FAQ on

Chainguard VMs FAQ

Tue, 21 Oct 2025 08:04:00 +0000

Which platforms and hypervisors are Chainguard VMs available for?

Chainguard VMs are available for AWS (EC2 and ECS/EKS), GCP (Compute Engine), and Azure Compute cloud environments, and also for on-prem solutions based on KVM such as QEmu, VMWare, Nutanix, among others.

Chainguard Containers FAQs

Thu, 01 Sep 2022 08:49:31 +0000

Learn answers to your questions about Chainguard Containers. Chainguard provides container images designed with security as the primary focus, featuring zero known CVEs, minimal attack surface, and built-in SBOMs for every image.

Which Linux distribution is used as base for Chainguard Containers?

Chainguard Containers are based on Wolfi, a Linux undistro we built specifically to address software supply chain security issues. We call it an undistro because it doesn’t contain certain software you’d normally find in a traditional Linux distribution such as Debian or Alpine. Wolfi is a minimal Linux distribution designed specifically to be used as a base for stripped-down container images.

apko FAQs

Mon, 10 Oct 2022 11:07:52 +0200

Do I need to understand apko to use Chainguard Containers?

No. Chainguard built apko as part of its open source tooling around the Wolfi operating system. While you can check out the project on GitHub and learn more, it’s not a prerequisite for using Chainguard Containers.

Octo STS FAQ

Mon, 22 Dec 2025 15:04:05 +0100

This page answers frequently asked questions about Octo STS, including setup, security, troubleshooting, and common use cases.

General Questions

What is Octo STS?

Octo STS is a GitHub App developed by Chainguard that acts as a Security Token Service for GitHub. It allows workloads with OIDC tokens from various identity providers (GitHub Actions, cloud providers, Kubernetes, etc.) to exchange those tokens for short-lived GitHub access tokens. The primary goal is to eliminate the need for long-lived Personal Access Tokens (PATs).

Wolfi FAQs

Thu, 01 Sep 2022 08:49:31 +0000

What is Wolfi and how does it compare to Alpine?

Wolfi is our Linux undistro designed from the ground up to support newer computing paradigms such as containers. Although Wolfi has a few similar design principles as Alpine (such as using apk), it is a different distribution that is focused on supply chain security. Unlike Alpine, Wolfi does not currently build its own Linux kernel, instead relying on the host environment (e.g. a container runtime) to provide one.

melange FAQs

Mon, 17 Oct 2022 11:07:52 +0200

Do I need to understand melange to use Chainguard Containers?

No. Chainguard built melange as part of its open source tooling used for the Wolfi operating system. While you can check out the project on GitHub and learn more, it’s not a prerequisite for using or working with Chainguard Containers.