Images

195 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 195 available now.

B 1
ollama
Local LLM runtime that pulls, runs, and serves open models (Llama, Gemma, Qwen, DeepSeek, and more) behind a simple REST API. CPU-only image; the chart mounts a writable volume for the model store.
v0.32.51.6 GB
Machine learning & AIstandardMIT
D 2
opa
Open Policy Agent, the CNCF general-purpose policy engine. Evaluates Rego policies over JSON and YAML to enforce authorization, admission control, and configuration rules across the stack.
v1.18.213.2 MB
Security & supply chainstandardApache-2.0
B 1
OpenBao
Open-source secrets and encryption management for tokens, keys, and certificates, with dynamic secrets and leasing. The Linux Foundation MPL-2.0 community fork of HashiCorp Vault.
v2.6.142.2 MB
SecretsstandardMPL-2.0
A+
openfga
Fine-grained authorization engine (Zanzibar-style relationship-based access control) over HTTP and gRPC. From source on a hardened nonroot Wolfi base; datastore is the operator's choice.
v1.18.120.6 MB
IdentitystandardApache-2.0
A+
openldap
OpenLDAP slapd, the reference open-source LDAP directory server, with the LMDB (back-mdb) backend and the client tools. Runs nonroot on unprivileged ports 1389/1636 and backs directory-driven auth for the identity stack.
v2.6.1311.9 MB
IdentitystandardOLDAP-2.8
D 49
OpenSearch
Search and analytics suite with a Kibana-style dashboards UI. The Apache-2.0 community fork of Elasticsearch and the recommended open alternative.
v3.7.0965.3 MB
SearchstandardApache-2.0
B 1
OpenTelemetry Collector
OpenTelemetry Collector that receives, processes, and exports traces, metrics, and logs, a vendor-neutral pipeline for telemetry routing.
v0.156.0115.6 MB
ObservabilitystandardApache-2.0
D 2
opentofu
Open-source, community-governed fork of Terraform, an infrastructure-as-code CLI. Image only, no chart.
v1.12.534.8 MB
CI/CD & registrystandardMPL-2.0
A+
perl
Hardened Perl interpreter for scripts, text processing, and tooling. A base image to FROM for Perl workloads. Latest stable (5).
v5.44.014.2 MB
Language runtimestandardArtistic-1.0-Perl OR GPL-1.0+
B 2
perses
CNCF dashboards and observability visualization tool with an embedded React UI and 24 default panel/datasource plugins. From source (Node UI build embedded in a static Go binary) on a hardened nonroot Wolfi base.
v0.53.192.1 MB
ObservabilitystandardApache-2.0
A+
pgbouncer
Lightweight connection pooler for PostgreSQL that fronts thousands of client connections with a small backend pool, cutting per-connection overhead.
v1.25.27.6 MB3 versions
RelationalstandardISC
A+
pgpool
PostgreSQL connection pooler, load balancer and query router. Pools client connections, spreads read-only queries across streaming-replication standbys, and detaches a backend that fails its health check.
v4.7.216.4 MB3 versions
RelationalstandardHPND