We can't find the internet
Attempting to reconnect
Something went wrong!
Hang in there while we get back on track
DPC2023: Building the World: the story behind Wolfi, the Linux undistro built for containers
Discover the story behind Wolfi, a Linux undistro built for containers, with a focus on reproducibility, security, and efficiency. Learn about its features, build process, and applications in this engaging presentation.
- Wolfi (Volfi) is a Linux undistro built for containers
- It started as a fork of Alpine Linux
- The goal is to build images that are reproducible, secure, and efficient
- Wolfi uses Melange, a declarative APQ-built tool, to build packages
- Melange and APK are siblings, both built for containerization
- Wolfi has over 18,000 packages available in the repo
- The build process involves three stages: preparing the build folder, building the package, and finalizing the image
- Wolfi is designed to be lightweight and focused on specific use cases
- It is used by ChainGuard, a company that builds security tools
- The speaker built PHP from source in Wolfi, which was a complex build
- Wolfi uses APKO, a tool that builds package lists, to build its images
- The images are reproducible and can be built on demand
- Wolfi is committed to security and has reduced its CVE count to zero
- The company is open to contributions and feedback from the community