4 ms·
I read the entire chain guard landing page and still have absolutely no idea what this product is.
by mvdtnz 3y ago
I read the entire chain guard landing page and still have absolutely no idea what this product is.
- password4321 3y agoPer their website: > Minimal, hardened images with SBOMs and signatures > Get free Chainguard Images for your organization. Upgrade for more versions, SLAs, and dedicated support.
- iaresee 3y agoTook me a scroll as well to sort this out. Looks like they’re producing low-CVE images for use in environments where being very on top of CVE squashing is super important
- ryanianian 3y ago0-CVE base images and a package ecosystem. Very useful if you ship containers as products to security-sensitive folks.
- jacques_chester 3y agoChainguard is proof that modern CI/CD is still a luxury product for most of the industry. They have a fantastic amount of automation behind image production, including some tools they rolled themselves (like apko). Disclosure: I am friends with / have worked with some Chainguard folks.
- ryanianian 3y agoDeclarative image builds, nightly rebuilds of the whole ecosystem, and they bake the SBOM into the images. It is a really good offering. It's a shame we had to use the competing offering from RedHat for contractual reasons.
- MordodeMaru 3y agoWhat images do you usually use and where do you get them from?
- yau8edq12i 3y agoDo you always speak in riddles?
- MordodeMaru 3y agoLol, I thought my question was pretty straightforward. Sorry
- remram 3y agoI think the point is that you answered a question with a question. Even if it's a clear question, it's not an answer.
- MordodeMaru 3y agoI was expecting an answer to my question to then build myself an answer to his original question. I was trying to showcase what Chianguard Images are in a nutshell. But you are right: overly complicated. What images do you usually use and where do you pull them from? ;-)
- allysirois 3y agoI work at Chainguard, hoping this helps answer your question. Chainguard has free and paid images. You can find all the free images in the Chainguard Images Directory: https://images.chainguard.dev/directory?category=all https://images.chainguard.dev/directory?category=all
- trickleup 3y agoLots of teams get thrashed trying to fix or bring down the count of CVEs so they can ship, so chainguard provide images with a guarantee of 0 CVEs. It saves folks a lot of time patching to bring down the count. However its a novel situation as most of the time these vulnerabilities are not even reachable in the first place, they are just noise. So its a solution more appeaseing to security theatre, than a real world threat. Once in a while a nasty thing comes along like log4shell, heartbleed, but most of its just noise. They do cut down image size significantly though, which is something I personally like and has value for saving ingress costs. Think Alpine.