October 3, 2024

New Chainguard Images July-September 2024: Hardened, minimal containers

Kim Lewandowski
Co-founder
Chainguard
View all articles

Kim Lewandowski Co-founder

Chainguard Images are designed to make it easier than ever to start left instead of shifting left. We’ve been hard at work all summer building and refining our Images factory to continue making that vision a reality. That hard work has resulted in approximately 192 new images from July through September!

Many of these images are available to test drive in our Directory. However, updates to the Developer tier are coming. Please see this notice from our support team for more information.

The lists below include FIPS-enabled images, as well as some new images for our suite of Chainguard AI Images – CPU and GPU-enabled images that are hardened, minimal, and optimized for efficient software development. Each table is broken out by month and includes FIPS versions of the listed images (hence there being less than 192 rows when all the tables are combined).

July’s complete Chainguard Image batch

IMAGE	IMAGE TYPE	FIPS?
Calico key cert provisioner	App	✅
cfssl self-signed certificate generator	App	✅
Curl	App	✅
Distribution	App	✅
Elastic Cloud on Kubernetes	App	✅
Gitaly	App	✅
GitLab Agent for Kubernetes	App	✅
GitLab base	App	✅
GitLab Certificates	App	✅
GitLab Container Registry	App	✅
GitLab Exporter	App	✅
GitLab kubectl	App	✅
GitLab Pages	App	✅
GitLab Runner	App	✅
GitLab Shell	App	✅
GitLab sidekiq	App	✅
GitLab Toolbox	App	✅
GitLab Webservice	App	✅
GitLab Workhorse	App	✅
Grafana Mimir	App	✅
Helm chartmuseum	App	✅
Keycloak-Bitnami	App	✅
Kiali	App	✅
Kibana	App	✅
Kubernetes NodeLocal DNSCache	App	✅
Loki	App	✅
Mongodb bitnami	App	✅
OpenLDAP	App	✅
Prometheus admission webhook	App	✅
RabbitMQ cluster Kubernetes operator	App	✅
RabbitMQ messaging topology operator	App	✅
Valkey	App	✅

August’s complete Chainguard Image batch

IMAGE	IMAGE TYPE	FIPS?
AWS EFS CSI Driver	App	✅
GitLab Runner Helper	App	✅
Grafana Alloy	App	✅
Kubernetes csi external provisioner	App	✅
Kubernetes csi external snapshot controller	App	✅
Kubernetes csi external snapshot validation webhook	App	✅
Kubernetes csi external snapshotter	App	✅
Kubernetes Ingress default backend	App	✅
MinIO (Bitnami)	App	✅
MinIO (Bitnami) Client	App	✅
MinIO Operator	App	✅
NVIDIA device plugin for Kubernetes	App	✅
Trivy	App	✅
VictoriaMetrics Operator	App	✅
VictoriaMetrics vmagent	App	✅
VictoriaMetrics vmauth	App	✅
VictoriaMetrics vminsert cluster	App	✅

September’s complete Chainguard Image batch

IMAGE	IMAGE TYPE	FIPS?
AWS VPC CNI (networking for Kubernetes workloads)	App	✅
AWS VPC CNI init (networking for Kubernetes workloads)	App	✅
Bash	App	✅
Bitnami etcd	App	✅
CloudWatch Agent	App	✅
CloudWatch Agent Operator	App	✅
EKS CoreDNS	App	✅
EKS Kubernetes API server	App	✅
EKS Kubernetes controller manager	App	✅
EKS Kubernetes external attacher	App	✅
EKS Kubernetes external provisioner	App	✅
EKS Kubernetes external resizer	App	✅
EKS Kubernetes external snapshot controller	App	✅
EKS Kubernetes external snapshot validation webhook	App	✅
EKS Kubernetes external snapshotter	App	✅
EKS Kubernetes liveness probe	App	✅
EKS Kubernetes node driver registrar	App	✅
EKS Kubernetes proxy	App	✅
EKS Kubernetes scheduler	App	✅
EKS Network Policy Agent	App	✅
EKS Pod Identity	App	✅
Flux	App	✅
Flux image automation controller	App	✅
Flux image reflector controller	App	✅
Flux kustomize controller	App	✅
Flux notification controller	App	✅
Flux source controller	App	✅
Git-sync sidecar app for syncing with upstream	App	✅
Gitea	App	✅
Go MSFT (FIPS)	Base	✅
K8ssandra kubectl plugin	App	✅
Kapp-controller	App	✅
Local volume Node cleanup	App	✅
Monitoring and observability tool for the PolicyReport CRD	App	✅
Open Policy Agent (OPA)	App	✅
PHP (FIPS)	Base	✅
Plugin for PolicyReport CRD monitoring tool	App	✅
Progressive delivery for Kubernetes	App	✅
Progressive delivery for Kubernetes with kubectl	App	✅
Pytorch	App	✅
Service listening on an address/port combination test	App	✅
Static provisioner of local volumes	App	✅
Toolkit to run Ray applications on Kubernetes	App	✅
UI for PolicyReport CRD monitoring tool	App	✅
VictoriaMetrics vmalert	App	✅
VictoriaMetrics vminsert	App	✅
VictoriaMetrics vmselect	App	✅
VictoriaMetrics vmstorage	App	✅

Featured Chainguard Images

As you can see, we’ve been busy! Among these releases, there are a lot of favorites. We’re excited about our new suite of images for GitLab deployment. PyTorch is a FIPS-enabled image ready for machine learning applications. We also FIPS-ified Amazon’s EKS distro, including several critical components for managing resources efficiently.

GitLab

Overview: GitLab is an almost one-stop shop for the software development lifecycle. It’s an open source code repository and platform for DevSecOps projects that includes a variety of different things, such as a container repository and a variety of automations.
What’s New: Chainguard has built over 10 new images for GitLab components with various functionalities, all FIPS-enabled. All the new GitLab images are kept up-to-date and optimized for performance and security.
Use Cases: Ideal for organizations seeking a DevSecOps solution, particularly in telecommunications, financial services, or the public sector.

PyTorch

Overview: PyTorch is a machine learning library built based on Torch, a scientific machine learning framework. It has two main features: tensor computing with GPU acceleration and deep neural networks.
What’s New: Chainguard’s PyTorch image is FIPS-enabled and STIG-hardened, ready to be deployed in machine learning environments.
Use Cases: Ideal for data scientists and developers working on deep learning projects.

EKS

Overview: Amazon EKS Distro (EKS-D) is a Kubernetes distribution based on and used by Amazon Elastic Kubernetes Service (EKS) to create reliable and secure Kubernetes clusters.
What’s New: Chainguard’s EKS images include several critical components, including a DNS server that integrates with Kubernetes, a container storage interface (CSI) driver for managing AWS Elastic Block Store volumes, and a variety of CSI drivers to manage storage resources effectively. These images are all designed with security and ease of use top of mind.
Use Cases: Useful for organizations running Kubernetes who want a verified, consistent experience across their clouds and data centers.

Chainguard Images are a product you can trust

These container images are hardened, minimal, and CVE-free. We’ve worked hard to build something that can help you ease the pain of triaging and remediating dozens of CVEs.

Want to know more? Hear from Chainguard customer Domino Data Labs:

Join us in our mission to revolutionize software supply chain security, one container image at a time. We’re always building new images, and there is a lot more in store in the coming months. In the meantime, dive into our Images Directory and contact us if something catches your eye. We’d love to support you in making your (or your project’s) vision a reality.

Share this article