Deployment matrix
April 10, 2026 · View on GitHub
Published container images (GHCR) and release binaries: tags, platforms, and when eBPF applies.
Quick local setup: examples/ (Docker Compose). Broader deployment topics: DEPLOYMENT.md, EBPF-SETUP.md.
Docker images
Local: examples/ (Docker Compose). Published runtime images (linux/amd64, linux/arm64):
| Image | Base | User | Capabilities |
|---|---|---|---|
ghcr.io/biandratti/huginn-proxy:latest | debian:trixie-slim (Debian 13) | 10001 | Proxy (eBPF build) — reads pinned maps — CAP_BPF |
ghcr.io/biandratti/huginn-proxy-plain:latest | debian:trixie-slim (Debian 13) | 10001 | Proxy without eBPF in the binary |
ghcr.io/biandratti/huginn-proxy-ebpf-agent:latest | debian:trixie-slim (Debian 13) | root | Agent loads XDP — CAP_BPF CAP_NET_ADMIN CAP_PERFMON |
Runtime images use the same base as docker/proxy.Dockerfile and docker/ebpf-agent.Dockerfile (FROM debian:trixie-slim@…).
Three separate GHCR packages; each uses the same tags latest and vX.Y.Z (no plain- / ebpf-agent- prefix on the tag). Version pins: GitHub Releases.
Release binaries
| Artifact | Suffix | OS | Arch | libc | eBPF |
|---|---|---|---|---|---|
huginn-proxy | x86_64-unknown-linux-musl | Linux | amd64 | musl (static) | No |
huginn-proxy | aarch64-unknown-linux-musl | Linux | arm64 | musl (static) | No |
huginn-proxy | x86_64-unknown-linux-gnu-ebpf | Linux | amd64 | glibc | Yes (reader) |
huginn-proxy | aarch64-unknown-linux-gnu-ebpf | Linux | arm64 | glibc | Yes (reader) |
huginn-proxy | x86_64-apple-darwin | macOS | amd64 | — | No |
huginn-proxy | aarch64-apple-darwin | macOS | arm64 | — | No |
huginn-ebpf-agent | x86_64-unknown-linux-gnu-ebpf-agent | Linux | amd64 | glibc | Yes (loader) |
huginn-ebpf-agent | aarch64-unknown-linux-gnu-ebpf-agent | Linux | arm64 | glibc | Yes (loader) |
- musl (static): zero runtime dependencies; runs on any Linux kernel and distro (no TCP SYN via eBPF in this build).
- glibc (eBPF): Linux binaries extracted from or aligned with the Docker images; TCP SYN path needs kernel ≥ 5.11 and the agent where applicable.
Where to download
- GitHub Releases — attached files on each tag (same binaries as below).
- Actions — workflow Release for that tag → Artifacts (ZIP per platform; useful if you need the exact CI output).
Images stay on GHCR (ghcr.io/...); they are not listed on the Releases page as files.