apko

Spec sheet

What it does

apko is an open-source command-line tool that builds container images from APK packages using declarative YAML configuration.Read 4 Oct 2026 · edu.chainguard.dev

Purpose

apko builds and publishes OCI container images from apk packages.Read 4 Oct 2026 · github.com

Integrations

The project documents use with Docker and provides an apko build action for GitHub Actions CI/CD pipelines.Read 4 Oct 2026 · edu.chainguard.dev

Support

The project README directs users with questions to the #apko channel on Kubernetes Slack.Read 4 Oct 2026 · github.com

Build speed

The project says apko aims to build images in milliseconds.Read 4 Oct 2026 · github.com

Build step limit

apko cannot run arbitrary Dockerfile-style build commands; software installation and shell commands must be included in APK packages.Read 4 Oct 2026 · edu.chainguard.dev

Companion tool

Chainguard identifies melange as a companion tool for producing APK packages to use with apko.Read 4 Oct 2026 · github.com

Compatibility

The README says apko can build from any environment with apk tooling and shows loading generated images into Docker.Read 4 Oct 2026 · github.com

Declarative configuration

apko files are declarative and do not support an equivalent of Dockerfile RUN statements.Read 4 Oct 2026 · github.com

Image output

It builds and publishes OCI container images composed from APK packages.Read 4 Oct 2026 · github.com

Image publishing

The CLI can publish a built image directly to a registry.Read 4 Oct 2026 · github.com

Image size

Generated images contain only what the application needs, in the style of distroless images.Read 4 Oct 2026 · github.com

Installation

The project README lists installation through Homebrew, mise, Go source installation, or its container image.Read 4 Oct 2026 · github.com

Minimal images

apko focuses on lightweight, flat base images containing selected packages.Read 4 Oct 2026 · edu.chainguard.dev

Multi architecture

An image configuration can specify architectures, and apko can compose images for different architectures and distributions.Read 4 Oct 2026 · edu.chainguard.dev

Package ecosystem limit

A single apko build cannot mix Wolfi and Alpine packages.Read 4 Oct 2026 · edu.chainguard.dev

Package requirement

Custom tools and applications must first be packaged as apk packages, which can be built with the sister tool melange.Read 4 Oct 2026 · github.com

Project status

The README describes apko as a work in progress and says details are subject to change.Read 4 Oct 2026 · github.com

Publishing

The CLI can publish generated images directly to a container registry.Read 4 Oct 2026 · github.com

Reproducibility

The project says apko images are fully bitwise reproducible by design.Read 4 Oct 2026 · github.com

SBOM

apko produces a software bill of materials that details the packages inside an image.Read 4 Oct 2026 · github.com

Security reporting

The security policy asks users to report vulnerabilities by email and says reporters can expect acknowledgment within 72 hours.Read 4 Oct 2026 · github.com

Services

apko supports the s6 supervision suite to run multiple processes in a container.Read 4 Oct 2026 · github.com

Where Specifiction places it

• Container Build Tools#14 of 347.8