You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: profile/README.md
+21-2Lines changed: 21 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,20 +14,22 @@ Wolfi, whose name was inspired by the [world's smallest octopus](https://en.wiki
14
14
15
15
- Provides a high-quality, build-time SBOM as standard for all packages
16
16
- Packages are designed to be granular and independent, to support minimal images
17
+
- Focuses on the latest release of all packages
17
18
- Uses the proven and reliable apk package format
18
19
- Fully declarative and reproducible build system
19
20
- Designed to support glibc
20
21
21
22
## Where's the Source?
22
23
23
-
*[os](https://github.com/wolfi-dev/os) contains the core Wolfi OS repository.
24
+
The[os repository](https://github.com/wolfi-dev/os) contains the core Wolfi OS repository as a sync from internal Chainguard repositories. Any proposed improvements are applied internally, and then synced back out to the public repository.
24
25
25
26
## Wolfi Community
26
27
27
28
| Resource | Details |
28
29
| ----------- | ----------- |
29
30
| Forum | See [GitHub Discussions](https://github.com/orgs/wolfi-dev/discussions)|
30
31
| Slack | Some community members can be found in the`#apko` channel on [Kubernetes Slack](https://slack.kubernetes.io), but there is no active monitoring of this channel.|
32
+
| Slack | Some community members can be found on [Chainguard Community Slack](https://join.slack.com/t/chainguardcommunity/shared_invite/zt-3nxzg5zz7-_7r3CdZ01M17ICCuNMhwtA)|
31
33
32
34
The [community repo](https://github.com/wolfi-dev/community) contains full details of past community calls and resources.
33
35
@@ -81,30 +83,47 @@ For more guidance, you can check out a full tutorial on [Creating Wolfi Images w
81
83
## FAQ
82
84
83
85
### What is Wolfi and how does it compare to Alpine?
86
+
84
87
Wolfi is a Linux _undistro_ designed from the ground up to support newer computing paradigms such as containers. Although Wolfi has a few similar design principles as Alpine (such as using apk), it is a different distribution that is focused on supply chain security. Unlike Alpine, Wolfi does not currently build its own Linux kernel, instead relying on the host environment (e.g. a container runtime) to provide one.
85
88
86
89
### Is Wolfi free to use?
90
+
87
91
Yes, Wolfi is freely [available under the Apache License V2](https://github.com/wolfi-dev/os/blob/main/LICENSE) and will always be.
88
92
89
93
### Where are packages in Wolfi published?
94
+
90
95
Packages in Wolfi are published to [public Wolfi APK Repositories](https://edu.chainguard.dev/chainguard/chainguard-images/network-requirements/).
91
96
97
+
### What packages are included in Wolfi?
98
+
99
+
Wolfi focusses on latest package versions and provides a base minimum of packages for variety of containers. Specifically all packages used in free Chainguard Containers are available as packages.
100
+
92
101
Non-latest versions of packages in these repositories are retained for 12 months by default. For more information, see the [Wolfi Archive Policy announcement](https://github.com/orgs/wolfi-dev/discussions/63023).
93
102
94
-
### Can I mix packages from Alpine repositories into a Wolfi-based image?
103
+
Chainguard also regularly removes packages from Wolfi for reasons outside the scope of the Wolfi retention policy. Typically, this involves removing the package definition from the Wolfi GitHub repository only. Existing packages that have already been built remain in the Wolfi package repository until they are removed according to the retention policy.
104
+
105
+
The most common trigger for removal is when a new version of a version streamed package is released. In this situation, package definitions for prior versions streams are removed from Wolfi. For example, when MariaDB 13 is released and added to Wolfi, MariaDB 12 is removed from Wolfi. New versions of MariaDB 12 packages are available from Chainguard only as the focus of Wolfi is on latest releases only.
106
+
107
+
### Can I mix packages from Alpine repositories into a Wolfi-based image?
108
+
95
109
No, it’s not possible to mix Alpine apks with Wolfi apks. If your image requires dependencies that are currently only available for Alpine. You might consider using [melange](https://github.com/chainguard-dev/melange) to build a custom apk for your image.
96
110
97
111
### Can I use Wolfi on the Desktop?
112
+
98
113
No. Desktop distributions require additional software that is out of scope for Wolfi.
99
114
100
115
### Who maintains Wolfi?
116
+
101
117
Wolfi was created and is currently maintained by [Chainguard](https://chainguard.dev) as the base of Chainguard OS.
102
118
103
119
### What are the plans for long-term Wolfi governance?
120
+
104
121
We intend for Wolfi to be the core foundation of Chainguard OS and available as open source project for use with minimal packages as used in our free Chainguard Containers.
105
122
106
123
### Where can I get security feeds for Wolfi?
124
+
107
125
See [SECURITY.md](/SECURITY.md) for information about reporting security incidents concerning and consuming security data about Wolfi.
108
126
109
127
### Where can I ask questions or learn more about using Wolfi?
128
+
110
129
Find details in our [repositories](https://github.com/orgs/wolfi-dev/repositories), use our [community channels](#wolfi-community) and read our [documentation](https://edu.chainguard.dev/open-source/wolfi/overview/).
0 commit comments