https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/Recent content in Wolfi onHugo -- gohugo.ioen-USMon, 05 Sep 2022 08:49:15 +0000https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/overview/Thu, 01 Sep 2022 08:49:31 +0000https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/overview/Wolfi is a community Linux undistro designed for the container and cloud-native era. Chainguard started the Wolfi project to build Chainguard Containers, our collection of curated distroless images that meet the requirements of a secure software supply chain. This required a Linux distribution with components at the appropriate granularity and with support for glibc. Building our own undistro also allows us to ensure packages have full provenance and metadata for supporting modern supply-chain security needs.https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/building-a-wolfi-package/Mon, 21 Aug 2023 08:49:31 +0000https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/building-a-wolfi-package/Wolfi is a Linux distro created specifically for building stripped-down container images that only include the essential packages needed to run applications in containers. This makes it more secure, as there are fewer potential attack vectors due to the reduced surface area. Thanks to a fine-tuned maintenance process combining top-notch automation and established best practices from maintainers, Wolfi packages are updated quickly. This ensures that Wolfi users get patches and latest versions of packages at a much faster pace than other distributions.https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/faq/Thu, 01 Sep 2022 08:49:31 +0000https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/faq/What is Wolfi and how does it compare to Alpine? Wolfi is our Linux undistro designed from the ground up to support newer computing paradigms such as containers. Although Wolfi has a few similar design principles as Alpine (such as using apk), it is a different distribution that is focused on supply chain security. Unlike Alpine, Wolfi does not currently build its own Linux kernel, instead relying on the host environment (e.https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/apk-package-manager/Wed, 06 Jul 2022 08:49:31 +0000https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/apk-package-manager/apko uses the apk package manager to compose container images based on declarative pipelines. The apk format was introduced by Alpine Linux to address specific design requirements that could not be met by existing package managers such as apt and dnf. But what makes it different, and why does that matter in the context of apko? Manipulating the Desired State In traditional package managers like dnf and apt, requesting the installation or removal of packages causes those packages to be directly installed or removed, after a consistency check.https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/hello-wolfi/Mon, 19 Dec 2022 08:49:31 +0000https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/hello-wolfi/Introduction Software supply chain threats have been growing exponentially in the last few years, according to industry leaders and security researchers (PDF). With the popularization of automated workflows and cloud native deployments, it is more important than ever to provide users with the ability to attest the provenance of all relevant software artifacts that compose the container images being used as build and production runtimes. In this workshop, you’ll learn more about Wolfi, a community Linux undistro designed for the container and cloud-native era.https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/wolfi-with-dockerfiles/Mon, 19 Dec 2022 08:49:31 +0000https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/wolfi-with-dockerfiles/Introduction Wolfi is a minimal open source Linux distribution created specifically for cloud workloads, with an emphasis on software supply chain security. Using apk for package management, Wolfi differs from Alpine in a few important aspects, most notably the use of glibc instead of musl and the fact that Wolfi doesn’t have a kernel as it is intended to be used with a container runtime. This minimal footprint makes Wolfi an ideal base for both distroless images and fully-featured builder images.https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/apk-version-selection/Mon, 06 Nov 2023 08:49:31 +0000https://deploy-preview-3176--ornate-narwhal-088216.netlify.app/open-source/wolfi/apk-version-selection/This document explains how to specify version constraints for packages installed with the apk tool, as well as apko and melange. Understanding version selection will enable you to choose the version you’re looking for, determine what updates and vulnerability fixes you receive, and can allow you to reproduce an image’s digest through exact version matching. Version selection in apko and melange All the examples in this document focus on usage with the apk tool, but the same semantics apply to apk add as well as references in an apko or melange packages field: