IntroductionChainguard's Wolfi is a distroless base for Docker containers: the bare minimum needed to run a Linux kernel. This has two big implications:the images are small, which can make them faster to build -- a key consideration if you are aiming for rapid iteration and continuous deliverythe number of packages is limited, which reduces attack surfaceIt goes hand-in-hand with apko, a tool that builds OCI-compliant containers from Alpine's apk distribution format. The companion rules_apko ...

IntroductionChainguard's Wolfi is a distroless base for Docker containers: the bare minimum needed to run a Linux kernel. This has two big implications:the images are small, which can make them faster to build -- a key consideration if you are aiming for rapid iteration and continuous deliverythe number of packages is limited, which reduces attack surfaceIt goes hand-in-hand with apko, a tool that builds OCI-compliant containers from Alpine's apk distribution format. The companion rules_apko ...