https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/tags/chainguard-vms/Recent content in Chainguard VMs onHugo -- gohugo.ioen-USThu, 20 Nov 2025 08:04:00 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/vms/overview/Tue, 21 Oct 2025 08:04:00 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/vms/overview/Chainguard VMs offer a minimal and verifiable foundation for running ephemeral workloads in cloud and on-prem hypervisor deployments, designed to complement and extend the same secure-by-default philosophy found in Chainguard Containers. With a strong focus on rapid CVE remediation and a small attack surface, Chainguard VMs are purpose-built to service the target workload and include only the packages that are essential for its operation. Built in the Chainguard Factory, Chainguard VMs benefit from a highly automated, secure-by-design build pipeline that ensures consistent, reproducible artifacts.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/vms/compliance-features/Thu, 20 Nov 2025 08:04:00 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/vms/compliance-features/Chainguard VMs provide pre-hardened, audit-ready Linux virtual machine images designed for regulated and high-assurance environments (federal, defense, healthcare, financial services, and suppliers to those sectors). These images combine the following features: Feature Description FIPS 140-3 validated cryptography NIST CMVP-validated software modules and SP 800-90B compliant entropy, with runtime guardrails blocking non-FIPS crypto. STIG hardening Pre-configured to DISA STIG controls, delivered as production-ready images. CIS benchmark compliance CIS Level 1 hardened variants, hybrid STIG + CIS baseline.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/factory/overview/Tue, 15 Jul 2025 08:49:31 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/factory/overview/Chainguard Factory is the automated build infrastructure that continuously monitors, builds, and updates thousands of open source projects to deliver containers, libraries, and VMs with a strong security posture and the latest patches. This massive automation system tackles one of the industry’s biggest challenges: keeping software dependencies current at scale while maintaining security and compatibility across the entire open source ecosystem. It is hard to overstate the sheer scale of Chainguard’s task of being the secure source for open source.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/vms/faq/Tue, 21 Oct 2025 08:04:00 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/vms/faq/Which platforms and hypervisors are Chainguard VMs available for? Chainguard VMs are available for AWS (EC2 and ECS/EKS), GCP (Compute Engine), and Azure Compute cloud environments, and also for on-prem solutions based on KVM such as QEmu, VMWare, Nutanix, among others. What kinds of VMs are currently available? As part of our initial offering, we’re providing Container Host VMs, Base VMs, and Application VMs. This list should expand as we fine tune the product based on customer feedback.https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/factory/faq/Thu, 17 Jul 2025 08:49:31 +0000https://deploy-preview-3174--ornate-narwhal-088216.netlify.app/chainguard/factory/faq/What is the Chainguard Factory? The Chainguard Factory refers to all the engineering and automation work that goes into building, publishing, and maintaining the software packaged in Chainguard’s products. This includes continuously monitoring, testing, and updating thousands of open source projects that make up Chainguard containers, libraries, and VMs. How does Chainguard keep its software up to date? Chainguard uses automated systems to vigilantly monitor for new releases using the GitHub API, the Release Monitoring project, PyPI, Maven Central and the npm registry.