Packages / openSUSE Tumbleweed / Unspecified / apko

[Source: apko]

Package: apko (1.2.41-1.1)

Build OCI images from APK packages directly without Dockerfile

Build and publish OCI container images built from apk packages. apko has the following key features: - Fully reproducible by default. Run apko twice and you will get exactly the same binary. - Fast. apko aims to build images in ms. - Small. apko generated images only contain what's needed by the application, in the style of distroless. - SBOM Support. apko produces a Software Bill of Materials (SBOM) for images, detailing all the packages inside. - Services. apko supports using the s6 supervision suite to run multiple processes in a container without reaping or signalling issues. Please note that apko is a work in progress and details are subject to change!

Other Packages Related to apko:

  • dep: libc.so.6(GLIBC_2.34)(64bit)

    Package not available

Download apko

ArchitecturePackage sizeInstalled sizeFilesPackage
x86_649.2 MiB31 MiBlist of filesDownload

Package file paths (5)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/apko
  • /usr/share/doc/packages/apko
  • /usr/share/doc/packages/apko/README.md
  • /usr/share/licenses/apko
  • /usr/share/licenses/apko/LICENSE

Field source: openSUSE Tumbleweed OSS revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try openSUSE Tumbleweed in the browserBuild an image that includes apko

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1.2.41-1.1tumbleweed / ossx86_64openSUSE Tumbleweed · OSS · multi-architecture9.2 MiB31 MiBx86_64/apko-1.2.41-1.1.x86_64.rpm

Field source: openSUSE Tumbleweed OSS revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
25/25
Dependency metadata
15/15
Package-file index
15/15
Homepage
5/5
License text
5/5
Source package or maintainer
10/10

Recorded total: 100/100

Field source: openSUSE Tumbleweed OSS revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • openSUSE Tumbleweed OSSSep 1, 2026

    Authoritative source; repository metadata signature verified, revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified