The open specification for building universal machine images. Parse once, deploy anywhere.
One spec for any hypervisor, cloud, or bare metal target.
Every layer is signed and verifiable end-to-end.
Build artifacts that target every fleet you operate.
Vendor-neutral, with first-party SDKs in 8 languages.
Bit-for-bit identical outputs from the same input graph.
Ships images sized for constrained deployment topologies.