DirectorySecurity advisories
Sign in

Directory

melange logo

melange

Last changed
Get started with latest for free
docker pull cgr.dev/chainguard/melange

Need access to a specific version? Contact us.

Sign in for updates

Get notified of upcoming product changes, critical vulnerability notifications and patches and more.

Sign in
Versions
Overview
Provenance
Specifications
SBOM
Vulnerabilities
Advisories

Container image for running melange workflows to build APK packages.

Download this Image

The image is available on cgr.dev:

docker pull cgr.dev/chainguard/melange:latest

To build the melange workflow in examples:

docker run --privileged -v "$PWD":/work cgr.dev/chainguard/melange build /work/tests/minimal.yaml

Output will be in the packages directory.

To build the melange package for the host architecture:

docker run --privileged -v "$PWD":/work cgr.dev/chainguard/melange build --empty-workspace --arch $(uname -m) /work/tests/minimal.yaml

To get a shell, you can use the -dev variant, and change the entrypoint:

docker run --privileged -v "$PWD":/work -it --entrypoint /bin/sh cgr.dev/chainguard/melange:latest-dev

/ # melange version
...

Note that melange uses bubblewrap internally, which requires various Linux capabilities, hence the use of --privileged. Because of this requirement, we recommend this image is used only for local development and testing.

Licenses

Chainguard Images contain software packages that are direct or transitive dependencies. The following licenses were found in the "latest" version of this image:

  • Apache-2.0

  • BSD-3-Clause

  • GPL-2.0-only

  • LGPL-2.0-or-later

  • LGPL-2.1-or-later

  • MIT

  • MPL-2.0

For a complete list of licenses, please refer to this Image's SBOM.

Software license agreement

Category
application
tools

Products

Chainguard Images

© 2024 Chainguard, Inc.