
apko builds single-layer OCI images declaratively from apk packages defined in a YAML file.
No shell steps, just apk dependencies, which keeps builds reproducible and generates a build-time SBOM.
Chainguard built apko and pairs it with melange to produce Chainguard Containers.
apko is a command-line tool designed to create single-layer container images based on the apk package format. It was so named as it uses the apk package format and is inspired by the ko build tool.
apko is part of the open source toolkit developed by Chainguard to build Chainguard Containers. The following diagram contains an overview of the apko ecosystem and how it interacts with melange for building apk-based images, using either Wolfi or Alpine as base system.

For more information and up-to-date examples on how to use apko, please refer to the apko repository on GitHub.
Frequently Asked Questions
Related articles