open source · signed · reproducible
Cloud images you can actually trust.
Cloud-init-ready, signed, reproducible qcow2 images for OpenStack and Proxmox — built in the open on GitHub Actions, with keyless cosign signatures and a public manifest for every release.
Start with Alpaquita Linux — verify and boot in two commands.
Reproducible
Every release is built from a pinned upstream source and a tagged builder container. The
exact commit, run URL and builder digest are embedded in the per-image
MANIFEST.json.
Signed
Keyless cosign signatures via GitHub OIDC. Verify any
image with a single command — no key management on your side.
Open infrastructure
Source of truth on a self-hosted Garage cluster, mirrored to Cloudflare R2 behind a public CDN. Reusable workflows in .github power every image repo.
Featured images
All images →Alpaquita Linux
2026.04.14Lightweight Alpine-derived distribution from BellSoft, glibc and musl flavors.
Alpine Linux
3.23.4Minimal, security-oriented distro built around musl libc and BusyBox.
Amazon Linux 2
2.0.20260508.0AWS's long-term-support base image, derived from the RHEL/CentOS 7 family.