Images

381 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 381 available now.

A+
nsq
Realtime distributed messaging platform. Ships nsqd, nsqlookupd, and nsqadmin as static Go binaries on a hardened nonroot Wolfi base; nsqd data path…
v1.3.011.8 MB3 versions
MessagingstandardMIT
A 1
ntfy
Simple HTTP-based pub-sub notification service for sending push notifications to phones and desktops from any script. From source with the web UI…
v2.29.021.4 MB2 versions
MessagingstandardApache-2.0
A 1
oauth2-proxy
Reverse-proxy authentication layer that secures upstream apps by delegating sign-in to OIDC and OAuth2 providers.
v7.15.510.6 MB
Secrets & identitystandardMIT
A+
odoo
Odoo Community Edition, the Python ERP and business apps suite (CRM, sales, inventory, accounting, website) backed by PostgreSQL. Built from the…
v19.0.20260929465.2 MB
Apps & productivitystandardLGPL-3.0
A 1
ollama
Local LLM runtime that pulls, runs, and serves open models (Llama, Gemma, Qwen, DeepSeek, and more) behind a simple REST API. CPU-only image; the…
v0.40.01.6 GB3 versions
Machine learning & AIstandardMIT
A 1
opa
Open Policy Agent, the CNCF general-purpose policy engine. Evaluates Rego policies over JSON and YAML to enforce authorization, admission control,…
v1.21.114.4 MB
Security & supply chainstandardApache-2.0
A 1
opa-gatekeeper
OPA Gatekeeper, the Kubernetes admission controller for Rego policies (ConstraintTemplates and Constraints, validating and mutating webhooks, audit…
v3.23.124.5 MB3 versions
Security & supply chainstandardApache-2.0
A 1
OpenBao
Open-source secrets and encryption management for tokens, keys, and certificates, with dynamic secrets and leasing. The Linux Foundation MPL-2.0…
v2.7.141.3 MB
SecretsstandardMPL-2.0
A 1
opencost
Kubernetes cost monitoring and allocation (CNCF). Serves the cost-model API on 9003 as a single static Go binary on a hardened nonroot Wolfi base,…
v1.121.339.6 MB3 versions
ObservabilitystandardApache-2.0
A+
openfga
Fine-grained authorization engine (Zanzibar-style relationship-based access control) over HTTP and gRPC. From source on a hardened nonroot Wolfi…
v1.22.021.8 MB2 versions
IdentitystandardApache-2.0
A+
openldap
OpenLDAP slapd, the reference open-source LDAP directory server, with the LMDB (back-mdb) backend and the client tools. Runs nonroot on unprivileged…
v2.7.112.1 MB2 versions
IdentitystandardOLDAP-2.8
A+
openresty
OpenResty, nginx with LuaJIT and the lua-nginx-module set for scriptable proxies and web apps. Built from source on Wolfi against the system OpenSSL,…
v1.31.1.120.3 MB2 versions
GatewaystandardBSD-2-Clause