Burrito is our answer to the problem of distributing Elixir CLI applications across varied environments, where we cannot guarantee that the Erlang runtime is installed, and where we lack the permissions to install it ourselves. In particular, we have CLI tooling that must be deployed on-premise, by consultants, into customer environments that may be running MacOS, Linux, or Windows.
Furthermore, these tools depend on NIFs that we need to cross-compile for any of the environments that we support, from one common build server, running in our CI environment.
We were heavily inspired by Bakeware, which lays a lot of the ground work for our approach. Ultimately we implemented and expanded upon many of Bakeware's ideas using Zig.
- Builds a self-extracting archive for a Mix project, targeting Windows, MacOS, and Linux, containing:
- Your compiled BEAM code
- The required ERTS for your project
- Compilation artifacts for any elixir-make based NIFs used by the project
- Provides a "plugin" interface for injecting Zig code into your application's boot sequence
- We use this to perform automatic updates and licensing checks (see
lib/versions/release_file.ex
for details)
- We use this to perform automatic updates and licensing checks (see
- Automatically uninstalls old versions of the payload if a new version is run.
Burrito is composed of a few different components:
- Mix Release Module - A module that is executed as a Mix release step. This module takes care of packing up the files, downloading and copying in different ERTS runtimes, and launching the Zig Archiver and Wrapper.
- Zig Archiver - A small Zig library that packs up an entire directory into a tar-like blob. This is known as the "payload" -- which will contain all the compiled BEAM code for your release, and the ERTS for the target platform. This is Gzip compressed and then embedded directly into the wrapper program.
- Zig Wrapper - This is portable cross-platform Zig code that wraps around the payload generated during the Mix release process.
Burrito Produced Binary
┌────────────────────────────────┐
│ │
│ Zig Wrapper Binary │ <---- Compiled from `wrapper.zig`
│ │
├────────────────────────────────┤
│ Payload Archive │
│ ┌────────────────────────────┐ │
│ │ │ │
│ │ ERTS Native Binaries │ <------ If cross-compiling, this is downloaded from a build server
│ │ │ │
│ └────────────────────────────┘ │
│ │ <---- This bottom payload portion is generated by `archiver.zig`
│ ┌────────────────────────────┐ │
│ │ │ │
│ │ Application BEAM Code │ │
│ │ │ │
│ └────────────────────────────┘ │
│ │
└────────────────────────────────┘
- You build a Burrito wrapped binary of your application and send it to an end-user
- The end-user launches your binary like any other native application on their system
- In the background (first-run only) the payload is extracted into a well defined location on the system. (AppData, Application Support, etc.)
- The wrapper executes the Erlang runtime in the background, and transparently launches your application within the same process
- Subsequent runs of the same version of that application will use the previously extracted payload
Burrito was built with our specific use case in mind, and while we've found success with deploying applications packaged using Burrito to a number of production environments, the approach we're taking is still experimental.
That being said, we're excited by our early use of the tooling, and are eager to accept community contributions that improve the reliability of Burrito, or that add support for additional platforms.
NOTE: Due to current limitations of Zig, some platforms are less suited as build machines than others: we've found the most success building from Linux and MacOS. The matrix below outlines which build targets are currently supported by each host.
Target | Host | Host | Host | Host |
---|---|---|---|---|
Windows x64 | Linux | MacOS (x86_64) | MacOS (Apple Silicon)** | |
Windows x64 | ❌ | ✅ | ✅ | ❌ |
Linux | ❌ | ✅ | ✅ | ❌ |
MacOS (x86_64) | ❌ | ✅ | ❌ | |
MacOS (Apple Silicon)** | ❌ | ❌ | ❌ | ❌ |
* NIFs implemented using elixir-make
cannot be cross-compiled from Linux to MacOS, pending a proposed linker change in Zig
** It's possible that Rosetta can execute the x86_64 MacOS binaries, however we do not have access to an Apple Silicon machine to verify this. Automated testing of Apple silicon builds is blocked on support for Apple Silicon in Github Actions.
You must have the following installed and in your PATH:
- Zig (0.9.0) --
zig
- Gzip --
gzip
- 7z --
7z
- Add
burrito
to your list of dependencies:
defp deps() do
[{:burrito, github: "burrito-elixir/burrito"}]
end
- Create a
releases
function in yourmix.exs
, add and configure the following for your project:
def releases do
[
example_cli_app: [
steps: [:assemble, &Burrito.wrap/1],
burrito: [
targets: [
macos: [os: :darwin, cpu: :x86_64],
linux: [os: :linux, cpu: :x86_64],
windows: [os: :windows, cpu: :x86_64]
],
]
]
]
end
(See the Mix Release Config Options for additional options)
- To build a release for all the targets defined in your
mix.exs
file:MIX_ENV=prod mix release
- You can also build a single target by setting the
BURRITO_TARGET
environment variable to the alias for that target (e.g. SettingBURRITO_TARGET=macos
builds only themacos
target defined above.)
NOTE: In order to speed up iteration times during development, if the Mix environment is not set to prod
, the binary will always extract its payload, even if that version of the application has already been unpacked on the target machine.
targets
- A list of atoms, the targets you want to build for (:darwin
,:win64
,:linux
,:linux_musl
) whenever you run amix release
command -- if not defined, defaults to native host platform only.debug
- Boolean, will produce a debug build if set to true. (Default:false
)no_clean
- Boolean, will not clean up after building if set to true. (Default:false
)plugin
- String, a path to a Zig file that contains a functionburrito_plugin_entry()
which will be called before unpacking the payload at runtime. See the example application for details.
BURRITO_TARGET
- Override the list of targets provided in your release configuration. (ex:BURRITO_TARGET=win64
,BURRITO_TARGET=linux,darwin
)
For Burrito to work properly you must define a :mod
in your project's Mix config:
def application do
[
mod: {MyEntryModule, []}
]
end
This module must implement the callbacks defined by the Application
module, as stated in the Mix documentation:
defmodule MyEntryModule do
def start(_, _) do
# Returning `{:ok, pid}` will prevent the application from halting.
# Use System.halt(exit_code) to terminate the VM when required
end
end
If you wish you retrieve the argv passed to your program by Burrito use this snippet:
args = Burrito.Util.Args.get_arguments() # this returns a list of strings
Binaries built by Burrito include a built-in set of commands for performing maintenance operations against the included application:
./my-binary maintenance uninstall
- Will prompt to uninstall the unpacked payload on the host machine.
Burrito runs the mix release task in three "Phases". Each of these phases contains a number of "Steps", and a context struct containing the current state of the build, which is passed between each step.
The three phases of the Burrito build pipeline are:
Fetch
- This phase is responsible for downloading or copying in any replacement ERTS builds for cross-build targets.Patch
- The patch phase injects custom scripts into the build directory, this phase is also where any custom files should be copied into the build directory before being archived.Build
- This is the final phase in the build flow, it produces the final wrapper binary with a payload embedded inside.
You can add your own steps before and after phases execute. Your custom steps will also receive the build context struct, and can return a modified one to customize a build to your liking.
An example of adding a step before the fetch phase, and after the build phase:
# ... mix.exs file
def releases do
[
my_app: [
steps: [:assemble, &Burrito.wrap/1],
burrito: [
# ... other Burrito configuration
extra_steps: [
fetch: [pre: [MyCustomStepModule, AnotherCustomStepModule]],
build: [post: [CustomStepAgain, YetAnotherCustomStepModule]]
]
]
]
]
end
A Burrito build target is a keyword list that contains an operating system, a CPU architecture, and extra build options (called Qualifiers).
Here's a definition for a build target configured for Linux x86-64:
targets: [
linux: [os: :linux, cpu: :x86_64]
]
Build targets can be further customized using build qualifiers. For example, a Linux build target can be configured to use musl
instead of glibc
using the following definition:
targets: [
linux_musl: [
os: :linux,
cpu: :x86_64,
libc: :musl
]
]
Build qualifiers are a simple way to pass specific flags into the Burrito build pipeline. Currently, only the libc
and local_erts
qualifiers have any affect on the standard Burrito build phases and steps.
Tip: You can use these qualifiers as a way to pass per-target information into your custom build steps.
The Burrito project provides precompiled builds of Erlang for the following platforms:
[os: :darwin, cpu: :x86_64],
[os: :linux, cpu: :x86_64, libc: :glibc], # or just [os: :linux, cpu: :x86_64]
[os: :linux, cpu: :x86_64, libc: :musl],
[os: :windows, cpu: :x86_64]
If you require a custom build of ERTS, you're able to override the precompiled binaries on a per target basis by setting local_erts to the path of your ERTS build:
targets: [
linux_arm: [
os: :linux,
cpu: :arm64,
local_erts: "/path/to/my_custom_erts.tar.gz"
]
]
The local_erts
value should be a path to a local .tar.gz
of a release from the Erlang source tree. The structure inside the archive should mirror:
. (TAR Root)
└─ otp-A.B.C-OS-ARCH
├─ erts-X.Y.Z/
├─ releases/
├─ lib/
├─ misc/
├─ usr/
└─ Install
You can easily build an archive like this by doing the following commands inside the (official Erlang source code)[https://github.com/erlang/otp]:
# configure and build Erlang as you require...
# ...
export RELEASE_ROOT=$(pwd)/release/otp-A.B.C-OS-ARCH
make release
cd release
tar czf my_custom_erts.tar.gz otp-A.B.C-OS-ARCH
Minimizing the runtime dependencies of the package binaries is an explicit design goal, and the requirements for each platform are as follows:
- MSVC Runtime for the Erlang version you are shipping
- Windows 10 Build 1511 or later (for ANSI color support)
- Any distribution with glibc (or musl libc)
- libncurses-5
- No runtime dependencies, however a security exemption must be set in MacOS Gatekeeper unless the binary undergoes codesigning
We are happy to review and accept pull requests to improve Burrito, and ask that you follow the established code formatting present in the repo!
Everything in this repo is licensed under The MIT License, see LICENSE
for the full license text.