpine image, you can find it's dockerfile [**here**](github.com/leaningtech/alpine-image).\n\n- For more information on creating custom images, see our [Custom disk Image documentation](https://cheerpx.io/docs/guides/custom-images).\n\n\n# Run WebVM locally with a custom Debian mini disk image\n\n### 1. Clone the WebVM Repository\n\n```sh\ngit clone https://github.com/leaningtech/webvm.git\ncd webvm\n```\n\n### 2. Download the Debian mini Ext2 image\n\nRun the following command to download the Debian mini Ext2 image:\n\n```sh\nwget \"https://github.com/leaningtech/webvm/releases/download/ext2_image/debian_mini_20230519_5022088024.ext2\"\n```\n\n(*You can also build your own disk image by selecting the **\"Upload GitHub release\"** workflow option*)\n\n### 3. Update the configuration file\n\n\tEdit `config_public_terminal.js` to reference your local disk image:\n\n- Replace: \n\t\n\t`\"wss://disks.webvm.io/debian_large_20230522_5044875331.ext2\"`\n\t\n\tWith:\n\t\n\t`\"/disk-images/debian_mini_20230519_5022088024.ext2\"`\n\n\t(*Use an absolute or relative URL pointing to the disk image location.*)\n\n\n- Replace `\"cloud\"` with the correct disk image type: `\"bytes\"`\n\n\t\n### 4. Build WebVM\n\nRun the following commands to install dependencies and build WebVM:\n\n```sh\nnpm install\nnpm run build\n```\n\nThe output will be placed in the `build` directory.\n\n### 5. Configure Nginx\n\n- Create a directory for the disk image:\n\n```sh\nmkdir disk-images\nmv debian_mini_20230519_5022088024.ext2 disk-images/\n```\n\n- Modify your `nginx.conf` file to serve the disk image. Add the following location block:\n\n```nginx\nlocation /disk-images/ {\n\troot .;\n\tautoindex on;\n}\n```\n\n### 6, Start Nginx\n\nRun the following command to start Nginx:\n\n```sh\nnginx -p . -c nginx.conf\n```\n\n*Nginx will automatically serve the build directory.*\n\n### 7. Access WebVM\n\nOpen a browser and visit: `http://127.0.0.1:8081`.\n\nEnjoy your local WebVM!\n\n---\n\n\n\n# Example customization: Python3 REPL\n\nThe `Deploy` workflow takes into account the `CMD` specified in the Dockerfile. To build a REPL you can simply apply this patch and deploy.\n\n```diff\ndiff --git a/dockerfiles/debian_mini b/dockerfiles/debian_mini\nindex 2878332..1f3103a 100644\n--- a/dockerfiles/debian_mini\n+++ b/dockerfiles/debian_mini\n@@ -15,4 +15,4 @@ WORKDIR /home/user/\n # We set env, as this gets extracted by Webvm. This is optional.\n ENV HOME=\"/home/user\" TERM=\"xterm\" USER=\"user\" SHELL=\"/bin/bash\" EDITOR=\"vim\" LANG=\"en_US.UTF-8\" LC_ALL=\"C\"\n RUN echo 'root:password' | chpasswd\n-CMD [ \"/bin/bash\" ]\n+CMD [ \"/usr/bin/python3\" ]\n```\n\n# How to use Claude AI\n\nTo access Claude AI, you need an API key. Follow these steps to get started:\n\n### 1. Create an account\n- Visit [Anthropic Console](https://console.anthropic.com/login) and sign up with your e-mail. You'll receive a sign in link to the Anthropic Console. \n\n\n\n### 2. Get your API key\n- Once logged in, navigate to **Get API keys**.\n- Purchase the amount of credits you need. After completing the purchase, you'll be able to generate the key through the API console.\n\n\n\n### 3. Log in with your API key\n- Navigate to your WebVM and hover over the robot icon. This will show the Claude AI Integration tab. For added convenience, you can click the pin button in the top right corner to keep the tab in place.\n- You'll see a prompt where you can insert your Claude API key.\n- Insert your key and press enter.\n\n\n\n### 4. Start using Claude AI\n- Once your API key is entered, you can begin interacting with Claude AI by asking questions such as:\n\n __\"Solve the CTF challenge at `/home/user/chall1.bin.` Note that the binary reads from stdin.\"__\n\n\"deploy_instructions_gif\"\n\n**Important:** Your API key is private and should never be shared. We do not have access to your key, which is not only stored locally in your browser.\n\n# Bugs and Issues\n\nPlease use [Issues](https://github.com/leaningtech/webvm/issues) to report any bug.\nOr come to say hello / share your feedback on [Discord](https://discord.gg/yTNZgySKGa).\n\n# More links\n\n- [WebVM: server-less x86 virtual machines in the browser](https://leaningtech.com/webvm-server-less-x86-virtual-machines-in-the-browser/)\n- [WebVM: Linux Virtualization in WebAssembly with Full Networking via Tailscale](https://leaningtech.com/webvm-virtual-machine-with-networking-via-tailscale/)\n- [Mini.WebVM: Your own Linux box from Dockerfile, virtualized in the browser via WebAssembly](https://leaningtech.com/mini-webvm-your-linux-box-from-dockerfile-via-wasm/)\n- Reference GitHub Pages deployment: [Mini.WebVM](https://mini.webvm.io)\n- [Crafting the Impossible: X86 Virtualization in the Browser with WebAssembly](https://www.youtube.com/watch?v=VqrbVycTXmw) Talk at JsNation 2022\n\n# Thanks to... \nThis project depends on:\n- [CheerpX](https://cheerpx.io/), made by [Leaning Technologies](https://leaningtech.com/) for x86 virtualization and Linux emulation\n- xterm.js, [https://xtermjs.org/](https://xtermjs.org/), for providing the Web-based terminal emulator\n- [Tailscale](https://tailscale.com/), for the networking component\n- [lwIP](https://savannah.nongnu.org/projects/lwip/), for the TCP/IP stack, compiled for the Web via [Cheerp](https://github.com/leaningtech/cheerp-meta/)\n\n# Versioning\n\nWebVM depends on the CheerpX x86-to-WebAssembly virtualization technology, which is included in the project via [NPM](https://www.npmjs.com/package/@leaningtech/cheerpx).\n\nThe NPM package is updated on every release.\n\nEvery build is immutable, if a specific version works well for you today, it will keep working forever.\n\n# License\n\nWebVM is released under the Apache License, Version 2.0.\n\nYou are welcome to use, modify, and redistribute the contents of this repository.\n\nThe public CheerpX deployment is provided **as-is** and is **free to use** for technological exploration, testing and use by individuals. Any other use by organizations, including non-profit, academia and the public sector, requires a license. Downloading a CheerpX build for the purpose of hosting it elsewhere is not permitted without a commercial license.\n\nRead more about [CheerpX licensing](https://cheerpx.io/docs/licensing)\n\nIf you want to build a product on top of CheerpX/WebVM, please get in touch: sales@leaningtech.com\n" }, { "path": "config_github_terminal.js", "content": "// The root filesystem location\nexport const diskImageUrl = IMAGE_URL;\n// The root filesystem backend type\nexport const diskImageType = \"github\";\n// Print an introduction message about the technology\nexport const printIntro = true;\n// Is a graphical display needed\nexport const needsDisplay = false;\n// Executable full path (Required)\nexport const cmd = CMD; // Default: \"/bin/bash\";\n// Arguments, as an array (Required)\nexport const args = ARGS; // Default: [\"--login\"];\n// Optional extra parameters\nexport const opts = {\n\t// Environment variables\n\tenv: ENV, // Default: [\"HOME=/home/user\", \"TERM=xterm\", \"USER=user\", \"SHELL=/bin/bash\", \"EDITOR=vim\", \"LANG=en_US.UTF-8\", \"LC_ALL=C\"],\n\t// Current working directory\n\tcwd: CWD, // Default: \"/home/user\",\n\t// User id\n\tuid: 1000,\n\t// Group id\n\tgid: 1000\n};\n" }, { "path": "config_public_alpine.js", "content": "// The root filesystem location\nexport const diskImageUrl = \"wss://disks.webvm.io/alpine_20251007.ext2\";\n// The root filesystem backend type\nexport const diskImageType = \"cloud\";\n// Print an introduction message about the technology\nexport const printIntro = false;\n// Is a graphical display needed\nexport const needsDisplay = true;\n// Executable full path (Required)\nexport const cmd = \"/sbin/init\";\n// Arguments, as an array (Required)\nexport const args = [];\n// Optional extra parameters\nexport const opts = {\n\t// User id\n\tuid: 0,\n\t// Group id\n\tgid: 0\n};\n" }, { "path": "config_public_terminal.js", "content": "// The root filesystem location\nexport const diskImageUrl = \"wss://disks.webvm.io/debian_large_20230522_5044875331_2.ext2\";\n// The root filesystem backend type\nexport const diskImageType = \"cloud\";\n// Print an introduction message about the technology\nexport const printIntro = true;\n// Is a graphical display needed\nexport const needsDisplay = false;\n// Executable full path (Required)\nexport const cmd = \"/bin/bash\";\n// Arguments, as an array (Required)\nexport const args = [\"--login\"];\n// Optional extra parameters\nexport const opts = {\n\t// Environment variables\n\tenv: [\"HOME=/home/user\", \"TERM=xterm\", \"USER=user\", \"SHELL=/bin/bash\", \"EDITOR=vim\", \"LANG=en_US.UTF-8\", \"LC_ALL=C\"],\n\t// Current working directory\n\tcwd: \"/home/user\",\n\t// User id\n\tuid: 1000,\n\t// Group id\n\tgid: 1000\n};\n" }, { "path": "dockerfiles/.dockerignore", "content": ".dockerignore\n" }, { "path": "dockerfiles/debian_large", "content": "FROM --platform=i386 i386/debian:bookworm\nARG DEBIAN_FRONTEND=noninteractive\n\nRUN apt-get update && apt-get -y upgrade && \\\n\tapt-get install -y apt-utils beef bsdgames bsdmainutils ca-certificates \\\n\tcowsay cpio cron curl dmidecode dmsetup g++ gcc gdbm-l10n git \\\n\thexedit ifupdown init logrotate lsb-base lshw lua5.4 luajit lynx make \\\n\tnano netbase nodejs openssl procps python3 python3-cryptography \\\n\tpython3-jinja2 python3-numpy python3-pandas python3-pip python3-scipy \\\n\tpython3-six python3-yaml readline-common rsyslog ruby sensible-utils \\\n\tssh systemd systemd-sysv tasksel tasksel-data udev vim wget whiptail \\\n\txxd iptables isc-dhcp-client isc-dhcp-common kmod less netcat-openbsd\n\n# Make a user, then copy over the /example directory\nRUN useradd -m user && echo \"user:password\" | chpasswd\nCOPY --chown=user:user ./examples /home/user/examples\nRUN chmod -R +x /home/user/examples/lua\nRUN echo 'root:password' | chpasswd\nCMD [ \"/bin/bash\" ]\n" }, { "path": "dockerfiles/debian_mini", "content": "FROM --platform=i386 i386/debian:bookworm\nARG DEBIAN_FRONTEND=noninteractive\nRUN apt-get clean && apt-get update && apt-get -y upgrade\nRUN apt-get -y install apt-utils gcc \\\n\tpython3 vim unzip ruby nodejs \\\n\tfakeroot dbus base whiptail hexedit \\\n\tpatch wamerican ucf manpages \\\n\tfile luajit make lua5.4 dialog curl \\\n\tless cowsay netcat-openbsd\nRUN useradd -m user && echo \"user:password\" | chpasswd\nCOPY --chown=user:user ./examples /home/user/examples\nRUN chmod -R +x /home/user/examples/lua\n# We set WORKDIR, as this gets extracted by Webvm to be used as the cwd. This is optional.\nWORKDIR /home/user/\n# We set env, as this gets extracted by Webvm. This is optional.\nENV HOME=\"/home/user\" TERM=\"xterm\" USER=\"user\" SHELL=\"/bin/bash\" EDITOR=\"vim\" LANG=\"en_US.UTF-8\" LC_ALL=\"C\"\nRUN echo 'root:password' | chpasswd\nCMD [ \"/bin/bash\" ]\n" }, { "path": "documents/Welcome.txt", "content": "Welcome to WebVM: A complete desktop environment running in the browser\n\nWebVM is powered by CheerpX: a x86-to-WebAssembly virtualization engine and Just-in-Time compiler\n\nFor more info: https://cheerpx.io\n" }, { "path": "documents/index.list", "content": "ArchitectureOverview.png\nWebAssemblyTools.pdf\nWelcome.txt\n" }, { "path": "examples/c/Makefile", "content": "SRCS = $(wildcard *.c)\n\nPROGS = $(patsubst %.c,%,$(SRCS))\n\nall: $(PROGS)\n\n%: %.c\n\t$(CC) $(CFLAGS) -o $@ $<\n\nclean: \n\trm -f $(PROGS)\n\n.PHONY: all clean\n" }, { "path": "examples/c/env.c", "content": "#include \n \n// Most of the C compilers support a third parameter to main which\n// store all envorinment variables\nint main(int argc, char *argv[], char * envp[])\n{\n int i;\n for (i = 0; envp[i] != NULL; i++)\n printf(\"\\n%s\", envp[i]);\n getchar();\n return 0;\n}\n" }, { "path": "examples/c/helloworld.c", "content": "#include \n\nint main()\n{\n\tprintf(\"Hello, World!\\n\");\n}\n" }, { "path": "examples/c/link.c", "content": "#include \n\nint main()\n{\n\tlink(\"env\", \"env3\");\n\treturn 0;\n}\n" }, { "path": "examples/c/openat.c", "content": "#include \n#include \n#include \n\nint main()\n{\n\tint ret = openat(AT_FDCWD, \"/dev/tty\", 0x88102, 0);\n\tprintf(\"return value is %d and errno is %d\\n\", ret, errno);\n}\n\n" }, { "path": "examples/c/waitpid.c", "content": "#include \n#include \n#include \n#include \n\nint main()\n{\n\tint status;\n\n\tpid_t p = getpid();\n\t// waitpid takes a children's pid, not the current process one\n\t// if the pid is not a children of the current process, it returns -ECHILD\n\tpid_t res = waitpid(1001, &status, WNOHANG);\n\n\tprintf(\"res is %d, p is %d and errno is %d\\n\", res, p, errno);\n\n}\n" }, { "path": "examples/lua/fizzbuzz.lua", "content": "#!/usr/bin/env luajit\ncfizz,cbuzz=0,0\nfor i=1,20 do\n\tcfizz=cfizz+1\n\tcbuzz=cbuzz+1\n\tio.write(i .. \": \")\n\tif cfizz~=3 and cbuzz~=5 then\n\t\tio.write(i)\n\telse\n\t\tif cfizz==3 then\n\t\t\tio.write(\"Fizz\")\n\t\t\tcfizz=0\n\t\tend\n\t\tif cbuzz==5 then\n\t\t\tio.write(\"Buzz\")\n\t\t\tcbuzz=0\n\t\tend\n\tend\n\tio.write(\"\\n\")\nend\n" }, { "path": "examples/lua/sorting.lua", "content": "#!/usr/bin/env luajit\nfruits = {\"banana\",\"orange\",\"apple\",\"grapes\"}\n\nfor k,v in ipairs(fruits) do\n print(k,v)\nend\n\ntable.sort(fruits)\nprint(\"sorted table\")\n\nfor k,v in ipairs(fruits) do\n print(k,v)\nend\n" }, { "path": "examples/lua/symmetric_difference.lua", "content": "#!/usr/bin/env luajit\nA = { [\"John\"] = true, [\"Bob\"] = true, [\"Mary\"] = true, [\"Elena\"] = true }\nB = { [\"Jim\"] = true, [\"Mary\"] = true, [\"John\"] = true, [\"Bob\"] = true }\n\nA_B = {}\nfor a in pairs(A) do\n if not B[a] then A_B[a] = true end\nend\n\nB_A = {}\nfor b in pairs(B) do\n if not A[b] then B_A[b] = true end\nend\n\nfor a_b in pairs(A_B) do\n print( a_b )\nend\nfor b_a in pairs(B_A) do\n print( b_a )\nend\n" }, { "path": "examples/nodejs/environment.js", "content": "console.log(\"process.uptime = \", global.process.uptime());\nconsole.log(\"process.title = \", global.process.title);\nconsole.log(\"process version = \", global.process.version);\nconsole.log(\"process.platform = \", global.process.platform);\nconsole.log(\"process.cwd = \", global.process.cwd());\nconsole.log(\"process.uptime = \", global.process.uptime());\n" }, { "path": "examples/nodejs/nbody.js", "content": "const PI = Math.PI;\nconst SOLAR_MASS = 4 * PI * PI;\nconst DAYS_PER_YEAR = 365.24;\n\nfunction Body(x, y, z, vx, vy, vz, mass) {\n this.x = x;\n this.y = y;\n this.z = z;\n this.vx = vx;\n this.vy = vy;\n this.vz = vz;\n this.mass = mass;\n}\n\nfunction Jupiter() {\n return new Body(\n 4.84143144246472090e+00,\n -1.16032004402742839e+00,\n -1.03622044471123109e-01,\n 1.66007664274403694e-03 * DAYS_PER_YEAR,\n 7.69901118419740425e-03 * DAYS_PER_YEAR,\n -6.90460016972063023e-05 * DAYS_PER_YEAR,\n 9.54791938424326609e-04 * SOLAR_MASS\n );\n}\n\nfunction Saturn() {\n return new Body(\n 8.34336671824457987e+00,\n 4.12479856412430479e+00,\n -4.03523417114321381e-01,\n -2.76742510726862411e-03 * DAYS_PER_YEAR,\n 4.99852801234917238e-03 * DAYS_PER_YEAR,\n 2.30417297573763929e-05 * DAYS_PER_YEAR,\n 2.85885980666130812e-04 * SOLAR_MASS\n );\n}\n\nfunction Uranus() {\n return new Body(\n 1.28943695621391310e+01,\n -1.51111514016986312e+01,\n -2.23307578892655734e-01,\n 2.96460137564761618e-03 * DAYS_PER_YEAR,\n 2.37847173959480950e-03 * DAYS_PER_YEAR,\n -2.96589568540237556e-05 * DAYS_PER_YEAR,\n 4.36624404335156298e-05 * SOLAR_MASS\n );\n}\n\nfunction Neptune() {\n return new Body(\n 1.53796971148509165e+01,\n -2.59193146099879641e+01,\n 1.79258772950371181e-01,\n 2.68067772490389322e-03 * DAYS_PER_YEAR,\n 1.62824170038242295e-03 * DAYS_PER_YEAR,\n -9.51592254519715870e-05 * DAYS_PER_YEAR,\n 5.15138902046611451e-05 * SOLAR_MASS\n );\n}\n\nfunction Sun() {\n return new Body(0.0, 0.0, 0.0, 0.0, 0.0, 0.0, SOLAR_MASS);\n}\n\nconst bodies = Array(Sun(), Jupiter(), Saturn(), Uranus(), Neptune());\n\nfunction offsetMomentum() {\n let px = 0;\n let py = 0;\n let pz = 0;\n const size = bodies.length;\n for (let i = 0; i < size; i++) {\n const body = bodies[i];\n const mass = body.mass;\n px += body.vx * mass;\n py += body.vy * mass;\n pz += body.vz * mass;\n }\n\n const body = bodies[0];\n body.vx = -px / SOLAR_MASS;\n body.vy = -py / SOLAR_MASS;\n body.vz = -pz / SOLAR_MASS;\n}\n\nfunction advance(dt) {\n const size = bodies.length;\n\n for (let i = 0; i < size; i++) {\n const bodyi = bodies[i];\n let vxi = bodyi.vx;\n let vyi = bodyi.vy;\n let vzi = bodyi.vz;\n for (let j = i + 1; j < size; j++) {\n const bodyj = bodies[j];\n const dx = bodyi.x - bodyj.x;\n const dy = bodyi.y - bodyj.y;\n const dz = bodyi.z - bodyj.z;\n\n const d2 = dx * dx + dy * dy + dz * dz;\n const mag = dt / (d2 * Math.sqrt(d2));\n\n const massj = bodyj.mass;\n vxi -= dx * massj * mag;\n vyi -= dy * massj * mag;\n vzi -= dz * massj * mag;\n\n const massi = bodyi.mass;\n bodyj.vx += dx * massi * mag;\n bodyj.vy += dy * massi * mag;\n bodyj.vz += dz * massi * mag;\n }\n bodyi.vx = vxi;\n bodyi.vy = vyi;\n bodyi.vz = vzi;\n }\n\n for (let i = 0; i < size; i++) {\n const body = bodies[i];\n body.x += dt * body.vx;\n body.y += dt * body.vy;\n body.z += dt * body.vz;\n }\n}\n\nfunction energy() {\n let e = 0;\n const size = bodies.length;\n\n for (let i = 0; i < size; i++) {\n const bodyi = bodies[i];\n\n e += 0.5 * bodyi.mass * ( bodyi.vx * bodyi.vx + bodyi.vy * bodyi.vy + bodyi.vz * bodyi.vz );\n\n for (let j = i + 1; j < size; j++) {\n const bodyj = bodies[j];\n const dx = bodyi.x - bodyj.x;\n const dy = bodyi.y - bodyj.y;\n const dz = bodyi.z - bodyj.z;\n\n const distance = Math.sqrt(dx * dx + dy * dy + dz * dz);\n e -= (bodyi.mass * bodyj.mass) / distance;\n }\n }\n return e;\n}\n\nconst n = +50000000;\n\noffsetMomentum();\n\nconsole.log(energy().toFixed(9));\nconst start = Date.now();\nfor (let i = 0; i < n; i++) {\n advance(0.01);\n}\nconst end = Date.now();\nconsole.log(energy().toFixed(9));\nconsole.log(\"elapsed:\",end-start);\n" }, { "path": "examples/nodejs/primes.js", "content": "(function () {\n\nfunction isPrime(p) {\n const upper = Math.sqrt(p);\n for(let i = 2; i <= upper; i++) {\n if (p % i === 0 ) {\n return false;\n }\n }\n return true;\n}\n\n// Return n-th prime\nfunction prime(n) {\n if (n < 1) {\n throw Error(\"n too small: \" + n);\n }\n let count = 0;\n let result = 1;\n while(count < n) {\n result++; \n if (isPrime(result)) {\n count++;\n }\n }\n return result;\n}\n\nconsole.log(\"your prime is \", prime(100000));\n\n}());\n" }, { "path": "examples/nodejs/wasm.js", "content": "(function (){\nlet bytes = new Uint8Array([\n 0x00, 0x61, 0x73, 0x6d, 0x01, 0x00, 0x00, 0x00,\n 0x01, 0x07, 0x01, 0x60, 0x02, 0x7f, 0x7f, 0x01,\n 0x7f, 0x03, 0x02, 0x01, 0x00, 0x07, 0x07, 0x01,\n 0x03, 0x73, 0x75, 0x6d, 0x00, 0x00, 0x0a, 0x0a,\n 0x01, 0x08, 0x00, 0x20, 0x00, 0x20, 0x01, 0x6a,\n 0x0f, 0x0b\n]);\n\nconsole.log(bytes);\nlet mod = new WebAssembly.Module(bytes);\nlet instance = new WebAssembly.Instance(mod, {});\nconsole.log(instance.exports);\nreturn instance.exports.sum(2020, 1);\n}());\n" }, { "path": "examples/python3/factorial.py", "content": "def factorial():\n f, n = 1, 1\n while True: # First iteration:\n yield f # yield 1 to start with and then\n f, n = f * n, n+1 # f will now be 1, and n will be 2, ...\n\nfor index, factorial_number in zip(range(51), factorial()):\n print('{i:3}!= {f:65}'.format(i=index, f=factorial_number))\n\n" }, { "path": "examples/python3/fibonacci.py", "content": "def fib():\n a, b = 0, 1\n while True: # First iteration:\n yield a # yield 0 to start with and then\n a, b = b, a + b # a will now be 1, and b will also be 1, (0 + 1)\n\nfor index, fibonacci_number in zip(range(100), fib()):\n print('{i:3}: {f:3}'.format(i=index, f=fibonacci_number))\n\n" }, { "path": "examples/python3/pi.py", "content": "from decimal import Decimal, getcontext\ngetcontext().prec=60\nsummation = 0\nfor k in range(50):\n\tsummation = summation + 1/Decimal(16)**k * (\n\t\tDecimal(4)/(8*k+1)\n\t\t- Decimal(2)/(8*k+4)\n\t\t- Decimal(1)/(8*k+5)\n\t\t- Decimal(1)/(8*k+6)\n\t\t)\n\tprint(summation)\n\n" }, { "path": "examples/ruby/helloWorld.rb", "content": "=begin\n# The famous Hello World\n# Program is trivial in\n# Ruby. Superfluous:\n#\n# * A \"main\" method\n# * Newline\n# * Semicolons\n#\n# Here is the Code:\n=end\n\nputs \"Hello World!\"\n\n" }, { "path": "examples/ruby/love.rb", "content": "# Output \"I love Ruby\"\nsay = \"I love Ruby\"; puts say\n\n# Output \"I *LOVE* RUBY\"\nsay['love'] = \"*love*\"; puts say.upcase\n\n# Output \"I *love* Ruby\", 5 times\n5.times { puts say }\n\n" }, { "path": "examples/ruby/powOf2.rb", "content": "puts(2 ** 1)\nputs(2 ** 2)\nputs(2 ** 3)\nputs(2 ** 10)\nputs(2 ** 100)\nputs(2 ** 1000)\n" }, { "path": "login.html", "content": "\n\n\n \n \n \n Tailscale login\n\n\n Loading network code...\n\n\n" }, { "path": "nginx.conf", "content": "worker_processes 1;\n\nevents {\n worker_connections 1024;\n}\n\nerror_log nginx_main_error.log info;\npid nginx_user.pid;\ndaemon off;\n\nhttp {\n access_log nginx_access.log;\n error_log nginx_error.log info;\n\n types {\n text/html html htm shtml;\n text/css css;\n application/javascript js;\n application/wasm wasm;\n image/png png;\n image/jpeg jpg jpeg;\n image/svg+xml svg;\n }\n\n default_type application/octet-stream;\n\n sendfile on;\n \n server {\n#\tlisten 8080 ssl;\n\tlisten 8081;\n server_name localhost;\n\n\tgzip on;\n # Enable compression for .wasm, .js and .txt files (used for the runtime chunks)\n\tgzip_types application/javascript application/wasm text/plain\n\n charset utf-8;\n\n#\tssl_certificate nginx.crt;\n#\tssl_certificate_key nginx.key;\n\n location / {\n root build;\n autoindex on;\n index index.html index.htm;\n add_header 'Cross-Origin-Opener-Policy' 'same-origin' always;\n add_header 'Cross-Origin-Embedder-Policy' 'require-corp' always;\n add_header 'Cross-Origin-Resource-Policy' 'cross-origin' always;\n }\n }\n}\n" }, { "path": "package.json", "content": "{\n\t\"name\": \"webvm\",\n\t\"version\": \"2.0.0\",\n\t\"private\": true,\n\t\"scripts\": {\n\t\t\"dev\": \"vite dev\",\n\t\t\"build\": \"vite build\"\n\t},\n\t\"devDependencies\": {\n\t\t\"@anthropic-ai/sdk\": \"^0.33.0\",\n\t\t\"@fortawesome/fontawesome-free\": \"^6.6.0\",\n\t\t\"@leaningtech/cheerpx\": \"latest\",\n\t\t\"@oddbird/popover-polyfill\": \"^0.4.4\",\n\t\t\"@sveltejs/adapter-auto\": \"^3.0.0\",\n\t\t\"@sveltejs/adapter-static\": \"^3.0.5\",\n\t\t\"@sveltejs/kit\": \"^2.0.0\",\n\t\t\"@sveltejs/vite-plugin-svelte\": \"^3.0.0\",\n\t\t\"@xterm/addon-fit\": \"^0.10.0\",\n\t\t\"@xterm/addon-web-links\": \"^0.11.0\",\n\t\t\"@xterm/xterm\": \"^5.5.0\",\n\t\t\"autoprefixer\": \"^10.4.20\",\n\t\t\"labs\": \"git@github.com:leaningtech/labs.git\",\n\t\t\"node-html-parser\": \"^6.1.13\",\n\t\t\"postcss\": \"^8.4.47\",\n\t\t\"postcss-discard\": \"^2.0.0\",\n\t\t\"svelte\": \"^4.2.7\",\n\t\t\"tailwindcss\": \"^3.4.9\",\n\t\t\"vite\": \"^5.0.3\",\n\t\t\"vite-plugin-static-copy\": \"^1.0.6\",\n\t\t\"html2canvas-pro\": \"^1.5.8\"\n\t},\n\t\"type\": \"module\"\n}\n" }, { "path": "postcss.config.js", "content": "export default {\n\tplugins: {\n\t\ttailwindcss: {},\n\t\tautoprefixer: {},\n\t\t'postcss-discard': {rule: function(node, value)\n\t\t{\n\t\t\tif(!value.startsWith('.fa-') || !value.endsWith(\":before\"))\n\t\t\t\treturn false;\n\t\t\tswitch(value)\n\t\t\t{\n\t\t\t\tcase '.fa-info-circle:before':\n\t\t\t\tcase '.fa-wifi:before':\n\t\t\t\tcase '.fa-microchip:before':\n\t\t\t\tcase '.fa-compact-disc:before':\n\t\t\t\tcase '.fa-discord:before':\n\t\t\t\tcase '.fa-github:before':\n\t\t\t\tcase '.fa-star:before':\n\t\t\t\tcase '.fa-circle:before':\n\t\t\t\tcase '.fa-trash-can:before':\n\t\t\t\tcase '.fa-book-open:before':\n\t\t\t\tcase '.fa-user:before':\n\t\t\t\tcase '.fa-screwdriver-wrench:before':\n\t\t\t\tcase '.fa-desktop:before':\n\t\t\t\tcase '.fa-mouse-pointer:before':\n\t\t\t\tcase '.fa-hourglass-half:before':\n\t\t\t\tcase '.fa-hand:before':\n\t\t\t\tcase '.fa-brain:before':\n\t\t\t\tcase '.fa-download:before':\n\t\t\t\tcase '.fa-keyboard:before':\n\t\t\t\tcase '.fa-thumbtack:before':\n\t\t\t\tcase '.fa-brands:before':\n\t\t\t\tcase '.fa-solid:before':\n\t\t\t\tcase '.fa-regular:before':\n\t\t\t\t\treturn false;\n\t\t\t}\n\t\t\treturn true;\n\t\t}}\n\t},\n}\n" }, { "path": "scrollbar.css", "content": ".scrollbar {\n scrollbar-color: #777 #0000;\n}\n\n.scrollbar *::-webkit-scrollbar {\n height: 6px;\n width: 6px;\n background-color: #0000;\n}\n\n/* Add a thumb */\n.scrollbar *::-webkit-scrollbar-thumb {\n border-radius: 3px;\n height: 6px;\n width: 6px;\n background: #777;\n}\n\n.scrollbar *::-webkit-scrollbar-thumb:hover {\n background: #555;\n}\n" }, { "path": "serviceWorker.js", "content": "async function handleFetch(request) {\n\t// Perform the original fetch request and store the result in order to modify the response.\n\ttry {\n\t\tvar r = await fetch(request);\n\t}\n\tcatch (e) {\n\t\tconsole.error(e)\n\t}\n\tif (r.status === 0) {\n\t\treturn r;\n\t}\n\t// We add headers to the original response its headers, in order to enable cross-origin-isolation. And make it independent of the server config.\n\tconst newHeaders = new Headers(r.headers);\n\t// COEP & COOP for cross-origin-isolation.\n\tnewHeaders.set(\"Cross-Origin-Embedder-Policy\", \"require-corp\");\n\tnewHeaders.set(\"Cross-Origin-Opener-Policy\", \"same-origin\");\n\tnewHeaders.set(\"Cross-Origin-Resource-Policy\", \"cross-origin\");\n\t/**\n\t * This workaround is necessary due to a limitation of CheerpOS, which relies on the response URL being set to the resolved URL.\n\t * When constructing a new response object, the URL is not set by the Response() constructor and the serviceworker respondwith() method will set the url to event.request.url in case of an empty string.\n\t * To address this, we set the location URL to the resolved response URL and set the status code to 301 in the new Response object.\n\t * This causes the request to bounce back to the serviceworker from Cheerpos, with the event.request.url now set to the resolved URL, which allows the respondWith method to properly set the response URL in our new response.\n\t * https://developer.mozilla.org/en-US/docs/Web/API/FetchEvent/respondWith.\n\t*/\n\tif (r.redirected === true)\n\t\tnewHeaders.set(\"location\", r.url);\n\t// In case of a redirection, we set the status to 301, and body to null, in order to not transfer too much data needlessly\n\tconst moddedResponse = new Response(r.redirected === true ? null : r.body, {\n\t\theaders: newHeaders,\n\t\tstatus: r.redirected === true ? 301 : r.status,\n\t\tstatusText: r.statusText,\n\t});\n\treturn moddedResponse;\n}\n\nfunction serviceWorkerInit() {\n\t// Init the service worker.\n\tself.addEventListener(\"install\", () => self.skipWaiting());\n\tself.addEventListener(\"activate\", e => e.waitUntil(self.clients.claim()));\n\t// Listen for fetch requests and call handleFetch function.\n\tself.addEventListener(\"fetch\", function (e) {\n\t\ttry {\n\t\t\te.respondWith(handleFetch(e.request));\n\t\t} catch (err) {\n\t\t\tconsole.log(\"Serviceworker NetworkError:\" + err);\n\t\t}\n\t});\n}\n\nasync function doRegister() {\n\ttry {\n\t\tconst registration = await navigator.serviceWorker.register(window.document.currentScript.src);\n\t\tconsole.log(\"Service Worker registered\", registration.scope);\n\t\t// EventListener to make sure that the page gets reloaded when a new serviceworker gets installed.\n\t\t// f.e on first access.\n\t\tregistration.addEventListener(\"updatefound\", () => {\n\t\t\tconsole.log(\"Reloading the page to transfer control to the Service Worker.\");\n\t\t\ttry {\n\t\t\t\twindow.location.reload();\n\t\t\t} catch (err) {\n\t\t\t\tconsole.log(\"Service Worker failed reloading the page. ERROR:\" + err);\n\t\t\t};\n\t\t});\n\t\t// When the registration is active, but it's not controlling the page, we reload the page to have it take control.\n\t\t// This f.e occurs when you hard-reload (shift + refresh). https://www.w3.org/TR/service-workers/#navigator-service-worker-controller\n\t\tif (registration.active && !navigator.serviceWorker.controller) {\n\t\t\tconsole.log(\"Reloading the page to transfer control to the Service Worker.\");\n\t\t\ttry {\n\t\t\t\twindow.location.reload();\n\t\t\t} catch (err) {\n\t\t\t\tconsole.log(\"Service Worker failed reloading the page. ERROR:\" + err);\n\t\t\t};\n\t\t}\n\t}\n\tcatch {\n\t\tconsole.error(\"Service Worker failed to register:\", e)\n\t}\n}\n\nasync function serviceWorkerRegister() {\n\tif (window.crossOriginIsolated) return;\n\tif (!window.isSecureContext) {\n\t\tconsole.log(\"Service Worker not registered, a secure context is required.\");\n\t\treturn;\n\t}\n\t// Register the service worker and reload the page to transfer control to the serviceworker.\n\tif (\"serviceWorker\" in navigator)\n\t\tawait doRegister();\n\telse\n\t\tconsole.log(\"Service worker is not supported in this browser\");\n}\n\nif (typeof window === 'undefined') // If the script is running in a Service Worker context\n\tserviceWorkerInit()\nelse // If the script is running in the browser context\n\tserviceWorkerRegister();\n" }, { "path": "src/app.html", "content": "\n\n\t\n\t\t\n\t\t\n\t\tWebVM - Linux virtualization in WebAssembly\n\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t%sveltekit.head%\n\t\n\t\n\t\t
%sveltekit.body%
\n\t\n\n" }, { "path": "src/lib/AnthropicTab.svelte", "content": "\n

Claude AI Integration

\n

WebVM is integrated with Claude by Anthropic AI. You can prompt the AI to control the system.

\n

You need to provide your API key. The key is only saved locally to your browser.

\n
\n\t

\n\t\tConversation history\n\t\t\n\t\t\n\t\t\n\t

\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t{#each $messageList as msg}\n\t\t\t\t\t{@const details = getMessageDetails(msg)}\n\t\t\t\t\t{#if details.isToolUse}\n\t\t\t\t\t\t

{details.messageContent}

\n\t\t\t\t\t{:else if !details.isToolResult}\n\t\t\t\t\t\t

{details.messageContent}

\n\t\t\t\t\t{/if}\n\t\t\t\t{/each}\n\t\t\t
\n\t\t
\n\t
\n
\n{#if $apiState == \"KEY_REQUIRED\"}\n\t