All 132 hardened container images

Shell-less Bun JavaScript runtime built on Wolfi.

Shell-less Deno TypeScript runtime built on Wolfi.

.NET runtime built on Wolfi.

Go builder image built on Wolfi.

Shell-less OpenJDK 21 JRE built on Wolfi.

Shell-less Node.js runtime built on Wolfi.

PHP runtime built from source via melange.

Shell-less Python 3 runtime built on Wolfi.

Ruby runtime built from source via melange.

Erlang/OTP runtime for concurrent, fault-tolerant applications, built from source.

Minimal Perl interpreter, built from source.

Apache Cassandra wide-column database with custom jlink JRE.

MariaDB LTS built from source via melange.

Shell-less Meilisearch full-text and vector search engine built from source.

MySQL LTS built from source via melange.

OpenSearch 3.x on Wolfi with OpenJDK 21.

Shell-less Patroni PostgreSQL high-availability supervisor built on Wolfi.

Shell-less PgBouncer PostgreSQL connection pooler built from source via melange.

PostgreSQL built on Wolfi.

Apache Solr search server with custom jlink JRE.

Shell-less SQLite built on Wolfi.

Neo4j Community Edition graph database, built from the official release.

Apache CouchDB document database, built on Wolfi.

Hardened Apache Flink stream processing engine with a custom jlink JRE.

Apache Kafka with custom jlink JRE, KRaft mode.

Shell-less Memcached built from source via melange.

Shell-less Eclipse Mosquitto MQTT broker.

Shell-less NATS server built from source via melange.

Shell-less NSQ realtime distributed messaging platform, built from source via melange.

Apache Pulsar messaging and streaming server with custom jlink JRE.

RabbitMQ with Wolfi Erlang/OTP.

Shell-less Redis built from source via melange.

Shell-less Valkey built from source via melange.

Apache ZooKeeper coordination service with custom jlink JRE.

Shell-less Caddy web server built from source via melange.

Shell-less Envoy proxy.

Shell-less HAProxy built from source via melange.

Apache HTTP Server built on Wolfi.

Shell-less Nginx built on Wolfi.

Shell-less OAuth2 Proxy (OIDC/OAuth2 authenticating reverse proxy), built from source via melange.

Hardened Apache Tomcat servlet container with custom jlink JRE (default webapps removed).

Shell-less Traefik reverse proxy built from source via melange.

Kong API Gateway built on Nginx and OpenResty.

Prometheus Alertmanager built from source via melange.

Shell-less Prometheus Blackbox Exporter for endpoint probing.

Fluent Bit log processor and forwarder built from source via melange.

Jaeger distributed tracing backend built from source via melange.

Shell-less kube-state-metrics for Kubernetes object metrics.

Loki log aggregation server built from source via melange.

Grafana Mimir long-term Prometheus storage.

Shell-less Prometheus Node Exporter for hardware and OS metrics.

OpenTelemetry Collector built from source via melange.

Prometheus PostgreSQL exporter built from source via melange.

Prometheus monitoring server built from source via melange.

Shell-less Prometheus Pushgateway for ephemeral and batch job metrics.

Shell-less Redis Exporter for Prometheus metrics.

Telegraf metrics collection agent built from source via melange.

Shell-less Grafana Tempo distributed tracing backend.

Shell-less Thanos HA Prometheus long-term storage.

Shell-less Vector observability data pipeline built on Wolfi.

VictoriaLogs log database built from source via melange.

VictoriaMetrics time-series database built from source via melange.

Shell-less Zipkin distributed tracing server on a custom jlink JRE.

Shell-less HashiCorp Consul (BUSL-1.1) built from source via melange.

CoreDNS DNS server built from source via melange.

Shell-less dnsmasq DNS forwarder/cache and DHCP server built on Wolfi.

etcd distributed key-value store built from source via melange.

Headscale self-hosted Tailscale control server, from source.

Shell-less Keepalived VRRP failover and LVS load balancer built from source via melange.

Keycloak identity and access management server.

MetalLB bare-metal load balancer, controller and speaker.

OpenBao secret management server (Vault fork, MPL 2.0).

Qdrant vector search engine built from source via melange.

Shell-less rclone cloud storage sync tool (70+ object-store and cloud-drive backends), built from source via melange.

Shell-less OCI distribution registry (Docker Registry v2).

Shell-less restic deduplicating, encrypted backup program, built from source via melange.

Shell-less SeaweedFS distributed object store and filesystem, built from source via melange.

Shell-less step-ca online certificate authority built from source via melange.

Shell-less Syncthing continuous file synchronisation daemon, built from source via melange.

Shell-less Tailscale WireGuard mesh VPN (tailscaled daemon + CLI), built from source via melange.

Shell-less Unbound validating recursive DNS resolver built from source via melange.

Minimal OCI-native container registry (zot), built from source.

Apache Airflow orchestration platform built from the ASF source distribution.

Shell-less BuildKit concurrent container image builder, built from source via melange.

Shell-less Conftest OPA config-policy testing CLI, built from source via melange.

Shell-less Sigstore Cosign container signing & verification, built from source via melange.

Shell-less crane OCI registry tool (go-containerregistry), built from source via melange.

Shell-less Kubernetes descheduler, built from source via melange.

Shell-less Dex OpenID Connect identity provider, built from source via melange.

Shell-less ExternalDNS Kubernetes DNS controller built from source via melange.

External Secrets Operator built from source via melange.

Flagger progressive delivery operator built from source.

Shell-less Flux CD GitOps CLI, built from source via melange.

Shell-less GitLab Runner CI/CD job executor, built from source via melange.

Shell-less Gitleaks secret scanner, built from source via melange.

Shell-less Grype vulnerability scanner, built from source via melange.

Shell-less Helm CLI built from source via melange.

Shell-less Helmfile declarative Helm release manager, built from source via melange.

Shell-less Kaniko container image builder (executor) built from source via melange.

Shell-less kube-bench CIS Kubernetes benchmark checker, built from source via melange.

Shell-less kube-vip control-plane VIP and load balancer, built from source via melange.

Shell-less Kubeconform Kubernetes manifest validator, built from source via melange.

Shell-less kubectl CLI built from source via melange.

Shell-less kubeseal Sealed Secrets CLI, built from source via melange.

Shell-less Kustomize Kubernetes configuration tool, built from source via melange.

Kyverno policy engine admission controller built from source.

Kubernetes metrics-server for kubectl top and HPA, built from source via melange.

Shell-less Notation OCI artifact signing/verification CLI, built from source via melange.

Shell-less Open Policy Agent (OPA) policy engine, built from source via melange.

Shell-less OpenTofu (Terraform-compatible IaC) built from source via melange.

Shell-less ORAS OCI registry client, built from source via melange.

Shell-less OSV-Scanner dependency vulnerability scanner, built from source via melange.

Shell-less regctl OCI registry client (regclient), built from source via melange.

Stakater Reloader configmap and secret reloader, from source.

Shell-less Skopeo container image inspection/copy tool built from source via melange.

Shell-less SOPS secrets encryption tool, built from source via melange.

Shell-less smallstep step PKI/certificate CLI, built from source via melange.

Shell-less Stern multi-pod Kubernetes log tailing tool, built from source via melange.

Shell-less Syft SBOM generator, built from source via melange.

Shell-less Trivy vulnerability, IaC and secret scanner.

Shell-less TruffleHog secret scanner, built from source via melange.

Shell-less Velero Kubernetes backup and restore tool built from source via melange.

Gitea git hosting built from source via melange.

Shell-less Jenkins with jlink custom JRE, built from source via melange.

Shell-less Mailpit SMTP/email testing tool built from source via melange.

Shell-less MinIO S3-compatible object storage built from source via melange.

Ruby on Rails built from source via melange.

Temporal admin, schema and CLI tooling built from source.

Temporal workflow engine server built from source.

Temporal Web UI server built from source.

Shell-less Vaultwarden Bitwarden-compatible server built from source.

Shell-less WordPress on PHP-FPM, built from the official source release.