# distroless Distroless is a project providing minimal container images that contain an application and its runtime dependencies without package managers, shells, or other standard Linux distribution programs. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Chainguard OS and the Next Generation of Distroless Software Delivery DevFeed: [Chainguard OS and the Next Generation of Distroless Software Delivery]() Original publisher: [Read original article]() Published: 2025-03-20T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard os](), [distroless](), [Open Source](), [container images](), [open-source-security]() Tags: [beyond-distro](), [chainguard-os](), [chainguard-your-os](), [container-images](), [distroless](), [open-source-software](), [security](), [wolfi]() ### AI overview This article proposes a next generation of open source software delivery centered on distroless, purpose-built container images and upstream-maintained software packages. It introduces Chainguard OS, which Chainguard describes as continuously rebuilding packages from upstream sources to incorporate security fixes and performance improvements. ### Source excerpt Chainguard OS is the next generation in open source software delivery. Learn all about the principles and technology that make it possible. ## Have We Reached a Distroless Tipping Point? DevFeed: [Have We Reached a Distroless Tipping Point?]() Original publisher: [Read original article]() Published: 2025-03-18T00:00:00Z Content type: opinion Language: en Sources: [Chainguard: Unchained]() Topics: [distroless](), [Containers](), [Cloud Native Ecosystem](), [Open Source](), [Linux]() Tags: [beyond-distro](), [cgroups](), [chainguard-os](), [chainguard-your-os](), [cloud-native](), [containers](), [distroless](), [kernel](), [linux](), [oci](), [open-source](), [secure-by-design](), [wolfi]() ### AI overview The article argues that containerization and cloud-native software development have created an inflection point in open source software delivery. It presents the evolution from Linux Containers to Docker and the Open Container Initiative as milestones supporting a shift from traditional Linux distributions toward distroless, secure-by-design, continuously updated software. ### Source excerpt The world is at an inflection point in open source software delivery. See where the software distribution status quo is at, and what is next. ## Check out Chainguard at KubeCon NA in Salt Lake City on November 12-15! DevFeed: [Check out Chainguard at KubeCon NA in Salt Lake City on November 12-15!]() Original publisher: [Read original article]() Published: 2024-10-16T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [chainguard images](), [container images](), [supply-chain-security](), [sigstore](), [distroless](), [CI/CD](), [Cloud](), [Security](), [devrel]() Tags: [chainguard](), [chainguard-images](), [ci-cd](), [cloud](), [cloud-native-rejekts](), [conference](), [container](), [debug](), [developers](), [devrel](), [devsecops](), [distroless](), [event](), [kubecon](), [kubernetes](), [multi-arch](), [sboms](), [security](), [sigstore](), [sigstorecon](), [slsa](), [software-supply-chain-security]() ### AI overview Chainguard announces its participation in KubeCon North America 2024 in Salt Lake City, including product demonstrations of Chainguard Images and appearances at Cloud-Native Rejekts and SigstoreCon. ### Source excerpt Chainguard is going to be at KubeCon North America 2024 in Salt Lake City. See where we'll be and how you can meet us to learn more about Chainguard Images. ## Images as Code: The pursuit of declarative image builds DevFeed: [Images as Code: The pursuit of declarative image builds]() Original publisher: [Read original article]() Published: 2024-01-22T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Code](), [chainguard images](), [Dockerfile](), [bazel](), [distroless](), [Docker](), [Containers](), [Kubernetes](), [Terraform](), [Infrastructure as code](), [Open Source]() Tags: [apk](), [apko](), [bazel](), [chainguard](), [chainguard-images](), [code](), [container-image](), [containers](), [declarative](), [distroless](), [docker](), [infrastructure-as-code](), [kubernetes](), [open-source](), [reproducibility](), [terraform]() ### AI overview The article traces the pursuit of declarative container image builds. It critiques imperative Dockerfile-based builds for making multi-tenant, multi-architecture, and reproducible builds difficult, then discusses Bazel and distroless images as steps toward expressing intended build state. Kubernetes and Terraform are presented as examples of declarative systems, inspiring the idea of "Images as Code." ### Source excerpt Chainguard's CTO Matt Moore describes the process of creating a declarative container image build for Chainguard Images. ## Announcing Bazel rules for extending Chainguard Images DevFeed: [Announcing Bazel rules for extending Chainguard Images]() Original publisher: [Read original article]() Published: 2023-10-24T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [supply-chain-security](), [container images](), [distroless](), [Package manager](), [Open Source]() Tags: [apk](), [apko](), [bazel](), [chainguard](), [chainguard-images](), [distroless](), [sbom](), [secure-software](), [secure-software-supply-chain](), [wolfi]() ### AI overview Chainguard and Aspect.Dev announce the general availability of rules_apko, an open source Bazel plugin for building secure, minimal Wolfi-based OCI container images. The article explains how rules_apko integrates APK packages and Wolfi-base images into existing Bazel workflows, supports reproducible builds, and provides dependency locking, integrity verification, and SBOM generation. ### Source excerpt Explore Bazel rules for Chainguard Images, your pathway to secure, effortless image extension. ## Understanding attacker techniques in distroless containers DevFeed: [Understanding attacker techniques in distroless containers]() Original publisher: [Read original article]() Published: 2023-10-05T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [distroless](), [Containers](), [Security](), [container-security](), [Vulnerabilities]() Tags: [chainguard](), [chainguard-images](), [container-security](), [containers](), [distroless](), [distroless-containers](), [exploit](), [rce](), [remote-code-execution](), [security](), [vulnerabilities]() ### AI overview The article examines attacker techniques relevant to distroless containers, drawing on a DEFCON 31 talk and an example involving PHP remote code execution, reverse shells, and injected spam content. It emphasizes keeping software up to date and using defense in depth. ### Source excerpt Explore DEFCON 31 insights on Distroless container security. Delve into RCE vulnerabilities and Chainguard's robust defense strategies for up-to-date software. ## How to use Dockerfiles with wolfi-base images DevFeed: [How to use Dockerfiles with wolfi-base images]() Original publisher: [Read original article]() Published: 2023-09-14T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [Dockerfile](), [Docker](), [chainguard images](), [distroless](), [container images](), [Linux](), [Go]() Tags: [apko](), [base-images](), [chainguard-images](), [container-images](), [distroless](), [docker](), [docker-hub](), [dockerfiles](), [go](), [guide](), [how-to](), [melange](), [wolfi]() ### AI overview This tutorial explains how to use Dockerfiles with Chainguard wolfi-base and other Chainguard Images. It covers minimal static images, glibc-dynamic images, multi-stage builds, package management, and selecting image variants based on application dependencies and runtime needs. ### Source excerpt Your guide to leveraging Dockerfiles with Wolfi-base images for hardened container images. ## It all started with a commit: Celebrating 6 years of Distroless DevFeed: [It all started with a commit: Celebrating 6 years of Distroless]() Original publisher: [Read original article]() Published: 2023-04-12T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [distroless](), [Containers](), [supply-chain-security](), [container images](), [sigstore](), [chainguard images](), [Kubernetes](), [vulnerability](), [bazel](), [Debian](), [vulnerability management](), [Go]() Tags: [bazel](), [c-plus-plus](), [chainguard](), [chainguard-images](), [containers](), [debian](), [digital-signatures](), [distroless](), [distroless-containers](), [go](), [java](), [kubernetes](), [python](), [release-engineering](), [sigstore](), [software-supply-chain-security](), [verify](), [vulnerability](), [vulnerability-management]() ### AI overview The article commemorates six years of Distroless, describing its goal of creating more secure and efficient container images by removing non-essential components. It covers the Bazel-based build tooling, language runtimes, Kubernetes adoption, vulnerability-management benefits, and later integration with Sigstore for container signing and authenticity verification. It also introduces the subsequent development of Chainguard Images. ### Source excerpt The goal of Distroless is to provide a more secure and efficient way to package and run software in containers by using only essential components.