The Linux worker for Opifica: it runs on Linux build machines and runs every job in a fresh VM using Firecracker (KVM).
Status: early development. See the organisation page for the architecture.
- Connects out to the Opifica controller over gRPC + mTLS (no inbound ports needed)
- Keeps a warm pool of pre-booted VMs cloned from signed golden images
- Hands each job a fresh VM, then destroys it when the job finishes
- Serves the repository from a local Git mirror and passes runtime secrets to the guest agent
All of this, apart from the hypervisor driver, comes from the shared worker kit in
opifica/pkg/worker. This repository contains only the Linux-specific code.
- Linux host with KVM (
/dev/kvm) - Firecracker