sidecar-base
Connection sidecar — health, HL7 v2, FHIR R4, writeback.
Open source / Sidecar
Sidecar microVM templates
NixOS microVM templates for isolated sidecars, Python, Node, and static workloads.
Hebrah runs each connection in a sidecar microVM. The Nix flakes that produce those VMs are open source: `hebrah-vm-templates` is the golden-image repo used by the Mac orchestrator today, and `hebrah-sidecar` is the legacy flake for cold `nix run` builds. Both build with `microvm.nix` and ship rootfs artifacts ready for cloud or bare metal.
Templates
Golden images built with microvm.nix. Ships erofs rootfs when built on Linux.
py-base
Customer Python workloads inside a sidecar microVM.
node-base
Customer Node workloads inside a sidecar microVM.
static-base
nginx static sandbox served from a sidecar microVM.
Build a template
Needs Nix with flakes enabled. macOS users pair with a Lima Linux builder for the guest system.
Build
nix --extra-experimental-features 'nix-command flakes' \
build .#packages.x86_64-linux.sidecar-baseInspect outputs
nix --extra-experimental-features 'nix-command flakes' flake showWhat’s inside
Golden templates
`sidecar-base`, `py-base`, `node-base`, and `static-base` — the exact images our Mac and Linux orchestrators run.
microvm.nix native
Built on `microvm.nix` for vfkit on macOS and QEMU on Linux. Linux builds ship erofs rootfs ready for cloud.
Local loop
Lima Linux builder + `setup-nix-linux-builder.sh` reproduces the production VM promotion path on a laptop.
When to use the templates
- You want to run a local sidecar microVM that mirrors production.
- You are evaluating microvm.nix as a base for your own healthcare or regulated workload.
- You need to reproduce or fork the exact VM image that backs a Hebrah connection.
Legacy flake
hebrah-sidecar is the original Nix flake we shipped for cold nix run builds. Prefer hebrah-vm-templates for new VM work — it ships golden erofs bundles and is what the Mac orchestrator runs under HYPERVISOR=golden-qemu.