bellsoft/buildpacks.builder repository overview

⁠bellsoft/buildpacks.builder

This repository contains a Hardened Cloud Native builder to produce container images based on BellSoft Hardened Images for Java, GraalVM Native Image, Go, Python, Node.js, and Ruby applications.

⁠What are BellSoft Hardened Images?

BellSoft Hardened Images are minimized container images that strip out the package manager and non-essential components, reducing vulnerabilities and limiting attacker entry points. By design, they have low-to-zero CVEs at release time and include a Software Bill of Materials (SBOM). The images are continuously updated by BellSoft to patch known vulnerabilities.

⁠What is Alpaquita Linux?

Alpaquita Linux is a lightweight operating system optimized for the deployment of cloud native applications. It is an optimal solution for running applications with various workloads. It requires a small amount of resources to run. Alpaquita comes in two versions: one based on optimized musl libc, and the other one on GNU libc (glibc).

Developer and maintainer: BellSoft⁠⁠

⁠What is this builder for?

This builder is perfect for containerizing applications written in:

• Java
• Go,
• Python,
• Node.js,
• Ruby, and also
• Building and containerizing native images using GraalVM Native Image.

⁠Tags

• glibc - Hardened image with glibc
• musl - Hardened image with musl

⁠What's in the builder?

You can view a builder’s metadata, including its lifecycle version, included buildpacks, detection order, and configured run images, by running

pack builder inspect bellsoft/buildpacks.builder:musl

The list of installed software components and their licenses can be analyzed by retrieving an SBOM that is generated and included into the final image. For instance, here’s how to do that with pack:

pack sbom download <image-name> --output-dir /tmp/app-sbom

⁠How to use this builder?

You can use this builder with Paketo's pack tool and/or Buildpack Gradle or Maven plugins. Please check the Paketo docs⁠ for details. You don't need to manage or pull this image manually. Just use bellsoft/buildpacks.builder:musl or bellsoft/buildpacks.builder:glibc as the builder image parameter. Here's how to do that with pack:

pack build my-app --builder bellsoft/buildpacks.builder:musl

For the introductions into using buildpacks with Maven/Gradle plugins, you can refer to this article⁠.

Please report bugs to https://github.com/bell-sw/Liberica/issues⁠

⁠License

As with all Docker images, these also contain other software, which may be distributed under other licenses.

As for any pre-built image usage, it is the image user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within.