Base
Hardened build
minimal ports, security patches applied at build time
walt.id Identity on Ubuntu 24.04 LTS
Azure
Security
walt.id Identity, an open source platform to issue, hold and verify verifiable credentials, packaged and secured by cloudimg.
Overview
walt.id Identity is an open source platform for decentralized identity and verifiable credentials. It provides the building blocks to issue, hold and verify W3C Verifiable Credentials using open standards including OpenID for Verifiable Credential Issuance, OpenID for Verifiable Presentations and Decentralized Identifiers. This image ships the three core backend services of the stack, each run as its pinned upstream container under a systemd managed service. The Issuer API issues Verifiable Credentials to wallets, the Verifier API requests and verifies Verifiable Presentations and runs configurable credential and presentation policies, and the server side Wallet API can receive, store and present credentials, backed by a local database. Together they let development, identity and platform teams stand up a complete issue, hold and verify flow in minutes and integrate self sovereign identity into their own applications without stitching services together by hand.
Why the cloudimg image
cloudimg delivers walt.id Identity as a complete, secure by default appliance: the three pinned upstream services run the moment the instance boots, with no container registry to reach or compose file to assemble. It is secure by default: no administrator is baked into the image, and on the first boot of every instance a unique wallet administrator account and unique wallet signing keys are generated and written to a root only file, so no two instances ever share a secret. The wallet, which holds credentials, is bound to loopback so it is not exposed to the internet by default, while the Issuer and Verifier are served for integration. The Issuer and Verifier learn the instance public address on every boot so credential offers and presentation requests point at the right host, the base is fully patched with unattended security upgrades enabled, and every deployment comes with a paired deploy guide, a built in end to end self test and 24/7 cloudimg support.
Common uses
- Issue W3C Verifiable Credentials to wallets over OpenID for Verifiable Credential Issuance
- Verify Verifiable Presentations with configurable credential and presentation policies
- Add decentralized identity and self sovereign identity flows to your own applications
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.