Images

195 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 195 available now.

A+
php
Hardened PHP CLI with common extensions, a base image to FROM for PHP apps. Latest 3 stable lines (8.3/8.4/8.5).
v8.5.948.2 MB3 versions
Language runtimestandardPHP-3.01
A+
pnpm
Node base image with pnpm preinstalled via corepack, used as the build stage for pnpm projects. Lines 10/11.
v11.18.060.8 MB
Build toolstandardMIT
B 2
pocketbase
Open-source backend in a single file with an embedded SQLite database, auth, file storage, realtime subscriptions, and an admin dashboard over a REST API. Pure-Go static binary (UI embedded) on a hardened nonroot Wolfi base; state on a writable volume.
v0.39.512.2 MB
Apps & productivitystandardMIT
A+
poetry
Python base image with Poetry for dependency management and packaging, used as the build stage for Python projects. Line 2.
v2.4.147.2 MB
Build toolstandardMIT
B 1
postgres-exporter
Prometheus exporter that collects PostgreSQL activity, replication, and performance stats and exposes them as metrics for monitoring.
v0.20.15.6 MB
Metrics/ExportercriticalApache-2.0
A+
PostgreSQL
Advanced open-source relational database (v18.x) with strong SQL, ACID transactions, JSON, and a rich extension ecosystem. The catalog's default SQL engine.
v18.482.4 MB3 versions
RelationalcriticalPostgreSQL
C 1
PostgreSQL + DocumentDB
PostgreSQL 17 plus the open DocumentDB extension, providing BSON document storage and queries. The storage backend that powers FerretDB v2.
v0.107.0135.8 MB3 versions
DocumentstandardMIT
A+
PostgreSQL 15
PostgreSQL 15.x build for the Coolify wave, which pins PG 15 (the default postgresql image tracks 18.x). Same hardened build with bundled contrib extensions.
v15.1852.7 MB3 versions
RelationalcriticalPostgreSQL
A+
postgrest
REST API server that serves a RESTful API directly from a PostgreSQL schema. Shipped as upstream's official prebuilt static binary. Image only, no chart.
v14.169.7 MB3 versions
Databases & enginesstandardMIT
B 2
Prometheus
Metrics collection, storage, and alerting system that scrapes targets and runs PromQL queries. The de-facto cloud-native monitoring TSDB.
v3.13.157.3 MB
ObservabilitystandardApache-2.0
A+
Pulsar
Cloud-native distributed messaging and streaming platform with multi-tenancy, geo-replication, and tiered storage that separates compute from storage.
v4.2.3311.4 MB
MessaginglowApache-2.0
B 1
pulumi
Infrastructure-as-code CLI for managing cloud resources with general-purpose programming languages. Image only, no chart.
v3.255.034.6 MB3 versions
CI/CD & registrystandardApache-2.0