{% extends "containers/chiselled/_base_chiselled.html" %}

{% block title %}Ultra-small Ubuntu-based distroless containers - chiselled Ubuntu{% endblock %}

{% block meta_description %}
  Get started with chiselled Ubuntu: ultra-small Ubuntu container images. Build Distroless
  containers with 6x smaller attack surface and the advantages of a vendor-supported Linux distribution.
{% endblock %}

{% block body_class %}
  is-paper
{% endblock body_class %}

{% block content %}
  <style>
    .dimmed-text {
      color: #666666;
    }

    .display-on-large {
      @media (max-width: 1035px) {
        display: none;
      }
    }

    .d-flex {
      display: flex !important;
    }

    .chart-legend-box {
      width: 16px;
      height: 16px;
      margin-right: 8px;
    }
  </style>

  <section class="p-strip is-shallow u-no-padding--bottom">
    <div class="row--50-50 p-section">
      <div class="col">
        <h1>Chiselled Ubuntu</h1>
      </div>
      <div class="col">
        <div class="p-section--shallow">
          <h2>Ultra-small, ultra-secure containerisation</h2>
        </div>
        <p>
          Rethink your containerisation strategy with chiselled Ubuntu — where ultra-small meets ultra-secure. Trim your
          attack surface by 6x and get the reliability of a vendor-supported Linux distribution.
        </p>
        <ul class="p-list--divided">
          <li class="p-list__item">
            <a href="https://canonical-public-cloud.readthedocs-hosted.com/en/latest/oci/oci-how-to/create-chiselled-ubuntu-image.html">Learn
            about using chisel in production&nbsp;&rsaquo;</a>
          </li>
          <li class="p-list__item">
            <a href="/containers/contact-us" class="js-invoke-modal">Get a chiselled container built by Canonical&nbsp;&rsaquo;</a>
          </li>
        </ul>
      </div>
    </div>
  </section>

  <section class="p-section">
    <div class="row--50-50">
      <hr class="p-rule" />
      <div class="col">
        <h2>Only include the dependencies you need</h2>
      </div>
      <div class="col">
        <p>
          Applications commonly rely on a large, recursive set of dependencies, but they only use a limited subset of the functionalities offered by each one of them.
        </p>
        <p>
          Since Debian packages are archives that can be inspected, navigated and deconstructed, it is possible to define slices of packages that contain minimal, complementary, loosely-coupled sets of files based on package metadata and content.
        </p>
        <p>
          Chisel offers a way to define those slices, so that your container only includes what's strictly necessary for the application, and nothing more.
        </p>
        <hr class="p-rule--muted" />
        <p>
          <a href="https://github.com/canonical/chisel">Explore Chisel&nbsp;&rsaquo;</a>
        </p>
      </div>
    </div>
  </section>

  <section class="p-strip">
    <div class="row">
      <div class="u-align--center">
        <img src="https://assets.ubuntu.com/v1/ab013cd7-Frame%203373.png"
             style="height: auto;
                    width: 100%"
             alt="An image that demonstrates how chiselled Ubuntu works" />
      </div>
    </div>
  </section>

  <section class="p-section">
    <div class="row--50-50">
      <hr class="p-rule" />
      <div class="col">
        <h2 class="p-text--small-caps u-no-margin--bottom">How to reduce container image size</h2>
        <h3 class="p-heading--2">Chisel trims up to 80% of your containers' attack surface.</h3>
      </div>
      <div class="col">
        <div class="u-embedded-media ">
          <iframe title="Chiselled Ubuntu Containers webinar"
                  width="560"
                  height="315"
                  src="https://www.youtube.com/embed/o8NILnbjhQ4"
                  class="u-embedded-media__element"
                  frameborder="0"
                  allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
                  allowfullscreen></iframe>
        </div>
        <hr class="p-rule" />
        <p>Mark Lewis, VP Application Services at Canonical, explains how chisel works.</p>
      </div>
    </div>
  </section>

  <section class="p-section">
    <div class="row--50-50">
      <hr class="p-rule" />
      <div class="col">
        <h2>Why your attack surface matters</h2>
      </div>
      <div class="col">
        <div class="p-section--shallow">
          <p>
            Container images’ attack surface is a critical factor in determining their security. As the size of a
            container
            image increases, so does the potential for vulnerabilities and known security issues.
          </p>
          <p>According to Sysdig, 87% of container images have high or critical vulnerabilities.</p>
        </div>
        <hr class="p-rule" />
        <p>
          <a href="/blog/chiselled-containers-perfect-gift-cloud-applications">Explore the benefits of smaller container
          images&nbsp;&rsaquo;</a>
        </p>
      </div>
    </div>
  </section>

  <section class="p-section">
    <div class="row">
      <hr class="p-rule" />
      <div class="col-6 col-medium-6">
        <h3 class="p-text--small-caps">Chiselled Ubuntu:</h3>
        <h2>Production-ready, ultra-small Ubuntu containers</h2>
        <div class="p-section u-hide--large"></div>
      </div>
      <div class="col-6 col-medium-6">
        <p>
          Experience the power of ultra-small containerisation. Chiselled Ubuntu delivers efficiency with a minimal
          attack surface.
        </p>
        <p>
          Chiselled Ubuntu and your favourite toolchains come together seamlessly. It's your shortcut to creating and
          deploying secure, super-efficient images for production environments.
        </p>
      </div>
    </div>
  </section>

  <section class="p-section">
    <div class="row">
      <hr class="p-rule u-hide--large" />
      <div class="col-medium-1 col-small-6 u-hide--large">
        <h3 class="p-heading--5 u-hide--large u-no-margin--bottom">.NET</h3>
      </div>
      <div class="col-6 col-medium-5">
        <table aria-label="A table that shows how different Ubuntu .NET images compare in size">
          <thead>
            <tr class="u-hide--small u-hide--medium">
              <th class="u-no-padding--left" width="30%">Language</th>
              <th class="u-no-padding--left" width="70%">Package</th>
              <th class="u-align--right u-no-padding--right" width="90px">Size</th>
            </tr>
            <tr class="u-hide--large">
              <td width="100%" class="p-text--small-caps u-no-padding--left">Package</td>
              <td width="90px"
                  class="u-align--right p-text--small-caps u-no-padding--right">Size</td>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td class="display-on-large u-no-padding--left" rowspan="3">.NET</td>
              <td class="dimmed-text u-no-padding--left d-flex u-vertically-center">
                <div class="chart-legend-box u-hide--large" style="background:#CBA7B8;"></div>
                Ubuntu .NET image
              </td>
              <td class="u-align--right u-no-padding--right">
                <strong>219MB</strong>
              </td>
            </tr>
            <tr>
              <td class="dimmed-text u-no-padding--left d-flex u-vertically-center">
                <div class="chart-legend-box u-hide--large" style="background:#923A66;"></div>
                Chiselled Ubuntu .NET image
              </td>
              <td class="u-align--right u-no-padding--right">
                <strong>116MB</strong>
              </td>
            </tr>
            <tr>
              <td class="u-no-padding--left d-flex u-vertically-center">
                <div class="chart-legend-box u-hide--large" style="background:#000000;"></div>
                Chiselled Ubuntu for self contained .NET image
              </td>
              <td class="u-align--right u-no-padding--right">
                <strong>5MB</strong>
              </td>
            </tr>
          </tbody>
        </table>
      </div>
      <div class="col-6 col-medium-5 col-start-medium-2 col-small-6">
        <div id="chiselled-dotnet-chart"
             aria-label="A chart that visualizes how different Ubuntu.NET images compare in size"></div>
        <div class="u-sv3 u-hide--large"></div>
      </div>
    </div>
    <div class="row">
      <hr class="p-rule u-hide--large" />
      <div class="col-medium-1 col-small-6 u-hide--large">
        <h3 class="p-heading--5 u-hide--large u-no-margin--bottom">Java</h3>
      </div>
      <div class="col-6 col-medium-5">
        <table aria-label="A table that shows how different Java containers compare in size">
          <thead>
            <tr class="u-hide--small u-hide--medium">
              <th class="u-no-padding" width="30%">
                <span class="u-hide">Language</span>
              </th>
              <th class="u-no-padding" width="70%">
                <span class="u-hide">Package</span>
              </th>
              <th class="u-no-padding" width="90px">
                <span class="u-hide">Size</span>
              </th>
            </tr>
            <tr class="u-hide--large">
              <th width="100%" class="p-text--small-caps u-no-padding--left">Package</th>
              <th width="90px"
                  class="u-align--right p-text--small-caps u-no-padding--right">Size</th>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td class="display-on-large u-no-padding--left" rowspan="2">Java</td>
              <td class="dimmed-text u-no-padding--left d-flex u-vertically-center">
                <div class="chart-legend-box u-hide--large" style="background:#CBA7B8;"></div>
                Eclipse Temurin
              </td>
              <td width="90px" class="u-align--right u-no-padding--right">
                <strong>215MB</strong>
              </td>
            </tr>
            <tr>
              <td class="u-no-padding--left d-flex u-vertically-center">
                <div class="chart-legend-box u-hide--large" style="background:#000000;"></div>
                Chiselled Ubuntu for JRE8
              </td>
              <td class="u-align--right u-no-padding--right">
                <strong>113MB</strong>
              </td>
            </tr>
          </tbody>
        </table>
      </div>
      <div class="col-6 col-medium-5 col-start-medium-2 col-small-6">
        <div id="chiselled-java-chart"
             aria-label="A chart that visualizes how different Java containers compare in size"></div>
        <div class="u-sv3 u-hide--large"></div>
      </div>
    </div>
    <div class="row">
      <hr class="p-rule u-hide--large" />
      <div class="col-medium-1 col-small-6 u-hide--large">
        <h3 class="p-heading--5 u-hide--large u-no-margin--bottom">C, C++, Go, R</h3>
      </div>
      <div class="col-6 col-medium-5">
        <table aria-label="A table that shows how different containers that utilize C, C++, Go and R languages compare in size">
          <thead>
            <tr class="u-hide--small u-hide--medium">
              <th class="u-no-padding" width="30%">
                <span class="u-hide">Language</span>
              </th>
              <th class="u-no-padding" width="70%">
                <span class="u-hide">Package</span>
              </th>
              <th class="u-no-padding" width="90px">
                <span class="u-hide">Size</span>
              </th>
            </tr>
            <tr class="u-hide--large">
              <td width="100%" class="p-text--small-caps u-no-padding--left">Package</td>
              <td width="90px"
                  class="u-align--right p-text--small-caps u-no-padding--right">Size</td>
            </tr>
          </thead>
          <tbody>
            <tr>
              <td class="display-on-large u-no-padding--left" rowspan="2">C, C++, Go, R</td>
              <td class="dimmed-text u-no-padding--left d-flex u-vertically-center">
                <div class="chart-legend-box u-hide--large" style="background:#CBA7B8;"></div>
                Google Distroless
              </td>
              <td width="90px" class="u-align--right u-no-padding--right">
                <strong>20MB</strong>
              </td>
            </tr>
            <tr>
              <td class="u-no-padding--left d-flex u-vertically-center">
                <div class="chart-legend-box u-hide--large" style="background:#000000;"></div>
                Chiselled Ubuntu
              </td>
              <td class="u-align--right u-no-padding--right">
                <strong>12MB</strong>
              </td>
            </tr>
          </tbody>
        </table>
      </div>
      <div class="col-6 col-medium-5 col-start-medium-2 col-small-6">
        <div id="chiselled-other-chart"
             aria-label="A chart that visualizes how different containers that utilize C, C++, Go and R languages compare in size">
        </div>
        <div class="u-sv3 u-hide--large"></div>
      </div>
    </div>
  </section>

  <section class="u-fixed-width">
    <hr class="p-rule" />
    <div class="p-strip is-deep">
      <p class="p-heading--2">
        <a href="https://canonical-public-cloud.readthedocs-hosted.com/en/latest/oci/oci-how-to/create-chiselled-ubuntu-image.html">Get
        started now and ship with chiselled Ubuntu in minutes&nbsp;&rsaquo;</a>
      </p>
    </div>
  </section>

  <section class="p-section">
    <div class="row--50-50">
      <hr class="p-rule" />
      <div class="col">
        <h2>How does chisel work</h2>
      </div>
      <div class="col">
        <div class="u-sv1"></div>
        {{ image (
        url="https://assets.ubuntu.com/v1/805717bb-how%20it%20works.png",
        alt="Diagram that shows how Chisel works",
        height="346",
        width="600",
        hi_def=True,
        loading="lazy" ) | safe
        }}
        <div class="p-section--shallow">
          <p>Chisel operates as a from-scratch package manager, meticulously sculpting ultra-small runtime file systems.</p>
          <p>
            To do so, chiselled Ubuntu relies on a curated collection of Slice Definitions Files. These files relate to
            the
            upstream packages from the Ubuntu archives, and define one or more slices for any given package. A package
            slice
            represents a subset of the package’s contents, comprising its maintainer scripts and dependencies.
          </p>
          <p>
            Chisel effectively layers reusable knowledge on top of traditional Ubuntu deb packages, through a
            developer-friendly CLI and fine-grained dependency management mechanism.
          </p>
        </div>
        <hr class="p-rule" />
        <p>
          <a href="/blog/combining-distroless-and-ubuntu-chiselled-containers">Read more about how chisel
            works&nbsp;&rsaquo;
          </a>
        </p>
      </div>
    </div>
  </section>

  <hr class="p-rule is-fixed-width" />

  <section class="p-strip is-deep">
    <div class="row">
      <div class="col-12">
        <p class="p-heading--2">
          <a href="/containers/chiselled/dotnet">Discover chiselled Ubuntu for .NET applications&nbsp;&rsaquo;</a>
        </p>
      </div>
    </div>
  </section>

  <section class="p-section">
    <div class="row--50-50">
      <hr class="p-rule" />
      <div class="col">
        <h2>What industry experts say</h2>
      </div>
      <div class="col">
        <div class="p-section--shallow">
          <p>Don’t take our word for it. Listen to industry experts discuss chiselled Ubuntu.</p>
          <p>
            <cite>“There has always been a need for smaller and tighter images. Developers remind us, as a base image
              provider, of that on a regular basis. Chiselled images leapfrog over approaches we’ve looked at in the past.
              We love the idea and implementation of chiselled images and Canonical as a partner. When technical leaders
              at
              Canonical shared the first demos of chiselled images with us, we immediately wanted to be a launch partner,
              and we’re thrilled that we’re shipping Ubuntu chiselled images for .NET as part of the GA release”
            </cite>
          </p>
          <p>
            <cite>Richard Lander, Program Manager, .NET at Microsoft</cite>
          </p>
        </div>
        <hr class="p-rule" />
        <p>
          <a href="https://www.youtube.com/watch?v=FLGFzlWF4Gs">Watch our interview with Richard Lander&nbsp;&rsaquo;</a>
        </p>
      </div>
    </div>
  </section>

  <section class="p-section">
    <div class="row--50-50">
      <hr class="p-rule" />
      <div class="col">
        <h2>From development to production: making developers' lives easier</h2>
      </div>
      <div class="col">
        <p>
          A seamless developer experience means more productive teams and <a href="https://canonical.com/blog/secure-containers-supply-chain-intel-openvino-canonical">more secure
          applications</a>.
        </p>
        <p>
          Chiselled Ubuntu is designed to simplify the containerisation journey, ensuring a smooth transition from
          development to production.
        </p>
        <ul class="p-list--divided">
          <li class="p-list__item is-ticked">100% library and release cycle alignment with Ubuntu LTS</li>
          <li class="p-list__item is-ticked">Fewer dependency headaches</li>
          <li class="p-list__item is-ticked">Chisel CLI for easier multi-stage builds</li>
          <li class="p-list__item is-ticked">Simple image rebuilds</li>
          <li class="p-list__item is-ticked">
            Prebuilt chiselled images for popular toolchains such as <a href="https://hub.docker.com/r/ubuntu/dotnet-runtime">.NET</a> and <a href="https://hub.docker.com/r/ubuntu/jre">Java</a>
          </li>
        </ul>
        <hr class="p-rule" />
        <p>
          <a href="https://canonical-oci.readthedocs-hosted.com/en/latest/oci-how-to/create-chiselled-ubuntu-image/">Get
          started today&nbsp;&rsaquo;</a>
        </p>
      </div>
    </div>
  </section>

  <section class="p-section">
    <div class="row--50-50">
      <hr class="p-rule" />
      <div class="col">
        <h2>
          Vendor supported
          <br />
          distroless images
        </h2>
      </div>
      <div class="col">
        <p>Chiselled Ubuntu images are fully supported by Canonical, on the same terms as classic minimal Ubuntu images:</p>
        <hr class="p-rule--muted" />
        <ul class="p-list--divided">
          <li class="p-list__item has-bullet">5-year free bug fixing and security patching for the main libraries</li>
          <li class="p-list__item has-bullet">10-year security patching for Ubuntu Pro customers, on all Ubuntu packages</li>
          <li class="p-list__item has-bullet">24/7 phone and ticket customer support</li>
        </ul>
        <hr class="p-rule" />
        <p>
          <a href="/security/docker-images">Read more about our support commitments&nbsp;&rsaquo;</a>
        </p>
      </div>
    </div>
  </section>

  <section class="u-fixed-width">
    <hr class="p-rule" />
    <div class="p-strip is-deep">
      <p class="p-heading--2">
        <a href="/blog/craft-custom-chiselled-ubuntu-distroless">Get started with chiselled Ubuntu containers
        today&nbsp;&rsaquo;</a>
      </p>
    </div>
  </section>

  <section class="p-section">
    <div class="row--50-50">
      <hr class="p-rule" />
      <div class="col">
        <h2>Further reading</h2>
      </div>
      <div class="col">
        <div class="row">
          <div class="col-2 col-medium-3">
            <h3 class="p-text--small-caps">Documentation</h3>
          </div>
          <div class="col-4 col-medium-3">
            <ul class="p-list--divided">
              <li class="p-list__item">
                <a href="https://canonical-rockcraft.readthedocs-hosted.com/en/latest/explanation/chisel/">Using chisel in
                Rockcraft</a>
              </li>
              <li class="p-list__item">
                <a href="https://canonical-public-cloud.readthedocs-hosted.com/en/latest/oci/oci-how-to/create-chiselled-ubuntu-image.html">Create
                a chiselled Ubuntu base image for C/C++, Go and Rust applications</a>
              </li>
              <li class="p-list__item">
                <a href="https://documentation.ubuntu.com/rockcraft/en/latest/how-to/chisel/install-slice/">Install packages
                slices into a rock</a>
              </li>
            </ul>
          </div>
        </div>
        <hr class="p-rule--muted" />
        <div class="row">
          <div class="col-2 col-medium-3">
            <h3 class="p-text--small-caps">Docker Hub</h3>
          </div>
          <div class="col-4 col-medium-3">
            <ul class="p-list--divided">
              <li class="p-list__item">
                <a href="https://hub.docker.com/u/ubuntu">Ubuntu on Docker Hub</a>
              </li>
              <li class="p-list__item">
                <a href="https://hub.docker.com/r/ubuntu/dotnet-runtime">Chiselled Ubuntu for chiselled .NET</a>
              </li>
              <li class="p-list__item">
                <a href="https://hub.docker.com/r/ubuntu/dotnet-deps">Chiselled Ubuntu for chiselled .NET Deps</a>
              </li>
              <li class="p-list__item">
                <a href="https://hub.docker.com/r/ubuntu/dotnet-aspnet">Chiselled Ubuntu for chiselled ASP.NET</a>
              </li>
              <li class="p-list__item">
                <a href="https://hub.docker.com/r/ubuntu/jre">Chiselled Ubuntu for JRE</a>
              </li>
            </ul>
          </div>
        </div>
        <hr class="p-rule--muted" />
        <div class="row">
          <div class="col-2 col-medium-3">
            <h3 class="p-text--small-caps">GitHub</h3>
          </div>
          <div class="col-4 col-medium-3">
            <ul class="p-list--divided">
              <li class="p-list__item">
                <a href="https://github.com/canonical/chisel">Chisel</a>
              </li>
              <li class="p-list__item">
                <a href="https://github.com/canonical/chisel-releases">Chisel releases</a>
              </li>
            </ul>
          </div>
        </div>
      </div>
    </div>
  </section>

  <hr class="p-rule is-fixed-width" />

  <section class="p-strip is-deep">
    <div class="row">
      <div class="col-12">
        <p class="p-heading--2">
          <a href="/containers/contact-us" class="js-invoke-modal">Talk to an expert about how
            <br class="u-hide--small u-hide--medium" />
            Ubuntu containers can benefit your enterprise&nbsp;&rsaquo;
          </a>
        </p>
      </div>
    </div>
  </section>

  <!-- Set default Marketo information for contact form below-->
  <div class="u-hide"
       id="contact-form-container"
       data-form-location="/shared/forms/interactive/containers"
       data-form-id="5914"
       data-lp-id=""
       data-return-url="https://ubuntu.com/containers#success"
       data-lp-url="https://pages.ubuntu.com/things-contact-us.html"></div>

  <script src="https://cdnjs.cloudflare.com/ajax/libs/d3/7.9.0/d3.min.js" defer></script>
  <script src="{{ versioned_static('js/dist/chiselled-chart.js') }}" defer></script>
{% endblock %}