Melange on

melange Overview

Mon, 17 Oct 2022 11:07:52 +0200

melange is an apk builder tool that uses declarative pipelines to create apk packages. It is part of the open source tooling used for Wolfi, which is the operating system used to power Chainguard Containers.

From a single YAML file, users are able to generate multi-architecture apks that can be injected directly into apko builds.

The following diagram contains an overview of the apko and melange ecosystem and how they work together to compose apk-based images, using either Wolfi or Alpine as base system.

Getting Started with melange

Thu, 21 Jul 2022 15:21:01 +0200

melange is an apk builder tool that uses declarative pipelines to create apk packages. From a single YAML file, users are able to generate multi-architecture apks that can be injected directly into apko builds.

Understanding melange can help you better understand the Wolfi operating system and how Chainguard Containers are made to be minimal and secure, but it is not necessary to have a background in melange in order to use Chainguard Containers.

In this guide, you’ll learn how to build a software package with melange. To demonstrate the versatile combination of melange and apko builds, we’ll package a small command-line PHP script and build a minimalist container image based on Wolfi with the generated apk. All files used in this demo are open source and available at the melange-php-demos repository.

Troubleshooting melange Builds

Wed, 10 Aug 2022 11:07:52 +0200

Debug Options

To include debug-level information on melange builds, edit your melange.yaml file and include set -x in your pipeline. You can add this flag at any point of your pipeline commands to further debug a specific section of your build.

Package Version Selection

Mon, 06 Nov 2023 08:49:31 +0000

This document explains how to specify version constraints for packages installed with the apk tool, as well as apko and melange. Understanding version selection will enable you to choose the version you’re looking for, determine what updates and vulnerability fixes you receive, and can allow you to reproduce an image’s digest through exact version matching.

Version selection in apko and melange

All the examples in this document focus on usage with the apk tool, but the same semantics apply to apk add as well as references in an apko or melange packages field:

melange FAQs

Mon, 17 Oct 2022 11:07:52 +0200

Do I need to understand melange to use Chainguard Containers?

No. Chainguard built melange as part of its open source tooling used for the Wolfi operating system. While you can check out the project on GitHub and learn more, it’s not a prerequisite for using or working with Chainguard Containers.