Language migration guides on

Migrate a .NET application to Chainguard Containers

Wed, 05 Nov 2025 00:00:00 +0000

Chainguard’s .NET container images provide a security-hardened foundation for building and running applications with significantly fewer vulnerabilities than .NET images provided by Microsoft. Chainguard’s .NET container images maintain full .NET compatibility while dramatically reducing the attack surface.

This guide demonstrates migrating a .NET application from Microsoft’s official images to Chainguard’s .NET container images by building one application with two different Dockerfiles and comparing the results side by side. This guide also highlights concrete examples of the security improvements resulting from migrating to Chainguard Containers.

Migrate a Java application to Chainguard Containers

Tue, 02 Apr 2024 15:21:01 +0000

Chainguard’s Java containers fill the same roles as the Java base images found on Docker Hub, such as eclipse-temurin and maven, but are built on Wolfi with a much smaller package set. Chainguard builds its own JDK from source in Wolfi, and rebuilds these containers nightly so security patches land without manual intervention. Porting a Dockerfile takes a handful of changes, mostly around the non-root user and the absent shell, which Differences from the Java images on Docker Hub covers in full. For current CVE data on a specific container and tag, refer to the JRE entry in the Chainguard Containers directory.

Migrate a Node.js application to Chainguard Containers

Thu, 09 May 2024 15:56:52 -0700

Chainguard’s Node.js container images offer a streamlined migration path for applications seeking enhanced security posture through minimal, distroless design. Built on Wolfi, they include only the packages your application needs, which keeps both the attack surface and the image size small. Daily automated builds ensure your applications always have the latest security patches without manual intervention. For current CVE data on each image and tag, see the Node entry in the Chainguard Containers directory.

Migrate a PHP application to Chainguard Containers

Thu, 04 Apr 2024 15:56:52 -0700

Chainguard’s PHP container images provide enhanced security for PHP applications through minimal, purpose-built images that reduce attack surface. Based on Wolfi, they include only the packages your application needs, while maintaining full compatibility with PHP workloads. Daily automated builds deliver the latest security patches without manual intervention. For current CVE data on each PHP image and tag, see the PHP entry in the Chainguard Containers directory.

This article will assist you in the process of migrating your existing PHP Dockerfiles to leverage the benefits of Chainguard Containers, including a smaller attack surface and a more secure application footprint.

Migrate a Python application to Chainguard Containers

Thu, 02 May 2024 15:06:00 -0700

Chainguard’s Python containers provide a migration path to significantly reduce vulnerabilities in Python applications while maintaining full compatibility with existing workloads. This guide explains how to migrate your containerized Python applications to benefit from Chainguard’s enhanced security posture and daily updates.

Chainguard Containers are built on Wolfi, a distroless Linux distribution designed for security and a reduced attack surface. Chainguard Containers are smaller and have few or no CVEs. Our Chainguard Containers for Python are built nightly for extra freshness, so they’re always up-to-date with the latest remediations.