Release v2026.02.05

🚀 Automated Release

This release includes all three image variants: base (musl), glibc, and debug.

📦 Package Changes

Base Image (musl libc)

No changes

glibc Image

🔄 Updated (4 packages)

• glibc: 2.42-r8 → 2.43-r0
• glibc-locale-posix: 2.42-r8 → 2.43-r0
• ld-linux: 2.42-r8 → 2.43-r0
• libgcc: 15.2.0-r7 → 15.2.0-r8

Debug Image

🔄 Updated (5 packages)

• glibc: 2.42-r8 → 2.43-r0
• glibc-locale-posix: 2.42-r8 → 2.43-r0
• ld-linux: 2.42-r8 → 2.43-r0
• libcrypt1: 2.42-r8 → 2.43-r0
• libgcc: 15.2.0-r7 → 15.2.0-r8

📊 Summary

• Base: 3 total packages
• glibc: 7 total packages
• Debug: 16 total packages

📦 Container Images

Base Image (Production - musl libc)

• Image: ghcr.io/taihen/base-image:latest
• Tagged Version: ghcr.io/taihen/base-image:v2026.02.05
• Digest: ghcr.io/taihen/base-image@sha256:92a434e813874750f2c58c8b554547455761f5963cfc6a46a004d80306f3ff2a

glibc Image (Production - GNU libc)

• Image: ghcr.io/taihen/base-image:glibc
• Tagged Version: ghcr.io/taihen/base-image:v2026.02.05-glibc
• Digest: ghcr.io/taihen/base-image@sha256:4f92d1f53789403020d4995f50f0b6c5074e6fb27d159bf021db43939f938069

Debug Image (Development)

• Image: ghcr.io/taihen/base-image:debug
• Tagged Version: ghcr.io/taihen/base-image:v2026.02.05-debug
• Digest: ghcr.io/taihen/base-image@sha256:dee086fdea0e9e9bcc92c7a19e9287ad5bb0278d5e0071053b24d412eb20fdc8

🔐 Verification

You can verify all image signatures using:

# Base image
cosign verify ghcr.io/taihen/base-image@sha256:92a434e813874750f2c58c8b554547455761f5963cfc6a46a004d80306f3ff2a \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# glibc image
cosign verify ghcr.io/taihen/base-image@sha256:4f92d1f53789403020d4995f50f0b6c5074e6fb27d159bf021db43939f938069 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# Debug image
cosign verify ghcr.io/taihen/base-image@sha256:dee086fdea0e9e9bcc92c7a19e9287ad5bb0278d5e0071053b24d412eb20fdc8 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

📄 Software Bill of Materials (SBOM)

SBOMs for all three images are attached to this release.

⚠️ Debug Image Warning

The debug image should NEVER be used in production as it includes debugging tools and runs as root.

Release v2026.02.03

🚀 Automated Release

This release includes all three image variants: base (musl), glibc, and debug.

📦 Package Changes

Base Image (musl libc)

No changes

glibc Image

No changes

Debug Image

🔄 Updated (2 packages)

• libcrypto3: 3.6.1-r0 → 3.6.1-r1
• libssl3: 3.6.1-r0 → 3.6.1-r1

📊 Summary

• Base: 3 total packages
• glibc: 7 total packages
• Debug: 16 total packages

📦 Container Images

Base Image (Production - musl libc)

• Image: ghcr.io/taihen/base-image:latest
• Tagged Version: ghcr.io/taihen/base-image:v2026.02.03
• Digest: ghcr.io/taihen/base-image@sha256:92a434e813874750f2c58c8b554547455761f5963cfc6a46a004d80306f3ff2a

glibc Image (Production - GNU libc)

• Image: ghcr.io/taihen/base-image:glibc
• Tagged Version: ghcr.io/taihen/base-image:v2026.02.03-glibc
• Digest: ghcr.io/taihen/base-image@sha256:5712ae8b2bd4e14609402523d0573b08a78108f9e7f9129b513951dadcca833a

Debug Image (Development)

• Image: ghcr.io/taihen/base-image:debug
• Tagged Version: ghcr.io/taihen/base-image:v2026.02.03-debug
• Digest: ghcr.io/taihen/base-image@sha256:d4ebbf09a52e4b710492a17427e9893a63107c961a9a2589c5f61d67e2384044

🔐 Verification

You can verify all image signatures using:

# Base image
cosign verify ghcr.io/taihen/base-image@sha256:92a434e813874750f2c58c8b554547455761f5963cfc6a46a004d80306f3ff2a \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# glibc image
cosign verify ghcr.io/taihen/base-image@sha256:5712ae8b2bd4e14609402523d0573b08a78108f9e7f9129b513951dadcca833a \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# Debug image
cosign verify ghcr.io/taihen/base-image@sha256:d4ebbf09a52e4b710492a17427e9893a63107c961a9a2589c5f61d67e2384044 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

📄 Software Bill of Materials (SBOM)

SBOMs for all three images are attached to this release.

⚠️ Debug Image Warning

The debug image should NEVER be used in production as it includes debugging tools and runs as root.

Release v2026.02.02

🚀 Automated Release

This release includes all three image variants: base (musl), glibc, and debug.

📦 Package Changes

Base Image (musl libc)

No changes

glibc Image

No changes

Debug Image

🔄 Updated (2 packages)

• busybox: 1.37.0-r53 → 1.37.0-r54
• libxcrypt: 4.5.2-r1 → 4.5.2-r2

📊 Summary

• Base: 3 total packages
• glibc: 7 total packages
• Debug: 16 total packages

📦 Container Images

Base Image (Production - musl libc)

• Image: ghcr.io/taihen/base-image:latest
• Tagged Version: ghcr.io/taihen/base-image:v2026.02.02
• Digest: ghcr.io/taihen/base-image@sha256:92a434e813874750f2c58c8b554547455761f5963cfc6a46a004d80306f3ff2a

glibc Image (Production - GNU libc)

• Image: ghcr.io/taihen/base-image:glibc
• Tagged Version: ghcr.io/taihen/base-image:v2026.02.02-glibc
• Digest: ghcr.io/taihen/base-image@sha256:5712ae8b2bd4e14609402523d0573b08a78108f9e7f9129b513951dadcca833a

Debug Image (Development)

• Image: ghcr.io/taihen/base-image:debug
• Tagged Version: ghcr.io/taihen/base-image:v2026.02.02-debug
• Digest: ghcr.io/taihen/base-image@sha256:563e68394fdee0f2cea8e8640e590aee3fff5009e7e12117b68bb8d169dd8498

🔐 Verification

You can verify all image signatures using:

# Base image
cosign verify ghcr.io/taihen/base-image@sha256:92a434e813874750f2c58c8b554547455761f5963cfc6a46a004d80306f3ff2a \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# glibc image
cosign verify ghcr.io/taihen/base-image@sha256:5712ae8b2bd4e14609402523d0573b08a78108f9e7f9129b513951dadcca833a \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# Debug image
cosign verify ghcr.io/taihen/base-image@sha256:563e68394fdee0f2cea8e8640e590aee3fff5009e7e12117b68bb8d169dd8498 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

📄 Software Bill of Materials (SBOM)

SBOMs for all three images are attached to this release.

⚠️ Debug Image Warning

The debug image should NEVER be used in production as it includes debugging tools and runs as root.

Release v2026.02.01

🚀 Automated Release

This release includes all three image variants: base (musl), glibc, and debug.

📦 Package Changes

Base Image (musl libc)

No changes

glibc Image

🔄 Updated (1 packages)

• libgcc: 15.2.0-r6 → 15.2.0-r7

Debug Image

🔄 Updated (4 packages)

• libgcc: 15.2.0-r6 → 15.2.0-r7
• libxcrypt: 4.5.2-r0 → 4.5.2-r1
• wolfi-keys: 1-r12 → 1-r13
• zlib: 1.3.1.2-r2 → 1.3.1.2-r3

📊 Summary

• Base: 3 total packages
• glibc: 7 total packages
• Debug: 16 total packages

📦 Container Images

Base Image (Production - musl libc)

• Image: ghcr.io/taihen/base-image:latest
• Tagged Version: ghcr.io/taihen/base-image:v2026.02.01
• Digest: ghcr.io/taihen/base-image@sha256:92a434e813874750f2c58c8b554547455761f5963cfc6a46a004d80306f3ff2a

glibc Image (Production - GNU libc)

• Image: ghcr.io/taihen/base-image:glibc
• Tagged Version: ghcr.io/taihen/base-image:v2026.02.01-glibc
• Digest: ghcr.io/taihen/base-image@sha256:5712ae8b2bd4e14609402523d0573b08a78108f9e7f9129b513951dadcca833a

Debug Image (Development)

• Image: ghcr.io/taihen/base-image:debug
• Tagged Version: ghcr.io/taihen/base-image:v2026.02.01-debug
• Digest: ghcr.io/taihen/base-image@sha256:0ae6458a55761de3fb1d4578169809c7d96509d17e403bc3aa594e2b68cdcccb

🔐 Verification

You can verify all image signatures using:

# Base image
cosign verify ghcr.io/taihen/base-image@sha256:92a434e813874750f2c58c8b554547455761f5963cfc6a46a004d80306f3ff2a \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# glibc image
cosign verify ghcr.io/taihen/base-image@sha256:5712ae8b2bd4e14609402523d0573b08a78108f9e7f9129b513951dadcca833a \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# Debug image
cosign verify ghcr.io/taihen/base-image@sha256:0ae6458a55761de3fb1d4578169809c7d96509d17e403bc3aa594e2b68cdcccb \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

📄 Software Bill of Materials (SBOM)

SBOMs for all three images are attached to this release.

⚠️ Debug Image Warning

The debug image should NEVER be used in production as it includes debugging tools and runs as root.

Release v2026.01.31

🚀 Automated Release

This release includes all three image variants: base (musl), glibc, and debug.

📦 Package Changes

Base Image (musl libc)

No changes

glibc Image

🔄 Updated (3 packages)

• glibc: 2.42-r7 → 2.42-r8
• glibc-locale-posix: 2.42-r7 → 2.42-r8
• ld-linux: 2.42-r7 → 2.42-r8

Debug Image

🔄 Updated (5 packages)

• glibc: 2.42-r7 → 2.42-r8
• glibc-locale-posix: 2.42-r7 → 2.42-r8
• ld-linux: 2.42-r7 → 2.42-r8
• libcrypt1: 2.42-r7 → 2.42-r8
• zlib: 1.3.1.2-r1 → 1.3.1.2-r2

📊 Summary

• Base: 3 total packages
• glibc: 7 total packages
• Debug: 16 total packages

📦 Container Images

Base Image (Production - musl libc)

• Image: ghcr.io/taihen/base-image:latest
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.31
• Digest: ghcr.io/taihen/base-image@sha256:92a434e813874750f2c58c8b554547455761f5963cfc6a46a004d80306f3ff2a

glibc Image (Production - GNU libc)

• Image: ghcr.io/taihen/base-image:glibc
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.31-glibc
• Digest: ghcr.io/taihen/base-image@sha256:694e05d2336acd306b640428d41ca288a6986cb761eb0e7a2ef1ec8b6e1856c7

Debug Image (Development)

• Image: ghcr.io/taihen/base-image:debug
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.31-debug
• Digest: ghcr.io/taihen/base-image@sha256:336df110d021ccf63380cabaadf5693e6bc040e486a91137eb9bd26a966ba953

🔐 Verification

You can verify all image signatures using:

# Base image
cosign verify ghcr.io/taihen/base-image@sha256:92a434e813874750f2c58c8b554547455761f5963cfc6a46a004d80306f3ff2a \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# glibc image
cosign verify ghcr.io/taihen/base-image@sha256:694e05d2336acd306b640428d41ca288a6986cb761eb0e7a2ef1ec8b6e1856c7 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# Debug image
cosign verify ghcr.io/taihen/base-image@sha256:336df110d021ccf63380cabaadf5693e6bc040e486a91137eb9bd26a966ba953 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

📄 Software Bill of Materials (SBOM)

SBOMs for all three images are attached to this release.

⚠️ Debug Image Warning

The debug image should NEVER be used in production as it includes debugging tools and runs as root.

Release v2026.01.30

🚀 Automated Release

This release includes all three image variants: base (musl), glibc, and debug.

📦 Package Changes

Base Image (musl libc)

🔄 Updated (1 packages)

• ca-certificates-bundle: 20251003-r2 → 20251003-r3

glibc Image

🔄 Updated (1 packages)

• ca-certificates-bundle: 20251003-r2 → 20251003-r3

Debug Image

🔄 Updated (1 packages)

• ca-certificates-bundle: 20251003-r2 → 20251003-r3

📊 Summary

• Base: 3 total packages
• glibc: 7 total packages
• Debug: 16 total packages

📦 Container Images

Base Image (Production - musl libc)

• Image: ghcr.io/taihen/base-image:latest
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.30
• Digest: ghcr.io/taihen/base-image@sha256:92a434e813874750f2c58c8b554547455761f5963cfc6a46a004d80306f3ff2a

glibc Image (Production - GNU libc)

• Image: ghcr.io/taihen/base-image:glibc
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.30-glibc
• Digest: ghcr.io/taihen/base-image@sha256:359d1d53b1ce2a24fc04a97c4af610cd4af72b9e06482d59f1a7a94a32bdb255

Debug Image (Development)

• Image: ghcr.io/taihen/base-image:debug
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.30-debug
• Digest: ghcr.io/taihen/base-image@sha256:aa71f65aa01f87836c25e6b7b33714ac49507bf7a0f857e39c7fc1ae07ac9df3

🔐 Verification

You can verify all image signatures using:

# Base image
cosign verify ghcr.io/taihen/base-image@sha256:92a434e813874750f2c58c8b554547455761f5963cfc6a46a004d80306f3ff2a \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# glibc image
cosign verify ghcr.io/taihen/base-image@sha256:359d1d53b1ce2a24fc04a97c4af610cd4af72b9e06482d59f1a7a94a32bdb255 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# Debug image
cosign verify ghcr.io/taihen/base-image@sha256:aa71f65aa01f87836c25e6b7b33714ac49507bf7a0f857e39c7fc1ae07ac9df3 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

📄 Software Bill of Materials (SBOM)

SBOMs for all three images are attached to this release.

⚠️ Debug Image Warning

The debug image should NEVER be used in production as it includes debugging tools and runs as root.

Release v2026.01.28

🚀 Automated Release

This release includes all three image variants: base (musl), glibc, and debug.

📦 Package Changes

Base Image (musl libc)

No changes

glibc Image

No changes

Debug Image

🔄 Updated (3 packages)

• apk-tools: 2.14.10-r9 → 2.14.10-r10
• libcrypto3: 3.6.0-r7 → 3.6.1-r0
• libssl3: 3.6.0-r7 → 3.6.1-r0

📊 Summary

• Base: 3 total packages
• glibc: 7 total packages
• Debug: 16 total packages

📦 Container Images

Base Image (Production - musl libc)

• Image: ghcr.io/taihen/base-image:latest
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.28
• Digest: ghcr.io/taihen/base-image@sha256:59abf6260975c24aa14ad0a2d8b6fa540fc636b1c22d91b68cd419d80def81a7

glibc Image (Production - GNU libc)

• Image: ghcr.io/taihen/base-image:glibc
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.28-glibc
• Digest: ghcr.io/taihen/base-image@sha256:8618f3fd67e1da5ab3daab5c75d325754ea34c84a1ba5b00fc28ae5a35387cad

Debug Image (Development)

• Image: ghcr.io/taihen/base-image:debug
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.28-debug
• Digest: ghcr.io/taihen/base-image@sha256:70deec1c3ed66f593bf4ceb302024081289bd3ab4c08079af2d4040a0e723d78

🔐 Verification

You can verify all image signatures using:

# Base image
cosign verify ghcr.io/taihen/base-image@sha256:59abf6260975c24aa14ad0a2d8b6fa540fc636b1c22d91b68cd419d80def81a7 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# glibc image
cosign verify ghcr.io/taihen/base-image@sha256:8618f3fd67e1da5ab3daab5c75d325754ea34c84a1ba5b00fc28ae5a35387cad \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# Debug image
cosign verify ghcr.io/taihen/base-image@sha256:70deec1c3ed66f593bf4ceb302024081289bd3ab4c08079af2d4040a0e723d78 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

📄 Software Bill of Materials (SBOM)

SBOMs for all three images are attached to this release.

⚠️ Debug Image Warning

The debug image should NEVER be used in production as it includes debugging tools and runs as root.

Release v2026.01.27

🚀 Automated Release

This release includes all three image variants: base (musl), glibc, and debug.

📦 Package Changes

Base Image (musl libc)

No changes

glibc Image

🔄 Updated (3 packages)

• glibc: 2.42-r6 → 2.42-r7
• glibc-locale-posix: 2.42-r6 → 2.42-r7
• ld-linux: 2.42-r6 → 2.42-r7

Debug Image

🔄 Updated (7 packages)

• busybox: 1.37.0-r51 → 1.37.0-r53
• glibc: 2.42-r6 → 2.42-r7
• glibc-locale-posix: 2.42-r6 → 2.42-r7
• ld-linux: 2.42-r6 → 2.42-r7
• libcrypt1: 2.42-r6 → 2.42-r7
• libcrypto3: 3.6.0-r6 → 3.6.0-r7
• libssl3: 3.6.0-r6 → 3.6.0-r7

📊 Summary

• Base: 3 total packages
• glibc: 7 total packages
• Debug: 16 total packages

📦 Container Images

Base Image (Production - musl libc)

• Image: ghcr.io/taihen/base-image:latest
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.27
• Digest: ghcr.io/taihen/base-image@sha256:59abf6260975c24aa14ad0a2d8b6fa540fc636b1c22d91b68cd419d80def81a7

glibc Image (Production - GNU libc)

• Image: ghcr.io/taihen/base-image:glibc
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.27-glibc
• Digest: ghcr.io/taihen/base-image@sha256:8618f3fd67e1da5ab3daab5c75d325754ea34c84a1ba5b00fc28ae5a35387cad

Debug Image (Development)

• Image: ghcr.io/taihen/base-image:debug
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.27-debug
• Digest: ghcr.io/taihen/base-image@sha256:975eb0c9debd3ee79bbe391d5bc8d4593a77f6538658434ba2cbdad69446b5ec

🔐 Verification

You can verify all image signatures using:

# Base image
cosign verify ghcr.io/taihen/base-image@sha256:59abf6260975c24aa14ad0a2d8b6fa540fc636b1c22d91b68cd419d80def81a7 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# glibc image
cosign verify ghcr.io/taihen/base-image@sha256:8618f3fd67e1da5ab3daab5c75d325754ea34c84a1ba5b00fc28ae5a35387cad \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# Debug image
cosign verify ghcr.io/taihen/base-image@sha256:975eb0c9debd3ee79bbe391d5bc8d4593a77f6538658434ba2cbdad69446b5ec \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

📄 Software Bill of Materials (SBOM)

SBOMs for all three images are attached to this release.

⚠️ Debug Image Warning

The debug image should NEVER be used in production as it includes debugging tools and runs as root.

Release v2026.01.24

🚀 Automated Release

This release includes all three image variants: base (musl), glibc, and debug.

📦 Package Changes

Base Image (musl libc)

No changes

glibc Image

No changes

Debug Image

🔄 Updated (1 packages)

• busybox: 1.37.0-r50 → 1.37.0-r51

📊 Summary

• Base: 3 total packages
• glibc: 7 total packages
• Debug: 16 total packages

📦 Container Images

Base Image (Production - musl libc)

• Image: ghcr.io/taihen/base-image:latest
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.24
• Digest: ghcr.io/taihen/base-image@sha256:59abf6260975c24aa14ad0a2d8b6fa540fc636b1c22d91b68cd419d80def81a7

glibc Image (Production - GNU libc)

• Image: ghcr.io/taihen/base-image:glibc
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.24-glibc
• Digest: ghcr.io/taihen/base-image@sha256:14b45a529e6adceec2a06c5b63ba16cd9e4e48d88f54bfd9de24783b8589be38

Debug Image (Development)

• Image: ghcr.io/taihen/base-image:debug
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.24-debug
• Digest: ghcr.io/taihen/base-image@sha256:eea6016064fb213cf7ce7ad22d380f77d1f9cdfaca78a92684bd7a4c14fc2ffe

🔐 Verification

You can verify all image signatures using:

# Base image
cosign verify ghcr.io/taihen/base-image@sha256:59abf6260975c24aa14ad0a2d8b6fa540fc636b1c22d91b68cd419d80def81a7 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# glibc image
cosign verify ghcr.io/taihen/base-image@sha256:14b45a529e6adceec2a06c5b63ba16cd9e4e48d88f54bfd9de24783b8589be38 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# Debug image
cosign verify ghcr.io/taihen/base-image@sha256:eea6016064fb213cf7ce7ad22d380f77d1f9cdfaca78a92684bd7a4c14fc2ffe \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

📄 Software Bill of Materials (SBOM)

SBOMs for all three images are attached to this release.

⚠️ Debug Image Warning

The debug image should NEVER be used in production as it includes debugging tools and runs as root.

Release v2026.01.21

🚀 Automated Release

This release includes all three image variants: base (musl), glibc, and debug.

📦 Package Changes

Base Image (musl libc)

No changes

glibc Image

🔄 Updated (3 packages)

• glibc: 2.42-r5 → 2.42-r6
• glibc-locale-posix: 2.42-r5 → 2.42-r6
• ld-linux: 2.42-r5 → 2.42-r6

Debug Image

🔄 Updated (4 packages)

• glibc: 2.42-r5 → 2.42-r6
• glibc-locale-posix: 2.42-r5 → 2.42-r6
• ld-linux: 2.42-r5 → 2.42-r6
• libcrypt1: 2.42-r5 → 2.42-r6

📊 Summary

• Base: 3 total packages
• glibc: 7 total packages
• Debug: 16 total packages

📦 Container Images

Base Image (Production - musl libc)

• Image: ghcr.io/taihen/base-image:latest
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.21
• Digest: ghcr.io/taihen/base-image@sha256:59abf6260975c24aa14ad0a2d8b6fa540fc636b1c22d91b68cd419d80def81a7

glibc Image (Production - GNU libc)

• Image: ghcr.io/taihen/base-image:glibc
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.21-glibc
• Digest: ghcr.io/taihen/base-image@sha256:14b45a529e6adceec2a06c5b63ba16cd9e4e48d88f54bfd9de24783b8589be38

Debug Image (Development)

• Image: ghcr.io/taihen/base-image:debug
• Tagged Version: ghcr.io/taihen/base-image:v2026.01.21-debug
• Digest: ghcr.io/taihen/base-image@sha256:abac3853c2894fbbc4e1a415414c9c88143c7493f1e36b0ce36a4ceafe42bf0f

🔐 Verification

You can verify all image signatures using:

# Base image
cosign verify ghcr.io/taihen/base-image@sha256:59abf6260975c24aa14ad0a2d8b6fa540fc636b1c22d91b68cd419d80def81a7 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# glibc image
cosign verify ghcr.io/taihen/base-image@sha256:14b45a529e6adceec2a06c5b63ba16cd9e4e48d88f54bfd9de24783b8589be38 \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

# Debug image
cosign verify ghcr.io/taihen/base-image@sha256:abac3853c2894fbbc4e1a415414c9c88143c7493f1e36b0ce36a4ceafe42bf0f \
  --certificate-identity=https://github.com/taihen/base-image/.github/workflows/build.yml@refs/heads/main \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com

📄 Software Bill of Materials (SBOM)

SBOMs for all three images are attached to this release.

⚠️ Debug Image Warning

The debug image should NEVER be used in production as it includes debugging tools and runs as root.