emirb

Fixed!

Hi HN. I was part of ShipIt in the early Ubuntu years, handing out Live CDs at school 20 years ago. A Live CD was magic: try the real OS without committing your computer to it. But first: download the ISO, burn it, reboot, BIOS boot order, drivers...and if you liked it, dual boot and partitions. Canonical spent years attacking that friction (ShipIt mailed millions of CDs, Wubi skipped the burning and the repartitioning). Many years later the tech is seriously good that the whole thing can be a click away :-)

So: press Boot button and you get your own Omarchy 4.0.2 machine in seconds running in a Cloudflare Container started near you, streamed to your browser tab. No nested VM, no VNC, no tricks. Someone asks "what is Omarchy?", just send them a link.

The tech behind it uses Hyprland running on a headless output with no GPU at all, rendered by Mesa's llvmpipe. A daemon in the container captures the output over Wayland screencopy, hashes rows so only changed stripes get encoded, encodes them with x264, and ships H.264 over one WebSocket. Then the browser decodes with WebCodecs in a worker and sends input back on the same socket. Cloudflare's AMD EPYC cores render it, your browser's hardware decoder displays it. A Worker in front does the queuing logic, with one machine per person. For bot detection I added Turnstile plus an Anubis proof of work on the Boot button.

Desktop is visible in 5-6 seconds after the click. Works best on a desktop browser.

This was ridiculous to build and Cloudflare's infrastructure made it too much fun :D Not affiliated with Omarchy in any way.

Happy to answer anything!

You're right, that line was overstated in the homepage. I guess security model as with any public mirror in FOSS world?

Git hash checks protect object integrity, so GitDelivr can't silently corrupt a packfile without Git noticing, but that still doesn't make it fully trusted.

Yes the code could still lie about refs/HEAD and serve a different but internally valid history, and Git would accept it. The endgame here is if this is something Cloudflare would pick up (or any other big player) to offer it for free, then you'd trust it because it's a big name (and not a new domain bought yesterday after a weekend project heh)

So the accurate security model is a) GitDelivr preserves Git object integrity b) it does not by itself guarantee authenticity of refs in a way you can verify it c) in that sense it's as close to using any other HTTPS Git mirror or CDN?