Base Images
Minimal base images
Base Images are ultra-minimal base images containing only CA certificates and core runtime libraries, starting at 5 MB for static images. They are available in glibc and musl variants for maximum compatibility with different applications. The images are built daily with the latest security patches and automatically signed by Sigstore to verify integrity.
Enterprise-grade protection compliant with regulatory requirements and security standards
Fast deployment with minimal resource overhead
Dedicated support from a certified partner
Easy integration with your existing infrastructure
Key features
- Ultra-minimal footprint from 5 MB for static and 15 MB for the glibc variant
- glibc and musl variants for compatibility with Alpine and Debian-based applications
- Multi-arch manifest for amd64, arm64, and armv7 from a single tag
- No shell, package manager, or unnecessary system tools
- Daily rebuilds with automatic CVE patching in < 24 h
Business benefits
- 90% reduction in attack surface compared to Alpine base
- 80% faster download times thanks to smaller images
- Elimination of exploits leveraging a shell and system tools
- 70% lower registry storage and bandwidth costs
- Faster static and dynamic analysis thanks to lower complexity
Why Chainguard?
A leader in software supply chain security offering hardened container images with a minimal attack surface. Chainguard images are built from the ground up with a strong focus on security, regularly updated, and free from known CVEs.
Need Base Images in your organization?
As a certified Chainguard partner, we'll help you deploy and configure the solution.