SecDevOps.comSecDevOps.com
Hummingbird: Red Hat’s Answer to Alpine, Ubuntu Chiseled, Wolfi

Hummingbird: Red Hat’s Answer to Alpine, Ubuntu Chiseled, Wolfi

The New Stack(3 weeks ago)Updated 3 weeks ago

Linux powerhouse Red Hat has unveiled Project Hummingbird, a new initiative designed to accelerate cloud native development by delivering micro-sized container images for enterprise...

Linux powerhouse Red Hat has unveiled Project Hummingbird, a new initiative designed to accelerate cloud native development by delivering micro-sized container images for enterprise environments. Wait, some of you are saying, didn’t Red Hat acquire CoreOS with its minimal Linux distribution, Container Linux, back in 2018? And, wasn’t Container Linux explicitly designed for containerized workloads and automated updates? Yes, it was. Flatcar Container Linux: Designed for Container Workloads To continue, Container Linux morphed into Flatcar Container Linux and, in 2025, it’s now an active Cloud Native Computing Foundation (CNCF) project. So, what’s new here? Here’s where each one plays according to Red Hat and the CNCF‘s documentation. Flatcar Container Linux is a full, immutable Linux operating system designed to run container workloads directly on bare metal, virtual machines or cloud instances. It provides automatic OS updates, built-in container runtimes and emphasizes system immutability, making it ideal for clusters and edge deployments. It’s designed to be the host OS for orchestrating and running containers at scale, especially in Kubernetes or managed Oracle Cloud Infrastructure (OCI) environments, where administrators require robust, reproducible infrastructure. Introducing Project Hummingbird: Micro-Sized Container Images Project Hummingbird delivers micro-sized, production-ready container images focused on minimalism, supply chain security and compliance for enterprise customers. Hummingbird’s images are not a full Linux distro but highly curated base images designed for containers, with a zero-common vulnerabilities and exposures (CVE) at release policy and comprehensive software bills of materials SBOMs) included by default. It’s optimized for CI/CD pipelines, software supply chain requirements, and compliance-driven use cases where ultra-small image size and transparency are essential. Got all that? Good. Drawing inspiration from modern, lean Linux distributions such as Alpine Linux, Ubuntu Chiseled Images, and Chainguard Wolfi, Project Hummingbird aims to help organizations speed up application delivery while maintaining robust supply chain security and compliance standards. Taking Inspiration from Alpine, Ubuntu Chiseled, Wolfi Project Hummingbird’s approach mirrors Alpine Linux’s with its musl-libc minimalism and small attack surface in container deployments. Like Alpine and security-focused alternatives such as Wolfi, an “undistro” emphasizing supply chain integrity and granular SBOMs, Hummingbird is built for rapid security patching and minimal risk. Ubuntu Chiseled Images provide another strong parallel: using Canonical’s “Chisel” tool, these Ubuntu spins let users tailor container bases precisely, resulting in images as small as 5MB that contain only the necessary runtime dependencies. Key Features of Project Hummingbird for Enterprise Project Hummingbird is now available in early access for Red Hat subscription customers as a catalog of hardened, production-ready container images. These images, built from Fedora Linux components, are stripped of non-essential packages, reducing attack surfaces and minimizing potential vulnerabilities. Notable features include: Zero-CVE status: All images are shipped free of known vulnerabilities, with thorough production testing completed beforehand to ensure stability and utility. Micro-sized images: Core languages, runtimes (like .NET, Go, Java, Node), popular databases (MariaDB, PostgreSQL), and essential web servers are available in ultra-small images to reduce integration effort and resource usage. Complete SBOMs: Every image includes a comprehensive software bill of materials, supporting compliance needs and transparent auditing. Enterprise support: Full support will be available with Red Hat subscriptions upon general availability, with freely available, redistributable images offered in a model similar to Red Hat UBI. As Gunnar Hellekson, Red Hat’s general manager for Red Hat Enterprise Linux (RHEL), summed up in a statement,  “Project Hummingbird is designed to remove that trade-off [between moving fast and maintaining security] by providing a minimal, trusted and transparent zero-CVE foundation for building cloud native applications. “This limits vulnerabilities so development and IT security teams have a clear, direct path to business value with speed, agility, security and peace of mind.” Red Hat’s Vision for Secure Cloud Native Enterprise Linux Project Hummingbird attempts to position Red Hat as a major player in the next evolution of secure, cloud native enterprise Linux. With its zero-CVE promise, production-ready minimal images, and deep integration with enterprise workflows, the initiative offers a compelling alternative for organizations adopting containerized workloads amid rising supply chain threats. The post Hummingbird: Red Hat’s Answer to Alpine, Ubuntu Chiseled, Wolfi appeared first on The New Stack.

Source: This article was originally published on The New Stack

Read full article on source →

Related Articles