open source · signed · reproducible
Cloud images you can actually trust.
Open Image Cloud builds cloud-init-ready, signed, reproducible qcow2 images for OpenStack and Proxmox — all in the open, on GitHub Actions, with keyless cosign signatures and a public manifest for every release.
Reproducible
Every release is built from a pinned upstream source and a tagged builder container. The
exact commit, run URL and builder digest are embedded in the per-image
MANIFEST.json.
Signed
Keyless cosign signatures via GitHub OIDC. Verify any
image with a single command — no key management on your side.
Open infrastructure
Source of truth on a self-hosted Garage cluster, mirrored to Cloudflare R2 behind a public CDN. Reusable workflows in .github power every image repo.