melange FAQs
Frequently asked questions about melange
No. Chainguard built apko as part of its open source tooling around the Wolfi operating system. While you can check out the project on GitHub and learn more, it’s not a prerequisite for using Chainguard Containers.
apko images are defined declaratively using a YAML file. It was designed this way to facilitate reproducible builds — run apko twice, and you’ll get the same output.
Yes, apko builds include high-quality SBOMs (software bills of materials) for all builds. This is a key feature of the tooling that Chainguard has developed to ensure that users can trust the software they are running.
Yes, images built with apko are fully OCI compliant and can be used with any container runtime that supports the OCI image format.
No, it’s not possible to mix Wolfi apks with Alpine apks.
No, you can’t execute arbitrary commands in apko builds. apko provides directives for creating users and setting up directories and permissions, but any additional steps necessary at build time, such as the installation of packages and execution of shell commands, must be defined in apk packages that should be included in the list of build dependencies. This is an implementation feature to allow for reproducible builds and high-quality SBOMs.
Last updated: 2024-07-31 11:07