Images

433 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 433 available now.

A+
jdk
Hardened OpenJDK with the javac compiler, a build-stage base image to FROM for Java apps. LTS lines 17/21/25.
v25.0.5112.0 MB3 versions
Language runtimestandardGPL-2.0-with-classpath-exception
D 2
jenkins
The leading open-source automation server for building, testing, and deploying software, with thousands of plugins. Ships the…
v2.580.1127.4 MB2 versions
CI/CD & registrystandardMIT
A 3
jenkins-inbound-agent
Jenkins inbound (JNLP/websocket) build agent — the remoting agent.jar plus launch script on a hardened Wolfi JRE, connecting back to a Jenkins…
v2.566168.3 MB3 versions
CI/CD & registrystandardMIT
A+
jetty
Eclipse Jetty, the lightweight Java web server and servlet container (Jakarta EE 10 on 12.0, EE 11 on 12.1), from the official jetty-home…
v12.1.14120.3 MB2 versions
GatewaystandardEPL-2.0 OR Apache-2.0
A+
jmeter
Apache JMeter load-testing and performance-measurement tool, the official binary distribution running on a hardened Wolfi JRE. Image only, no chart.
v5.6.3141.6 MB
ObservabilitystandardApache-2.0
D 5
joomla
Joomla, the PHP content-management system. The official Full_Package release on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot, read-only…
v6.2.093.7 MB3 versions
Apps & productivitystandardGPL-2.0+
A+
jre
Hardened Java runtime (JRE) for running a built jar, no compiler. Pair with the jdk, maven, or gradle build image. LTS lines 17/21/25.
v25.0.583.2 MB3 versions
Runtime basestandardGPL-2.0-with-classpath-exception
D 8
jupyterhub
JupyterHub, the multi-user server that gives each user their own Jupyter notebook server, here as the hub with KubeSpawner (notebooks as pods) and…
v6.1.167.9 MB2 versions
Machine learning & AIstandardBSD-3-Clause
A 3
k6
Developer-friendly load and performance testing tool scripted in JavaScript. Single static Go binary on a hardened nonroot Wolfi base; test scripts…
v2.3.017.2 MB
ObservabilitystandardAGPL-3.0
A+
Kafka
Distributed event-streaming platform for high-throughput, durable, replayable publish-subscribe pipelines and stream processing.
v4.3.2204.5 MB
MessagingcriticalApache-2.0
A 3
kafka-exporter
kafka_exporter, the Prometheus exporter for Kafka brokers, topics, partitions and consumer-group lag. Built from the release tag as one static…
v1.10.07.2 MB3 versions
ObservabilitystandardApache-2.0
D 8
karapace
Karapace, Aiven's Kafka schema registry (Avro, JSON Schema, Protobuf) and REST proxy, both Confluent-API compatible. From the tagged source into a…
v6.2.4124.9 MB
MessagingstandardApache-2.0