pwnkit-kernel-artifacts

Pre-built kernel + rootfs artifacts for pwnkit E2B sandboxes.

These artifacts are consumed by the 0cloud E2B template (services/worker-controller/e2b/Dockerfile.pwnkit in 0sec-labs/0cloud) to enable in-sandbox kernel-finding reproducer execution.

v0.1.0 — 2026-05-23

• bzImage — linux-6.8.12 built with x86_64_defconfig + KASAN (generic / inline / stack / vmalloc) + UBSAN + KCSAN + 9p + virtio + CONFIG_RANDOMIZE_BASE=n
• rootfs.img — 512 MB ext4, Debian bookworm minbase + GCC + binutils + gdb + /sbin/pwnkit-init (mounts 9p tag pwnkitshare, executes runner.sh)

See the release page for hashes + download links.

How artifacts are built

Built via pwnkit's packages/core/src/triage/kernel-vm/Dockerfile and build.sh. Source of truth is the OSS pwnkit repo; this repo only hosts the prebuilt binaries to keep the 0cloud template build fast.

License

Linux kernel: GPLv2. Debian rootfs: per-package licenses (see Debian sources). Build scripts: MIT (in pwnkit OSS).