Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 26 additions & 3 deletions profile/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,20 +14,22 @@ Wolfi, whose name was inspired by the [world's smallest octopus](https://en.wiki

- Provides a high-quality, build-time SBOM as standard for all packages
- Packages are designed to be granular and independent, to support minimal images
- Focuses on the latest release of all packages
- Uses the proven and reliable apk package format
- Fully declarative and reproducible build system
- Designed to support glibc

## Where's the Source?

* [os](https://github.com/wolfi-dev/os) contains the core Wolfi OS repository.
The [os repository](https://github.com/wolfi-dev/os) contains the core Wolfi OS as a sync from internal Chainguard repositories. Any proposed improvements are applied internally, and then synced back out to the public repository.

## Wolfi Community

| Resource | Details |
| ----------- | ----------- |
| Forum | See [GitHub Discussions](https://github.com/orgs/wolfi-dev/discussions) |
| Slack | Some community members can be found in the`#apko` channel on [Kubernetes Slack](https://slack.kubernetes.io), but there is no active monitoring of this channel.|
| Slack | Some community members can be found on [Chainguard Community Slack](https://join.slack.com/t/chainguardcommunity/shared_invite/zt-3nxzg5zz7-_7r3CdZ01M17ICCuNMhwtA)|

The [community repo](https://github.com/wolfi-dev/community) contains full details of past community calls and resources.

Expand Down Expand Up @@ -81,30 +83,51 @@ For more guidance, you can check out a full tutorial on [Creating Wolfi Images w
## FAQ

### What is Wolfi and how does it compare to Alpine?

Wolfi is a Linux _undistro_ designed from the ground up to support newer computing paradigms such as containers. Although Wolfi has a few similar design principles as Alpine (such as using apk), it is a different distribution that is focused on supply chain security. Unlike Alpine, Wolfi does not currently build its own Linux kernel, instead relying on the host environment (e.g. a container runtime) to provide one.

### Is Wolfi free to use?

Yes, Wolfi is freely [available under the Apache License V2](https://github.com/wolfi-dev/os/blob/main/LICENSE) and will always be.

### Where are packages in Wolfi published?

Packages in Wolfi are published to [public Wolfi APK Repositories](https://edu.chainguard.dev/chainguard/chainguard-images/network-requirements/).

Non-latest versions of packages in these repositories are retained for 12 months by default. For more information, see the [Wolfi Archive Policy announcement](https://github.com/orgs/wolfi-dev/discussions/63023).
### What packages are included in Wolfi?

Wolfi focusses on latest package versions and provides a base minimum of packages for variety of containers. Specifically all packages used in free Chainguard Containers are available as packages.
Comment thread
mosabua marked this conversation as resolved.

Non-latest versions of packages in these repositories are retained for 12 months until June 8th, 2026, and then for 6 months by default.

For more information, see the [Wolfi Archive Policy announcement](https://github.com/orgs/wolfi-dev/discussions/63023), the [updated policy announcement](](https://github.com/orgs/wolfi-dev/discussions/78666)), and our [discussions forum in general](https://github.com/orgs/wolfi-dev/discussions).

Chainguard also regularly removes packages from Wolfi for reasons outside the scope of the Wolfi retention policy. Typically, this involves removing the package definition from the Wolfi GitHub repository only.

Existing packages that have already been built remain in the Wolfi binary package repository such as `apk.cgr.dev/chainguard/x86_64` until they are removed according to the retention policy.

The most common trigger for removal is when a new version of a version streamed package is released. In this situation, package definitions for prior versions streams are removed from Wolfi. For example, when MariaDB 13 is released and added to Wolfi, MariaDB 12 is removed from Wolfi. New versions of MariaDB 12 packages are available from Chainguard only as the focus of Wolfi is on latest releases only.

### Can I mix packages from Alpine repositories into a Wolfi-based image?

### Can I mix packages from Alpine repositories into a Wolfi-based image?
No, it’s not possible to mix Alpine apks with Wolfi apks. If your image requires dependencies that are currently only available for Alpine. You might consider using [melange](https://github.com/chainguard-dev/melange) to build a custom apk for your image.

### Can I use Wolfi on the Desktop?

No. Desktop distributions require additional software that is out of scope for Wolfi.

### Who maintains Wolfi?

Wolfi was created and is currently maintained by [Chainguard](https://chainguard.dev) as the base of Chainguard OS.

### What are the plans for long-term Wolfi governance?

We intend for Wolfi to be the core foundation of Chainguard OS and available as open source project for use with minimal packages as used in our free Chainguard Containers.

### Where can I get security feeds for Wolfi?

See [SECURITY.md](/SECURITY.md) for information about reporting security incidents concerning and consuming security data about Wolfi.

### Where can I ask questions or learn more about using Wolfi?

Find details in our [repositories](https://github.com/orgs/wolfi-dev/repositories), use our [community channels](#wolfi-community) and read our [documentation](https://edu.chainguard.dev/open-source/wolfi/overview/).