How Chainguard Builds Secure Container Images
Originally published in Japanese at https://zenn.dev/ymotongpoo/books/chainguard-image-toolchain.
Chainguard builds secure container images without Dockerfiles, using two open-source tools, melange and apko, together. This book walks through how these two tools cooperate with Wolfi OS, alternating between conceptual explanations and hands-on exercises you can follow along with. It covers the whole path: building an APK package from source, assembling it into a container image, and publishing that image to a registry.