sdk

Development image for melange and apko.

Get It!

The image is available on cgr.dev:

docker pull cgr.dev/chainguard/sdk:latest

Supported tags

Tag	Digest	Arch
`dev-alpine-20221126`	`sha256:3708f8cc667fb4eb3f5bb4b2dd15e3da0286e6dc440b72fcaa4f3f46b1b3c729` View entry in Rekor	`amd64` `arm64`
`wolfi-20221201`	`sha256:c8dc4c16f2ef044ad5b7ef02fd4b776c32674ef42a382774483340e73e935b22` View entry in Rekor	`amd64`
`dev-wolfi-20221119`	`sha256:aefddde028e9c3d271e7a3254cd917eb249581d3a76d1fade132243a9ebe0027` View entry in Rekor	`amd64`
`dev-alpine-20221125`	`sha256:3633ae4ec4f28b15fa084e9e7f684197c021f0ee58a91736f30167fbff9bee11` View entry in Rekor	`amd64` `arm64`
`dev-wolfi-20221123`	`sha256:69adc4d96dc34877f831af12f04d752acc4869a0853530736864138227efd377` View entry in Rekor	`amd64`
`dev-wolfi-20221127`	`sha256:4e9860f39572e938853ef8987aa0f02bf2508dd0999a4c708c32b8863bfd8eec` View entry in Rekor	`amd64`
`dev-alpine-20221119`	`sha256:8aabbaf50bf153583a523e5ff0db915fa232208a4791fa8fbd16005ba80b4157` View entry in Rekor	`amd64` `arm64`
`dev-wolfi-20221122`	`sha256:ef2dc5677acae79e49be72cc0241cd7329dcf7b369ce645e35cdc8f356f9aeee` View entry in Rekor	`amd64`
`dev-alpine-20221121`	`sha256:d17b5535920b7ee245c51f3d0f5d4317e925ad3bc6ac731c47956df0ba2fb9a4` View entry in Rekor	`amd64` `arm64`
`dev-alpine-20221122`	`sha256:130d2accbfe32c4a83a20ec0632661834b4ee732715f3ffa33f72ab3dd5080c4` View entry in Rekor	`amd64` `arm64`
`dev-wolfi-20221124`	`sha256:2d836578c7c624eb1257f482ef6ec581285c965af2ac644b3cb3f1ea00d05264` View entry in Rekor	`amd64`
`testing` `testing-20221118`	`sha256:d6e6172257fba34e9c39e8ccd6f7292c1634357b552da0527269f3e66171c4e8` View entry in Rekor	`amd64`
`dev-alpine-20221120`	`sha256:4c806210640ffce120e92d6b708c48b5fc90a347536ebc671f4a0122bf7ebfca` View entry in Rekor	`amd64` `arm64`
`dev-alpine-20221123`	`sha256:abc19835b5c35dff2d33041da5e30846598601eb4bc05d86fdc17651c4016538` View entry in Rekor	`amd64` `arm64`
`wolfi-20221129`	`sha256:f01b2ceac539db0d70d7daea7968034b520250aed48247d1878e9f521c5ea155` View entry in Rekor	`amd64`
`wolfi-20221130`	`sha256:18e2827ab0e02ed2634264b1d1d03228a3249e4dfd0400efb3217a591bf806c4` View entry in Rekor	`amd64`
`alpine` `latest`	`sha256:490a15e66cf832fdfa071e9bf3a6f874c9ac22a961b1471c23a452207bc04f7a` View entry in Rekor	`amd64` `arm64`
`dev-alpine-20221118`	`sha256:ed43cbaa2a57c14034aec99ac48c4ea89eed8aca8bc52a1d327e33e2d2a7cad5` View entry in Rekor	`amd64` `arm64`
`dev-wolfi-20221120`	`sha256:5475c40123a6ebbfd4aab4fa77ab7a3f7189e8084c9bd59c718ac8a585afc21e` View entry in Rekor	`amd64`
`0.0.1-r0-glibc`	`sha256:703a461526e1679fa74bfa5db18bc4af23e93f9f3709a93948a144a44328f0af` View entry in Rekor
`dev-wolfi-20221126`	`sha256:aa430f502c3d91198f0a2ac23d5e8956c10ada8c79498c81772bdff34a729013` View entry in Rekor	`amd64`
`dev-alpine-20221124`	`sha256:7203b3719a18f626a2efea1a552fce545bd4f537f63edce9d70e509fdb44f053` View entry in Rekor	`amd64` `arm64`
`dev-wolfi-20221125`	`sha256:65b371411fae5350b91f65c8c831e6bb35699862f6d8dcbab7ea71511b12a182` View entry in Rekor	`amd64`
`dev-wolfi-20221128`	`sha256:440c8906df40a3bb3473d6cf746f88e8bb72a10ea884723c7fa7884e7269a969` View entry in Rekor	`amd64`
`dev-alpine-20221128`	`sha256:6e4aa3b51307384fb10323ea8ee0ae44b792b968530595cc851de28a819d653a` View entry in Rekor	`amd64` `arm64`
`testing-20221117`	`sha256:e198df88dcb8ef760794218a309330e0b8b3c8e1dd4c211f2951f87be1f47313` View entry in Rekor	`amd64`
`dev-wolfi-20221118`	`sha256:5b49de60a54bedb10578bff89509a04cfcf44978fbe17f5c823a78741bdd6736` View entry in Rekor	`amd64`
`dev-wolfi-20221121`	`sha256:94a61c7857febefef01c12f364bcc582296d1b39b3ac1fba84a3b908cf0607f2` View entry in Rekor	`amd64`
`dev-alpine-20221127`	`sha256:0529690fec0263afd03035eff82e840cb28d00b2a200f7aab001c6b3b81f02ab` View entry in Rekor	`amd64` `arm64`
`wolfi` `wolfi-20221202`	`sha256:43cb0fb2d8a316b4c643fc3672a9d66c4ee513420d757a7d480b8ada867d0fa8` View entry in Rekor	`amd64`
`dev-wolfi` `dev-wolfi-20221129`	`sha256:11fd26a1f687dc5c0af0109258877378c6a4e1715de799e4081d0878a2b1facf` View entry in Rekor	`amd64`
`dev-alpine` `dev-alpine-20221129`	`sha256:6e68da290c37f3bfe2aaad62870b37d33853d1d67c3b5cd382abecc751b71308` View entry in Rekor	`amd64` `arm64`

Usage

With melange

Clone down your development fork/branch:

git clone https://github.com/chainguard-dev/melange.git
cd melange

Run the image, mounting the repo workspace (--privileged flag required):

docker run --privileged --rm -it -v "${PWD}:${PWD}" -w "${PWD}" cgr.dev/chainguard/sdk

Upon entering the image, you should see the following welcome message:


Welcome to the development environment!


[sdk] ❯

Inside the environment, test out local changes to the melange codebase by running the following:

make melange install

Then run melange commands as normal:

melange keygen

melange build \
  --arch x86_64,arm64 \
  --empty-workspace \
  --repository-append packages \
  --signing-key melange.rsa \
  examples/gnu-hello.yaml

With apko

Clone down your development fork/branch:

git clone https://github.com/chainguard-dev/apko.git
cd apko

Run the image, mounting the repo workspace:

docker run --rm -it -v "${PWD}:${PWD}" -w "${PWD}" cgr.dev/chainguard/sdk

Upon entering the image, you should see the following welcome message:


Welcome to the development environment!


[sdk] ❯

Inside the environment, test out local changes to the apko codebase by running the following:

make apko install

Then run apko commands as normal:

apko build --debug \
  examples/alpine-base.yaml \
  alpine-base:latest output.tar

Signing

All Chainguard Images are signed using Sigstore!

To verify the image, download cosign and run:

COSIGN_EXPERIMENTAL=1 cosign verify cgr.dev/chainguard/sdk:latest | jq

Output:

Verification for cgr.dev/chainguard/sdk:latest --
The following checks were performed on each of these signatures:
  - The cosign claims were validated
  - Existence of the claims in the transparency log was verified offline
  - Any certificates were verified against the Fulcio roots.
[
  {
    "critical": {
      "identity": {
        "docker-reference": "ghcr.io/chainguard-images/sdk"
      },
      "image": {
        "docker-manifest-digest": "sha256:490a15e66cf832fdfa071e9bf3a6f874c9ac22a961b1471c23a452207bc04f7a"
      },
      "type": "cosign container image signature"
    },
    "optional": {
      "1.3.6.1.4.1.57264.1.1": "https://token.actions.githubusercontent.com",
      "1.3.6.1.4.1.57264.1.2": "schedule",
      "1.3.6.1.4.1.57264.1.3": "38d5ec5e57f582e16b4b4dd2a57b74021fa42910",
      "1.3.6.1.4.1.57264.1.4": ".github/workflows/release.yaml",
      "1.3.6.1.4.1.57264.1.5": "chainguard-images/images",
      "1.3.6.1.4.1.57264.1.6": "refs/heads/main",
      "Bundle": {
        "SignedEntryTimestamp": "MEYCIQDHqxwtXXtFHCuhns8VIjm0q83dZPtupFlP6LP0ax6KHgIhAICeRndkL3FD3hfIgJBexfAUtE4Y9/tGcFb5pMIZNTlD",
        "Payload": {
          "body": "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
67DE
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",
          "integratedTime": 1669855238,
          "logIndex": 8189917,
          "logID": "c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d"
        }
      },
      "Issuer": "https://token.actions.githubusercontent.com",
      "Subject": "https://github.com/chainguard-images/images/.github/workflows/release.yaml@refs/heads/main",
      "githubWorkflowName": ".github/workflows/release.yaml",
      "githubWorkflowRef": "refs/heads/main",
      "githubWorkflowRepository": "chainguard-images/images",
      "githubWorkflowSha": "38d5ec5e57f582e16b4b4dd2a57b74021fa42910",
      "githubWorkflowTrigger": "schedule",
      "run_attempt": "1",
      "run_id": "3588171504",
      "sha": "38d5ec5e57f582e16b4b4dd2a57b74021fa42910"
    }
  }
]

You can verify that the image was built in Github Actions in this repository from the Issuer and Subject fields.

Build

This image is built with melange and apko.

Name		Name	Last commit message	Last commit date
Latest commit History 126 Commits
.github		.github
.gitignore		.gitignore
LICENSE		LICENSE
README.md		README.md
USAGE.md		USAGE.md
apko-glibc.yaml		apko-glibc.yaml
apko.yaml		apko.yaml
build.sh		build.sh
melange-glibc.yaml		melange-glibc.yaml
melange.yaml		melange.yaml
test.sh		test.sh

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Repository files navigation

sdk

Get It!

Supported tags

Usage

With melange

With apko

Signing

Build

About

Uh oh!

Releases

Packages

Uh oh!

Uh oh!

Languages

License

jdolitsky/sdk

Folders and files

Latest commit

History

Repository files navigation

sdk

Get It!

Supported tags

Usage

With melange

With apko

Signing

Build

About

Resources

License

Uh oh!

Stars

Watchers

Forks

Releases

Packages 0

Uh oh!

Uh oh!

Languages

Packages