thanks, looks good to me :)

Thank you @hannesm!
I just try to pin the opam-overlay directory to fix the last reproducibility issue before merging.

FWIW, we can from a release link to the build-info from https://builds.robur.coop/hash?sha256=<SHA256-of-the-unikernel-image>. And hopefully in the future document how you can replay / rebuild it ;) (there's orb rebuild - but we do not test this periodically -- it also lacks the information that you should run it in that specific docker container, and the apt/sources.list is not stored)

So pinning opam-overlay to an earlier commit permits me to get the previous hash. I think the situation is better now.

The last commit is to inform the user about the temporary disk usage with docker (thanks to @ben-grande for pointing out that in #186).

I do approve these changes. thanks a lot!