Images

408 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 408 available now.

A+
homepage
Homepage, a services and bookmarks dashboard with live widgets for hundreds of self-hosted apps. A Next.js app built from source into its standalone…
v2.5.076.2 MB2 versions
Apps & productivitystandardGPL-3.0
A+
httpd
Apache HTTP Server, the long-standing open-source web server and reverse proxy for serving static content and fronting application backends…
v2.4.6935.7 MB
GatewaycriticalApache-2.0
A+
hubble-relay
Hubble Relay, Cilium's cluster-wide aggregator of Hubble network-flow observability (one Observer API across every node). Built from the…
v1.20.221.8 MB3 versions
Coordination & meshstandardApache-2.0
A+
hubble-ui
Hubble UI, Cilium's web UI for the service map and live network flows. The React frontend built from source and served by a Wolfi nginx that proxies…
v0.13.69.3 MB
Coordination & meshstandardApache-2.0
A+
hubble-ui-backend
The Hubble UI backend, the Go service that reads flows and the service map from Hubble Relay and streams them to the Hubble UI. Built from source.…
v0.13.621.4 MB
Coordination & meshstandardApache-2.0
D 2
hydra
Ory Hydra, an OAuth 2.0 and OpenID Connect provider. Issues and validates tokens for first- and third-party clients without owning user credentials…
v26.2.015.0 MB2 versions
IdentitystandardApache-2.0
A 1
InfluxDB
Time-series database purpose-built for ingesting and querying metrics, events, and IoT/sensor data at high write rates.
v2.9.155.9 MB
Time seriesstandardMIT
A+
ingress-nginx
The Kubernetes NGINX Ingress Controller. Routes external HTTP/HTTPS traffic to in-cluster Services via Ingress resources, with TLS termination,…
v1.15.1080.9 MB
GatewaystandardApache-2.0
A 2
istio-cni
Istio's CNI node agent (upstream install-cni) with the istio-cni plugin, built from source from the same istio/istio tags as istiod, plus Wolfi…
v1.31.151.3 MB3 versions
Coordination & meshstandardApache-2.0
A 1
istio-proxyv2
Istio's sidecar and gateway data plane. pilot-agent built from the istio/istio source, paired with Istio's own Envoy (the Wolfi istio-envoy build at…
v1.31.154.5 MB
Coordination & meshstandardApache-2.0
A 1
istiod
Istio's control plane binary (pilot-discovery) -- Pilot/xDS discovery, the sidecar-injecting webhook, and the mesh CA -- built from source on Wolfi.…
v1.31.133.2 MB3 versions
Coordination & meshstandardApache-2.0
A 1
jaeger
Distributed tracing platform (Jaeger v2, OpenTelemetry-collector based) with an embedded query UI. From source on a hardened nonroot Wolfi base;…
v2.22.026.8 MB2 versions
ObservabilitystandardApache-2.0