# Source and build information

This distribution maps every bundled runtime image to a SHA-256 checksum in
`public/images/catalog.json` and `OS_IMAGE_LICENSES.json`.

- v86 source: https://github.com/copy/v86/tree/2f1346b0e7d88d4cbbbcc05fe15b4e369c3de23f
- Linux Workspace build configuration: `guest/alpine/Dockerfile` and `guest/alpine/build.sh`
- Alpine package sources: https://gitlab.alpinelinux.org/alpine/aports
- Alpine source package indexes: https://dl-cdn.alpinelinux.org/alpine/v3.21/
- Linux source: https://cdn.kernel.org/pub/linux/kernel/v6.x/
- BusyBox source: https://busybox.net/downloads/
- FreeDOS source: https://github.com/FDOS
- KolibriOS source: https://github.com/KolibriOS/kolibrios

The generated Alpine root filesystem and original virtual image downloads are recorded in
`public/images/catalog.json`. `npm run images:build` rebuilds Alpine from the versioned Dockerfile,
and `npm run assets:fetch` refuses any byte sequence whose checksum differs. To request a copy of the
corresponding source material for a distributed GPL image, open an issue in the
project repository and identify the image id, version, and checksum. This offer
is valid for at least three years after the last distribution of that image.