Images

224 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 224 available now.

A 1
oauth2-proxy
Reverse-proxy authentication layer that secures upstream apps by delegating sign-in to OIDC and OAuth2 providers.
v7.15.410.5 MB
Secrets & identitystandardMIT
A 1
ollama
Local LLM runtime that pulls, runs, and serves open models (Llama, Gemma, Qwen, DeepSeek, and more) behind a simple REST API. CPU-only image; the…
v0.34.01.6 GB
Machine learning & AIstandardMIT
A 1
opa
Open Policy Agent, the CNCF general-purpose policy engine. Evaluates Rego policies over JSON and YAML to enforce authorization, admission control,…
v1.20.214.3 MB
Security & supply chainstandardApache-2.0
C 7
OpenBao
Open-source secrets and encryption management for tokens, keys, and certificates, with dynamic secrets and leasing. The Linux Foundation MPL-2.0…
v2.6.241.7 MB
SecretsstandardMPL-2.0
A+
openfga
Fine-grained authorization engine (Zanzibar-style relationship-based access control) over HTTP and gRPC. From source on a hardened nonroot Wolfi…
v1.20.021.2 MB
IdentitystandardApache-2.0
C 4
openldap
OpenLDAP slapd, the reference open-source LDAP directory server, with the LMDB (back-mdb) backend and the client tools. Runs nonroot on unprivileged…
v2.6.1412.0 MB
IdentitystandardOLDAP-2.8
F 13
OpenSearch
Search and analytics suite with a Kibana-style dashboards UI. The Apache-2.0 community fork of Elasticsearch and the recommended open alternative.
v3.8.0933.5 MB
SearchstandardApache-2.0
C 5
OpenTelemetry Collector
OpenTelemetry Collector that receives, processes, and exports traces, metrics, and logs, a vendor-neutral pipeline for telemetry routing.
v0.159.0111.8 MB
ObservabilitystandardApache-2.0
C 3
opentofu
Open-source, community-governed fork of Terraform, an infrastructure-as-code CLI. Image only, no chart.
v1.12.634.6 MB
CI/CD & registrystandardMPL-2.0
C 1
perl
Hardened Perl interpreter for scripts, text processing, and tooling. A base image to FROM for Perl workloads. Latest stable (5).
v5.44.014.2 MB
Language runtimestandardArtistic-1.0-Perl OR GPL-1.0+
A 2
perses
CNCF dashboards and observability visualization tool with an embedded React UI and 24 default panel/datasource plugins. From source (Node UI build…
v0.54.0140.6 MB
ObservabilitystandardApache-2.0
C 3
pgbouncer
Lightweight connection pooler for PostgreSQL that fronts thousands of client connections with a small backend pool, cutting per-connection overhead.
v1.25.27.7 MB3 versions
RelationalstandardISC