Fixed!
294 karma · joined February 8, 2013
emirb.github.io
So: press Boot button and you get your own Omarchy 4.0.2 machine in seconds running in a Cloudflare Container started near you, streamed to your browser tab. No nested VM, no VNC, no tricks. Someone asks "what is Omarchy?", just send them a link.
The tech behind it uses Hyprland running on a headless output with no GPU at all, rendered by Mesa's llvmpipe. A daemon in the container captures the output over Wayland screencopy, hashes rows so only changed stripes get encoded, encodes them with x264, and ships H.264 over one WebSocket. Then the browser decodes with WebCodecs in a worker and sends input back on the same socket. Cloudflare's AMD EPYC cores render it, your browser's hardware decoder displays it. A Worker in front does the queuing logic, with one machine per person. For bot detection I added Turnstile plus an Anubis proof of work on the Boot button.
Desktop is visible in 5-6 seconds after the click. Works best on a desktop browser.
This was ridiculous to build and Cloudflare's infrastructure made it too much fun :D Not affiliated with Omarchy in any way.
Happy to answer anything!
Git hash checks protect object integrity, so GitDelivr can't silently corrupt a packfile without Git noticing, but that still doesn't make it fully trusted.
Yes the code could still lie about refs/HEAD and serve a different but internally valid history, and Git would accept it. The endgame here is if this is something Cloudflare would pick up (or any other big player) to offer it for free, then you'd trust it because it's a big name (and not a new domain bought yesterday after a weekend project heh)
So the accurate security model is a) GitDelivr preserves Git object integrity b) it does not by itself guarantee authenticity of refs in a way you can verify it c) in that sense it's as close to using any other HTTPS Git mirror or CDN?