OpenShell Hummingbird Images

Container images for OpenShell and OpenShell-Community, rebased onto Project Hummingbird minimal, hardened base images.

Why Hummingbird?

The upstream OpenShell images use nvcr.io/nvidia/base/ubuntu:noble as their base. This project rebuilds them on Project Hummingbird images, which provide:

• Near-zero CVE attack surface
• Hermetic, reproducible builds with SLSA provenance
• Full SBOM and cosign signatures
• Content-based layers (smaller, more cacheable updates)
• Built from Fedora Rawhide packages

Image Catalog

All images are published to ghcr.io/lobstertrap/openshell-hummingbird-images/.

Core Infrastructure

These run the OpenShell control plane. Built on pinned quay.io/hummingbird/core-runtime distroless digests for a minimal runtime with no shell.

Image	Purpose
gateway	Control-plane API; manages sandbox lifecycle and auth
supervisor	In-sandbox policy enforcement (filesystem, network, process)

Sandbox Images

Pre-configured environments for AI coding agents. Built on the pinned quay.io/hummingbird/nodejs:22-builder Hummingbird builder image (includes bash + dnf for interactive use).

Image	Base	Purpose
sandboxes/base	Hummingbird Node.js 22	Foundation: Node.js, Python 3.13, Claude, OpenCode, Codex, Copilot, gh
sandboxes/openclaw	base	+ OpenClaw agent CLI
sandboxes/openclaw-nvidia	openclaw	+ NeMoClaw DevX UI, policy proxy, gRPC
sandboxes/ollama	base	+ Ollama for local LLM inference
sandboxes/gemini	base	+ Google Gemini CLI
sandboxes/droid	base	+ Factory Droid CLI

Image Dependency Chain

quay.io/hummingbird/core-runtime (distroless)
├── gateway
└── supervisor

quay.io/hummingbird/nodejs:22-builder
└── sandboxes/base
    ├── sandboxes/openclaw
    │   └── sandboxes/openclaw-nvidia
    ├── sandboxes/ollama
    ├── sandboxes/gemini
    └── sandboxes/droid

Usage

Pull images directly:

# Core infrastructure
podman pull ghcr.io/lobstertrap/openshell-hummingbird-images/gateway:latest
podman pull ghcr.io/lobstertrap/openshell-hummingbird-images/supervisor:latest

# Sandbox images
podman pull ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/base:latest
podman pull ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/openclaw:latest

Pull References

Use the following registry URLs with podman pull:

Image	Registry URL	Example pull
gateway	ghcr.io/lobstertrap/openshell-hummingbird-images/gateway	podman pull ghcr.io/lobstertrap/openshell-hummingbird-images/gateway:<tag>
supervisor	ghcr.io/lobstertrap/openshell-hummingbird-images/supervisor	podman pull ghcr.io/lobstertrap/openshell-hummingbird-images/supervisor:<tag>
sandboxes/base	ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/base	podman pull ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/base:<tag>
sandboxes/openclaw	ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/openclaw	podman pull ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/openclaw:<tag>
sandboxes/openclaw-nvidia	ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/openclaw-nvidia	podman pull ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/openclaw-nvidia:<tag>
sandboxes/ollama	ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/ollama	podman pull ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/ollama:<tag>
sandboxes/gemini	ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/gemini	podman pull ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/gemini:<tag>
sandboxes/droid	ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/droid	podman pull ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/droid:<tag>

<tag> can be any of the published tag forms documented below: latest, a release tag like x.y.z, or an immutable commit SHA from a main build.

Use with OpenShell CLI (point to this registry):

openshell sandbox create \
  --image ghcr.io/lobstertrap/openshell-hummingbird-images/sandboxes/base:latest

Architecture

All images are multi-arch (linux/amd64 + linux/arm64).

Tags

Tag	Meaning
latest	Most recent release
x.y.z	Specific release version
<sha>	Specific commit build

Pushes to main publish immutable SHA tags. The release workflow rebuilds from the release tag, verifies the SHA-tagged images, and then promotes that verified build to the semver and latest tags.

Differences from Upstream

These images differ from the official NVIDIA-published images in their base layer only:

	Upstream	This Project
Base (core)	nvcr.io/nvidia/base/ubuntu:noble	quay.io/hummingbird/core-runtime
Base (sandboxes)	nvcr.io/nvidia/base/ubuntu:noble	quay.io/hummingbird/nodejs:22-builder
Package manager	apt (Ubuntu/Debian)	dnf (Fedora)
CVE posture	Standard Ubuntu	Near-zero CVE (Hummingbird hardened)
Build provenance	Standard	SLSA provenance + SBOM
Build tooling	Docker	Podman

Application-level content (binaries, tools, configurations, policies) is functionally equivalent.

Related Projects

• OpenShell — Safe, private runtime for autonomous AI agents
• OpenShell-Community — Community sandbox images, skills, and integrations
• Project Hummingbird — Minimal, hardened container images

License

Apache License 2.0