Canonical (Chiseled Ubuntu)
Distroless-style chiseled slices of Ubuntu with up to 12 years of CVE maintenance under Ubuntu Pro, from the company behind the most-deployed cloud Linux.
https://ubuntu.com/containersbest_for
Ubuntu-standardized enterprises with long-lived services that care about decade-scale maintenance more than catalog breadth.
strengths
- Longest security maintenance window in the set: up to 12 years via Ubuntu Pro / Legacy add-on
- glibc Ubuntu compatibility: what runs on Ubuntu runs in chiseled Ubuntu
- Everything LTS program extends CVE maintenance to arbitrary open source dependencies
- Microsoft partnership ships chiseled .NET images, a strong enterprise proof point
weaknesses
- Chisel tooling and slice definitions carry a learning curve versus buying a finished catalog
- Application image catalog is thinner than Chainguard or Bitnami
- Value concentrates if you are already an Ubuntu shop; weaker standalone story otherwise
Attribute detail
| Company | |
|---|---|
| Founded | |
| Headquarters | |
| Funding / backing | |
| Approach | |
| Core approach | |
| Base OS / distro | |
| libc | |
| Shell / package manager in runtime images | |
| Catalog | |
| Catalog size | |
| Coverage scope | |
| Custom / BYO image support | |
| End-of-life version support | |
| Security posture | |
| Zero-CVE posture | |
| CVE remediation SLA | |
| Rebuild cadence | |
| SBOM | |
| VEX statements | |
| Signing & provenance | |
| Compliance | |
| FIPS 140-3 variants | |
| STIG hardening | |
| Compliance fit (FedRAMP / PCI / HIPAA) | |
| Operations | |
| Migration effort | |
| Private registry / air-gap delivery | |
| Commercial | |
| Pricing model | |
| Free tier | |