Web and data services on

Getting started with the MariaDB Chainguard Container

Fri, 28 Jul 2023 11:07:52 +0200

Chainguard’s MariaDB container image provides a security-hardened foundation for database workloads. Built on Wolfi with a distroless design, it removes unnecessary components while maintaining full MariaDB functionality. For current CVE data on each image and tag, see the MariaDB entry in the Chainguard Containers directory.

Through daily rebuilds with the latest patches and minimal dependencies, Chainguard’s MariaDB image dramatically reduces your database’s attack surface. This enables you to run production MariaDB databases with enhanced security posture and a smaller container footprint.

Getting started with the MinIO Chainguard Container

Mon, 27 Oct 2025 11:07:52 +0200

MinIO is a high-performance, S3-compatible object storage system that has become widely adopted across the cloud-native ecosystem, with over 1 billion pulls on Docker Hub. It’s used for testing, local development, and production deployments across on-premises and cloud environments. MinIO’s solid S3 compatibility has made it a common choice for developers who need S3-compatible storage without AWS dependencies, and it’s integrated into popular open source projects like Trino and Apache Spark for backup and archival, AI/ML workloads, data lakes, and application data storage.

Getting started with the nginx Chainguard Container

Mon, 09 Jan 2023 11:07:52 +0200

Chainguard’s nginx container images provide a security-hardened foundation for web server deployments. Available in both development (:latest-dev) and production (:latest) variants, these images maintain full nginx functionality while reducing attack surface. The production variant uses a distroless approach, removing shells and package managers to enhance security for production workloads. For current CVE data on each image and tag, see the nginx entry in the Chainguard Containers directory.

In this tutorial, we will create a local demo website using nginx to serve static HTML content to a local port on your machine. Then we will use the nginx Chainguard Container to build and execute the demo in a lightweight containerized environment.

Getting started with the PostgreSQL Chainguard Container

Thu, 10 Aug 2023 11:07:52 +0200

Chainguard’s PostgreSQL container image provides a security-hardened foundation for running Postgres databases. Built on Wolfi with a distroless design, it includes only the packages the database needs, maintaining full PostgreSQL functionality while reducing attack surface. For current CVE data on each image and tag, see the PostgreSQL entry in the Chainguard Containers directory.

Through daily rebuilds with the latest patches and minimal dependencies, Chainguard’s PostgreSQL image enhances database security posture. This enables you to run production Postgres workloads in containerized environments with both a smaller footprint and improved protection against supply chain attacks.

Getting started with the WordPress Chainguard Container

Fri, 19 Jul 2024 11:07:52 +0200

Chainguard’s WordPress container image is a drop-in replacement for the official WordPress FPM-Alpine image. It includes a distroless variant for production use that removes shells, package managers, and other unnecessary components. The image ships with the latest PHP and WordPress versions and all required PHP extensions.

This guide covers three ways to use the WordPress Chainguard Container to build and run WordPress projects.

What is distroless?

Distroless container images are minimal container images containing only essential software required to build or execute an application. That means no package manager, no shell, and no bloat from software that only makes sense on bare metal servers.

What is Wolfi?

Wolfi is a community Linux undistro created specifically for containers. This brings distroless to a new level, including additional features targeted at securing the software supply chain of your application environment: comprehensive SBOMs, signatures, daily updates, and timely CVE fixes.

What are multi-stage builds?

Multi-stage builds are a Docker feature that allow you to use multiple FROM statements in a single Dockerfile, where each statement begins a new build stage. In a typical pattern, an early stage uses a full-featured builder image to compile code or generate artifacts, while a later stage uses a minimal runtime image and copies in only what's needed to run the application. Only what you explicitly copy from one stage carries forward — everything else is discarded when that stage completes.