# chainguard os Published articles for chainguard os. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## What it took to reach 1 billion build manifests DevFeed: [What it took to reach 1 billion build manifests]() Original publisher: [Read original article]() Published: 2026-09-03T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [container images](), [chainguard os](), [supply-chain-security](), [sigstore](), [Linux](), [NumPy]() Tags: [chainguard](), [chainguard-factory](), [chainguard-os](), [container-images](), [go](), [open-source](), [provenance](), [sbom](), [sigstore](), [software-supply-chain]() ### AI overview Chainguard describes how it doubled container build output from 500 million to more than 1 billion manifests in six months. The article explains how Chainguard Factory and Chainguard OS support continuous rebuilds, while using source builds, SLSA Level 3 provenance, Sigstore signatures, and full SBOMs. ### Source excerpt Chainguard doubled its container build output in six months. Learn how Factory 2.0 uses AI and reconciliation to rebuild secure software at scale. ## Faster than the advisory DevFeed: [Faster than the advisory]() Original publisher: [Read original article]() Published: 2026-06-10T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Security](), [argo-cd](), [GitOps](), [Vulnerabilities](), [Kubernetes](), [chainguard os](), [anthropic](), [Artificial Intelligence]() Tags: [ai](), [anthropic](), [argo-cd](), [chainguard-containers](), [chainguard-os](), [container-images](), [gitops](), [kubernetes](), [scanner-advisories](), [security](), [vulnerabilities](), [wolfi]() ### AI overview The article explains how Chainguard Factory delivered a patched Argo CD version to Wolfi and Chainguard OS before the related security advisory reached GitHub's global advisory database. It argues that automated upstream tracking and rapid remediation are increasingly important because vulnerability exploitation and AI-assisted discovery are outpacing traditional disclosure timelines. ### Source excerpt Chainguard often ships security fixes before advisories reach scanners. Learn why upstream speed matters in the era of AI-driven exploits. ## Chainguard brings first-party RHEL 9 and RHEL 10 RPM support to Chainguard OS, joins FINOS DevFeed: [Chainguard brings first-party RHEL 9 and RHEL 10 RPM support to Chainguard OS, joins FINOS]() Original publisher: [Read original article]() Published: 2026-05-11T00:00:00Z Content type: news Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard os](), [chainguard containers](), [Security](), [Critical Infrastructure](), [Package Management](), [Open Source](), [Cloud Native Ecosystem](), [Resilience](), [APK](), [Linux]() Tags: [chainguard](), [chainguard-containers](), [chainguard-finserv](), [chainguard-os](), [cloud](), [cloud-native](), [compatibility](), [compliance](), [container](), [container-images](), [containers](), [critical-infrastructure](), [cve](), [dependencies](), [hardening](), [images](), [linux](), [make](), [mythos](), [open](), [open-source](), [project-glasswing](), [rhel](), [rhel-10](), [rhel-9]() ### AI overview Chainguard announces first-party RHEL 9 and RHEL 10 RPM compatibility for packages in Chainguard Containers built on Chainguard OS. The company also announces that it is joining FINOS to support open source collaboration in financial infrastructure. ### Source excerpt Chainguard adds first-party RHEL 9/10 RPM compatibility and joins FINOS, helping financial institutions modernize securely for the AI-driven threat era. ## How we automatically test the world's most secure Linux distribution DevFeed: [How we automatically test the world's most secure Linux distribution]() Original publisher: [Read original article]() Published: 2026-05-01T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [test-coverage](), [chainguard os](), [Linux](), [chainguard containers]() Tags: [chainguard](), [chainguard-containers](), [chainguard-os](), [chainguard-packages](), [chainguard-testing](), [linux](), [test-coverage]() ### AI overview Chainguard OS has achieved 100% test coverage across its package and subpackage catalog. The automated tests execute software, verify behavior, and test service lifecycles across x86_64 and aarch64 packages before release. ### Source excerpt Chainguard OS achieves 100% package test coverage, verifying every component runs correctly to make rolling updates secure, reliable, and enterprise-ready. ## Managing third-party images at scale DevFeed: [Managing third-party images at scale]() Original publisher: [Read original article]() Published: 2026-04-16T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [container images](), [Security](), [Vulnerabilities](), [cloud-infrastructure](), [code productivity](), [chainguard]() Tags: [appian](), [chainguard](), [chainguard-containers](), [chainguard-images](), [chainguard-os](), [cloud](), [compliance](), [container-image](), [container-images](), [containers](), [dependencies](), [developer-velocity](), [fedramp](), [hardened-images](), [scale](), [security](), [third-party-container-images](), [vulnerabilities]() ### AI overview This article explains how Appian approached managing third-party container images at scale with Chainguard. It describes the operational burden caused by image dependencies, vulnerabilities, maintenance, and compliance requirements, including the ongoing work needed for regulated environments such as FedRAMP. It also estimates that building a complete internal hardened-image program would require a dedicated team of 15 to 20 engineers. ### Source excerpt Learn how companies can scale third-party container image management with Chainguard to reduce risk, cut toil, and accelerate compliance and developer velocity. ## Is Grype a single point of failure for Chainguard's CVE detection? DevFeed: [Is Grype a single point of failure for Chainguard's CVE detection?]() Original publisher: [Read original article]() Published: 2026-04-10T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [grype](), [chainguard](), [Malware](), [chainguard containers](), [Open Source](), [Containers]() Tags: [chainguard](), [chainguard-containers](), [chainguard-os](), [chainguard-scanners](), [containers](), [cve](), [grype](), [malware](), [open-source](), [source](), [supply-chain-attacks](), [trivy]() ### AI overview The article explains why Grype is not a single point of failure in Chainguard's CVE detection system. It describes layered defenses including building Grype from source, malware detection, and alternative input-source protections to improve the reliability of security findings. ### Source excerpt Is Grype a single point of failure? Learn how Chainguard uses layered defenses, source builds, and multiple data sources to ensure trusted CVE detection. ## Introducing Chainguard OS Packages: Secure ingredients for custom container builds DevFeed: [Introducing Chainguard OS Packages: Secure ingredients for custom container builds]() Original publisher: [Read original article]() Published: 2026-03-17T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard os](), [container images](), [Docker Hardened Images](), [Vulnerabilities](), [Linux](), [Automation](), [Dockerfile](), [Open Source](), [bazel](), [chainguard sboms](), [APK]() Tags: [apk](), [apko](), [automation](), [base-images](), [bazel](), [chainguard](), [chainguard-containers](), [chainguard-libraries](), [chainguard-os](), [chainguard-os-packages](), [chainguard-packages](), [chainguard-sboms](), [container](), [container-images](), [cve](), [dockerfiles](), [open-source](), [sboms](), [secure-software-packages](), [software-packages](), [vulnerabilities](), [zero-cve-packages]() ### AI overview Chainguard introduces Chainguard OS Packages, a service providing continuously maintained, enterprise-grade packages and base images for teams that build custom container images. Customers retain control over image composition and build tooling while Chainguard handles package sourcing, rebuilding, vulnerability remediation, and SBOM generation. ### Source excerpt Chainguard OS Packages are enterprise-grade, zero-CVE packages and base images built and continuously maintained in the Chainguard Factory. ## Guiding the future of Chainguard OS: Announcing the FUD Committee DevFeed: [Guiding the future of Chainguard OS: Announcing the FUD Committee]() Original publisher: [Read original article]() Published: 2026-01-22T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard os](), [Security](), [supply-chain-security](), [Open Source](), [Linux]() Tags: [chainguard](), [chainguard-containers](), [chainguard-customers](), [chainguard-os](), [chainguard-steering-committee](), [enterprise](), [open-source](), [requirements](), [secure-by-default](), [security](), [software-supply-chain](), [wolfi]() ### AI overview Chainguard announces the Fully User Directed (FUD) Committee, a customer-led steering committee intended to guide the future of Chainguard OS. The committee will represent customer organizations and help shape technical decisions, standards, and the product roadmap around secure, production-scale software supply chain needs. ### Source excerpt The Chainguard OS Fully User Directed Committee is a customer-led steering committee for Chainguard OS. Learn how you can be a member. ## How Chainguard OS Uses Automated Package Garbage Collection to Reduce Security Risk DevFeed: [How Chainguard OS Uses Automated Package Garbage Collection to Reduce Security Risk]() Original publisher: [Read original article]() Published: 2025-12-05T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard os](), [open-source-security](), [Security](), [APK](), [container images](), [Process]() Tags: [apk](), [automated](), [chainguard-containers](), [chainguard-libraries](), [chainguard-operating-system](), [chainguard-os](), [chainguard-wolfi](), [container-images](), [cves](), [dependency](), [security](), [wolfi]() ### AI overview The article explains how Chainguard automates garbage collection for Chainguard OS and Wolfi APK repositories. It describes filtering older packages and checking dependencies and image usage before removal to keep repositories current and reduce potential attack surface while preserving image customization workflows. ### Source excerpt Learn how we keep Chainguard OS and Wolfi lean and secure with automated package garbage collection that cuts attack surface while preserving reproducibility. ## Why building from source matters DevFeed: [Why building from source matters]() Original publisher: [Read original article]() Published: 2025-11-13T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [open-source-security](), [Security](), [Open Source](), [Software](), [Library](), [Compiler](), [virtual machines]() Tags: [binaries](), [building](), [building-from-source-approach](), [chainguard](), [chainguard-containers](), [chainguard-libraries](), [chainguard-open-source](), [chainguard-os](), [chainguard-vms](), [dependency](), [engineering](), [open-source](), [sealed](), [security](), [signing](), [source](), [supply-chain](), [trust]() ### AI overview Chainguard explains why building software from upstream source code can improve control and traceability in software supply chains. The article describes compiling packages and dependencies in a hermetic, network-isolated environment, then signing and attesting the resulting artifacts. ### Source excerpt Chainguard SVP of Engineering Dustin Kirkland discusses why Chainguard builds every package, library, and image directly from source and why the approach works. ## Avoiding Vendor Lock-in with a Compatible, Migration-Friendly, Transparent Container Distro DevFeed: [Avoiding Vendor Lock-in with a Compatible, Migration-Friendly, Transparent Container Distro]() Original publisher: [Read original article]() Published: 2025-09-22T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Containers](), [Linux](), [interoperability](), [migration](), [CI/CD](), [toolchain](), [Open Source]() Tags: [arm](), [chainguard-migration](), [chainguard-os](), [ci-cd](), [compatibility](), [container](), [distro](), [linux](), [migration](), [migration-guide](), [oci](), [open-source](), [sboms](), [supply-chain](), [toolchain](), [vendor-lock-in](), [wolfi](), [x86]() ### AI overview The article explains how to evaluate a Linux distribution for containerized workloads while reducing vendor lock-in. It emphasizes compatibility with existing toolchains and CI/CD workflows, transparent build processes, migration ease, interoperability, and adherence to standards such as OCI, CycloneDX, and SPDX. ### Source excerpt Learn how to evaluate and select the right Linux distribution to satisfy your team's needs, simplify migration, and avoid vendor lock-in. ## Why Chainguard's Full-Stack Approach to Secure Software Supply Chain Is Built to Scale DevFeed: [Why Chainguard's Full-Stack Approach to Secure Software Supply Chain Is Built to Scale]() Original publisher: [Read original article]() Published: 2025-07-09T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard os](), [chainguard](), [Open Source]() Tags: [automated](), [chainguard](), [chainguard-factory](), [chainguard-os](), [cve](), [dependencies](), [open-source-artifacts](), [open-source-software-security](), [provenance](), [reproducibility](), [secure-software](), [secure-software-supply-chain](), [software-supply-chain](), [supply-chain-security]() ### AI overview The article presents Chainguard's integrated approach to software supply chain security, combining Chainguard OS with the Chainguard Factory. It describes reproducible source builds, incremental updates, traceable contents, verifiable metadata, and automated maintenance of open source artifacts. ### Source excerpt Learn how Chainguard OS and the Chainguard Factory delivers the only scalable path to secure, reliable software artifacts. ## Trusted Open Source Means Compatibility: New Integration with Orca Security DevFeed: [Trusted Open Source Means Compatibility: New Integration with Orca Security]() Original publisher: [Read original article]() Published: 2025-06-17T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard containers](), [orca security](), [Security](), [container images](), [Containers]() Tags: [chainguard-containers](), [chainguard-os](), [compatibility](), [false-positives](), [open-source-scanners](), [orca-security](), [partnership](), [provenance](), [scanner](), [scanners](), [security](), [vulnerabilities]() ### AI overview Chainguard announces an integration with Orca Security that adds visibility for Chainguard OS and Chainguard Containers images in the Orca Platform. The integration exposes image metadata, scans images and installed packages for vulnerabilities against Chainguard Security Advisories, and provides additional security context for remediation. ### Source excerpt Chainguard now has an integration with Orca Security. Discover more about our new partnership. ## How R1 Universities Can Simplify CMMC 2.0 Compliance with Chainguard Containers DevFeed: [How R1 Universities Can Simplify CMMC 2.0 Compliance with Chainguard Containers]() Original publisher: [Read original article]() Published: 2025-06-04T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Containers](), [vulnerability management](), [Vulnerabilities](), [Security](), [chainguard](), [chainguard os](), [Automation](), [Linux](), [Malware](), [systems]() Tags: [2025](), [chainguard](), [chainguard-containers](), [chainguard-factory](), [chainguard-os](), [cmmc](), [cmmc-2-0](), [compliance](), [containers](), [cve](), [cve-remediation](), [cves](), [funding](), [linux](), [malware](), [management](), [security](), [software](), [systems](), [vulnerabilities](), [zero-cves]() ### AI overview This article explains how Chainguard Containers may help R1 universities prepare for CMMC 2.0 Level 2 requirements tied to Department of Defense research contracts. It focuses on vulnerability-management controls, including timely identification, reporting, remediation, malware protection, and risk assessment, and describes Chainguard's minimal container images, Chainguard OS, and Chainguard Factory. ### Source excerpt With CMMC 2.0 compliance becoming an important prerequisite to research funding for R1 universities, Chainguard Containers are the perfect solution. See how. ## Faster Pulls, Smarter Builds: Introducing Multi-Layer Chainguard Containers DevFeed: [Faster Pulls, Smarter Builds: Introducing Multi-Layer Chainguard Containers]() Original publisher: [Read original article]() Published: 2025-05-28T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [Containers](), [container images](), [Open Source]() Tags: [chainguard-containers](), [chainguard-images](), [chainguard-os](), [container-images](), [containers](), [developer-velocity](), [efficiency](), [open-source](), [rebuilds](), [speed](), [storage]() ### AI overview Chainguard introduces multi-layer Chainguard Containers with intelligent rebuilds to reduce unnecessary downloads when only small parts of an image change. The update is intended to improve pull times, bandwidth and storage efficiency, and the speed of builds, tests, and deployments. ### Source excerpt Multi-Layer Chainguard Containers with intelligent rebuilds are designed to increase bandwidth and storage efficiency and enable faster pull times. ## This Shit is Hard: Inside the Chainguard Factory DevFeed: [This Shit is Hard: Inside the Chainguard Factory]() Original publisher: [Read original article]() Published: 2025-05-27T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Automation](), [Linux](), [Kubernetes](), [Scalability](), [GitHub Actions](), [observability](), [Open Source]() Tags: [automation](), [chainguard](), [chainguard-containers](), [chainguard-factory](), [chainguard-libraries](), [chainguard-os](), [cve-remediation](), [github-actions](), [infrastructure](), [kubernetes](), [linux](), [observability](), [open-source](), [scalability](), [speed](), [wolfi]() ### AI overview Chainguard describes how its Factory uses infrastructure, automation, and a custom Kubernetes-based build system to build and test thousands of packages and images. The article says the system replaced GitHub Actions and improved observability, scalability, and usability while supporting CVE remediation targets. ### Source excerpt The Chainguard Factory combines world-class talent and automation to produce packages and images at a level of speed unmatched by any other Linux distribution. ## Chainguard's Catalog of 1,300+ Container Images: Secure Foundation for Every Engineering Team DevFeed: [Chainguard's Catalog of 1,300+ Container Images: Secure Foundation for Every Engineering Team]() Original publisher: [Read original article]() Published: 2025-05-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard containers](), [chainguard](), [Containers](), [chainguard os](), [container-security](), [Open Source](), [sigstore]() Tags: [chainguard](), [chainguard-catalog](), [chainguard-containers](), [chainguard-factory](), [chainguard-images](), [chainguard-os](), [container](), [container-images](), [cve-remediation](), [dependencies](), [open-source](), [provenance](), [safe-source-for-open-source](), [sigstore](), [slsa]() ### AI overview Chainguard describes its catalog of more than 1,300 minimal, zero-CVE container images, built from source on Chainguard OS and maintained through the Chainguard Factory. The article highlights daily rebuilds, automated dependency and CVE handling, and default SBOMs, SLSA provenance, and Sigstore signatures. ### Source excerpt Chainguard Containers is a catalog of over 1,300 container images powered by Chainguard OS and the Chainguard Factory. Discover the safe source for open source. ## Ingress-nginx-controller: Nightmare on CVE Street DevFeed: [Ingress-nginx-controller: Nightmare on CVE Street]() Original publisher: [Read original article]() Published: 2025-04-02T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [nginx](), [Vulnerabilities](), [Security](), [Kubernetes](), [chainguard containers](), [chainguard os](), [chainguard]() Tags: [availability](), [chainguard](), [chainguard-containers](), [chainguard-os](), [container-images](), [containers](), [cve](), [cves](), [ingress](), [ingress-nginx](), [kubernetes](), [nginx](), [remote-code-execution](), [security](), [vulnerabilities](), [wiz]() ### AI overview The article describes several critical remote code execution vulnerabilities affecting the Ingress-nginx-controller, including risks to Kubernetes cluster secrets, service availability, privileges, and security controls. It also explains how Chainguard reviewed its infrastructure, identified affected Chainguard Containers, and prepared patches using Chainguard OS's continuous update model. ### Source excerpt Chainguard was able to quickly respond to and handle the recent ingress-nginx-controller CVEs that were discovered by Wiz. See the actions we have taken. ## Key Takeaways from Chainguard Assemble 2025 DevFeed: [Key Takeaways from Chainguard Assemble 2025]() Original publisher: [Read original article]() Published: 2025-03-27T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard libraries](), [supply-chain-security](), [chainguard containers](), [open-source-security](), [chainguard os](), [chainguard vms](), [Open Source](), [Security]() Tags: [2025](), [assemble-2025](), [chainguard](), [chainguard-assemble](), [chainguard-containers](), [chainguard-libraries](), [chainguard-os](), [chainguard-vms](), [datadog](), [open-source](), [oz-pearlman](), [secure-software](), [software-development](), [software-supply-chain-security]() ### AI overview Chainguard Assemble 2025 brought together security and engineering professionals to discuss secure software development, software supply chain security, and open source software. Chainguard highlighted Chainguard Containers, Chainguard Libraries, Chainguard VMs, and Chainguard OS, while also announcing partnerships and providing access to keynote and selected session recordings. ### Source excerpt Chainguard announced Chainguard Libraries, Chainguard VMs, and a new partnership with Datadog at Assemble, our inaugural event for security and developer pros. ## Chainguard OS and the Next Generation of Distroless Software Delivery DevFeed: [Chainguard OS and the Next Generation of Distroless Software Delivery]() Original publisher: [Read original article]() Published: 2025-03-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard os](), [distroless](), [Open Source](), [container images](), [open-source-security]() Tags: [beyond-distro](), [chainguard-os](), [chainguard-your-os](), [container-images](), [distroless](), [open-source-software](), [security](), [wolfi]() ### AI overview This article proposes a next generation of open source software delivery centered on distroless, purpose-built container images and upstream-maintained software packages. It introduces Chainguard OS, which Chainguard describes as continuously rebuilding packages from upstream sources to incorporate security fixes and performance improvements. ### Source excerpt Chainguard OS is the next generation in open source software delivery. Learn all about the principles and technology that make it possible. ## Have We Reached a Distroless Tipping Point? DevFeed: [Have We Reached a Distroless Tipping Point?]() Original publisher: [Read original article]() Published: 2025-03-18T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [distroless](), [Containers](), [Cloud Native Ecosystem](), [Open Source](), [Linux]() Tags: [beyond-distro](), [cgroups](), [chainguard-os](), [chainguard-your-os](), [cloud-native](), [containers](), [distroless](), [kernel](), [linux](), [oci](), [open-source](), [secure-by-design](), [wolfi]() ### AI overview The article argues that containerization and cloud-native software development have created an inflection point in open source software delivery. It presents the evolution from Linux Containers to Docker and the Open Container Initiative as milestones supporting a shift from traditional Linux distributions toward distroless, secure-by-design, continuously updated software. ### Source excerpt The world is at an inflection point in open source software delivery. See where the software distribution status quo is at, and what is next. ## Disrupting the Status (Distro)Quo DevFeed: [Disrupting the Status (Distro)Quo]() Original publisher: [Read original article]() Published: 2025-03-10T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Open Source](), [Linux](), [Operating system](), [releases](), [cloud-infrastructure](), [Embedded Software Dev]() Tags: [chainguard-os](), [debian](), [distro](), [embedded-systems](), [infrastructure](), [linux](), [open-source](), [open-source-software](), [release](), [releases](), [ubuntu](), [wolfi]() ### AI overview This first article in a three-part series traces how UNIX and Linux distributions became the dominant model for delivering open source software. It examines snapshot-based releases, differing release schedules, and the long-term maintenance concerns created by software bundled and frozen in traditional distributions. ### Source excerpt The traditional "distro" model of open source software delivery is ready for innovation. Learn how we got to this point and what comes next.