Shell-less HashiCorp Consul (BUSL-1.1) built from source via melange.
Hardened Infrastructure container images
DNS, networking, storage and certificate tooling that underpins a cluster rather than serving traffic directly.
CoreDNS DNS server built from source via melange.
Shell-less dnsmasq DNS forwarder/cache and DHCP server built on Wolfi.
etcd distributed key-value store built from source via melange.
Headscale self-hosted Tailscale control server, from source.
Shell-less Keepalived VRRP failover and LVS load balancer built from source via melange.
Keycloak identity and access management server.
Shell-less ChartMuseum Helm chart repository, built from source via melange.
MetalLB bare-metal load balancer, controller and speaker.
OpenBao secret management server (Vault fork, MPL 2.0).
Qdrant vector search engine built from source via melange.
Shell-less rclone cloud storage sync tool (70+ object-store and cloud-drive backends), built from source via melange.
Shell-less OCI distribution registry (Docker Registry v2).
Shell-less restic deduplicating, encrypted backup program, built from source via melange.
Shell-less SeaweedFS distributed object store and filesystem, built from source via melange.
Shell-less step-ca online certificate authority built from source via melange.
Shell-less Syncthing continuous file synchronisation daemon, built from source via melange.
Shell-less Tailscale WireGuard mesh VPN (tailscaled daemon + CLI), built from source via melange.
Shell-less Unbound validating recursive DNS resolver built from source via melange.
Minimal OCI-native container registry (zot), built from source.
Other categories
Languages & RuntimesDatabasesCaches, Queues & MessagingWeb Servers & ProxiesObservabilityKubernetes, CI & IaCApps
Every image here is checkable from your terminal — see how to verify — and compared against other hardened-image providers with published scan data on thecomparison pages.