Images

224 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 224 available now.

0 CVE
linkerd-control-plane
Linkerd's control plane `controller` binary (destination, identity, proxy-injector, sp-validator, service-mirror, heartbeat -- one binary, role…
Coordination & meshstandardApache-2.0
0 CVE
linkerd-policy-controller
Linkerd's Rust policy controller (policy-controller), serving Linkerd's authorization-policy CRDs to the proxy data plane over gRPC. Built from…
Coordination & meshstandardApache-2.0
0 CVE
linkerd-proxy
linkerd2-proxy, Linkerd's Rust data-plane sidecar (mTLS termination and meshed traffic routing) -- a from-scratch Rust proxy with no bundled C++…
Coordination & meshstandardApache-2.0
A 1
litestream
Streaming replication for SQLite databases to object storage such as S3, GCS, and Azure. Image only, no chart.
v0.5.1720.8 MB
Storage & platformstandardApache-2.0
A 1
livekit
WebRTC SFU server for scalable real-time audio, video, and data. Single static Go binary on a hardened nonroot Wolfi base; config via mounted YAML or…
v1.13.618.5 MB
Media & streamingstandardApache-2.0
C 6
Loki
Horizontally scalable log aggregation system from Grafana that indexes only labels, not full log text. Like Prometheus, but for logs. Licensed AGPL.
v3.7.788.6 MB
ObservabilitystandardAGPL-3.0
A 1
mailpit
Email and SMTP testing tool with a web UI for capturing and inspecting messages during development.
v1.31.19.6 MB
Apps & productivitystandardMIT
C 5
MariaDB
Community-developed relational database and drop-in MySQL successor, GPL-licensed and fully open. Default MySQL-compatible engine for the catalog.
v12.3.2118.1 MB3 versions
RelationalcriticalGPL-2.0
C 6
matomo
Matomo, the self-hosted web analytics platform and a privacy-respecting alternative to Google Analytics: you keep the raw data. Built from the…
v5.12.090.1 MB2 versions
Apps & productivitystandardGPL-3.0+
C 5
mattermost
Open-source, self-hosted team messaging and collaboration platform (a Slack alternative) with channels, direct messages, file sharing, and…
v11.10.1408.1 MB
MessagingstandardAGPL-3.0
C 5
maven
JDK base image with Apache Maven, used as the build stage for Maven projects; run the resulting jar on jre. Line 3.9.
v3.9.16110.2 MB3 versions
Build toolstandardApache-2.0
A 1
mediamtx
Real-time media server and proxy for RTSP, RTMP, HLS, WebRTC, and SRT. Single static Go binary on a hardened nonroot Wolfi base; config via a mounted…
v1.21.018.0 MB
Media & streamingstandardMIT