Images

195 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 195 available now.

A+
MariaDB
Community-developed relational database and drop-in MySQL successor, GPL-licensed and fully open. Default MySQL-compatible engine for the catalog.
v12.3.2117.9 MB3 versions
RelationalcriticalGPL-2.0
B 2
mattermost
Open-source, self-hosted team messaging and collaboration platform (a Slack alternative) with channels, direct messages, file sharing, and integrations. Packaged from Mattermost's official Team Edition server release; requires an external PostgreSQL.
v11.9.0403.6 MB
MessagingstandardAGPL-3.0
A+
maven
JDK base image with Apache Maven, used as the build stage for Maven projects; run the resulting jar on jre. Line 3.9.
v3.9.16110.1 MB3 versions
Build toolstandardApache-2.0
B 1
mediamtx
Real-time media server and proxy for RTSP, RTMP, HLS, WebRTC, and SRT. Single static Go binary on a hardened nonroot Wolfi base; config via a mounted mediamtx.yml.
v1.19.317.7 MB
Media & streamingstandardMIT
A+
Meilisearch
Fast, typo-tolerant full-text search engine with an instant-search API, easy to embed for site and in-app search with relevant results out of the box.
v1.51.094.1 MB3 versions
SearchstandardMIT
A+
Memcached
Simple, high-performance distributed in-memory cache for storing small objects and database query results to reduce backend load.
v1.6.457.2 MB
CachestandardBSD-3-Clause
D 4
mimir
Horizontally scalable, highly available long-term storage for Prometheus metrics. Single static Go binary (all-in-one or microservices target) on a hardened nonroot Wolfi base; object storage is the operator's choice.
v3.1.239.5 MB
ObservabilitystandardAGPL-3.0
B 1
miniflux
Minimalist, opinionated RSS and Atom feed reader with a clean web UI and a REST API. Single pure-Go static binary on a hardened nonroot Wolfi base; needs PostgreSQL at runtime (operator-provided).
v2.3.28.9 MB
Apps & productivitystandardApache-2.0
A+
mlflow
MLflow Tracking Server for the ML lifecycle — experiment tracking, model registry, and run metadata over a REST/UI on port 5000. Packaged as the lightweight mlflow-skinny stack (gunicorn + psycopg2 + boto3) on a hardened Wolfi python base; needs an external PostgreSQL backend store and an artifact store (S3 or PVC).
v3.14.0130.3 MB2 versions
Machine learning & AIstandardApache-2.0
C 1
MongoDB
Document (NoSQL) database for JSON-like data. SSPL is not OSI-approved / source-available, not open source; prefer the clean alternative FerretDB or DocumentDB.
v8.0.26171.9 MB3 versions
DocumentstandardSSPL-1.0
A+
mosquitto
Lightweight Eclipse MQTT broker for IoT and pub/sub messaging. Speaks MQTT 3.1/3.1.1/5.0 over TCP, TLS, and websockets; built from source with OpenSSL and a hardened nonroot, read-only-rootfs runtime.
v2.1.210.1 MB3 versions
MessagingstandardEPL-2.0 OR BSD-3-Clause
A+
MySQL
Widely used open-source relational database for general-purpose OLTP workloads, with broad framework and tooling support.
v9.7.2157.4 MB2 versions
RelationalcriticalGPL-2.0