Wolfi is a community Linux undistro designed for the container and cloud-native era. Chainguard started the Wolfi project to build Chainguard Images, our collection of curated distroless images that meet the requirements of a secure software supply chain. This required a Linux distribution with components at the appropriate granularity and with support for glibc. Building our own undistro also allows us to ensure packages have full provenance and metadata for supporting modern supply-chain se...| Wolfi on
Wolfi is a Linux distro created specifically for building stripped-down container images that only include the essential packages needed to run applications in containers. This makes it more secure, as there are fewer potential attack vectors due to the reduced surface area. Thanks to a fine-tuned maintenance process combining top-notch automation and established best practices from maintainers, Wolfi packages are updated quickly. This ensures that Wolfi users get patches and latest versions ...| Wolfi on
What is Wolfi and how does it compare to Alpine? Wolfi is our Linux undistro designed from the ground up to support newer computing paradigms such as containers. Although Wolfi has a few similar design principles as Alpine (such as using apk), it is a different distribution that is focused on supply chain security. Unlike Alpine, Wolfi does not currently build its own Linux kernel, instead relying on the host environment (e.| Wolfi on
apko uses the apk package manager to compose container images based on declarative pipelines. The apk format was introduced by Alpine Linux to address specific design requirements that could not be met by existing package managers such as apt and dnf. But what makes it different, and why does that matter in the context of apko? Manipulating the Desired State In traditional package managers like dnf and apt, requesting the installation or removal of packages causes those packages to be directl...| Wolfi on
Community workshop about Wolfi for beginners| Chainguard Academy
This document explains how to specify version constraints for packages installed with the apk tool, as well as apko and melange. Understanding version selection will enable you to choose the version you’re looking for, determine what updates and vulnerability fixes you receive, and can allow you to reproduce an image’s digest through exact version matching. Version selection in apko and melange All the examples in this document focus on usage with the apk tool, but the same semantics appl...| Chainguard Academy
This tutorial demonstrates how to build a Wolfi Python image from scratch, using a Dockerfile workflow.| Chainguard Academy