add warning when image distro is not configured as wolfi

libs/cli/langgraph_cli/cli.py

@@ -20,6 +20,7 @@ from langgraph_cli.docker import DockerCapabilities
 from langgraph_cli.exec import Runner, subp_exec
 from langgraph_cli.progress import Progress
 from langgraph_cli.templates import TEMPLATE_HELP_STRING, create_new
+from langgraph_cli.util import warn_non_wolfi_distro
 from langgraph_cli.version import __version__
 
 OPT_DOCKER_COMPOSE = click.option(
@@ -375,6 +376,7 @@ def build(
         if shutil.which("docker") is None:
             raise click.UsageError("Docker not installed") from None
         config_json = langgraph_cli.config.validate_config_file(config)
+        warn_non_wolfi_distro(config_json)
         _build(
             runner, set, config, config_json, base_image, pull, tag, docker_build_args
         )
@@ -466,6 +468,7 @@ def dockerfile(
     save_path = pathlib.Path(save_path).absolute()
     secho(f"🔍 Validating configuration at path: {config}", fg="yellow")
     config_json = langgraph_cli.config.validate_config_file(config)
+    warn_non_wolfi_distro(config_json)
     secho("✅ Configuration validated!", fg="green")
 
     secho(f"📝 Generating Dockerfile at {save_path}", fg="yellow")
@@ -791,6 +794,7 @@ def prepare(
 ) -> tuple[list[str], str]:
     """Prepare the arguments and stdin for running the LangGraph API server."""
     config_json = langgraph_cli.config.validate_config_file(config_path)
+    warn_non_wolfi_distro(config_json)
     # pull latest images
     if pull:
         runner.run(

libs/cli/langgraph_cli/util.py

@@ -1,2 +1,25 @@
+import click
+
+
 def clean_empty_lines(input_str: str):
     return "\n".join(filter(None, input_str.splitlines()))
+
+
+def warn_non_wolfi_distro(config_json: dict) -> None:
+    """Show warning if image_distro is not set to 'wolfi'."""
+    image_distro = config_json.get("image_distro", "debian")  # Default is debian
+    if image_distro != "wolfi":
+        click.secho(
+            "⚠️  Security Recommendation: Consider switching to Wolfi Linux for enhanced security.",
+            fg="yellow",
+            bold=True,
+        )
+        click.secho(
+            "   Wolfi is a security-oriented, minimal Linux distribution designed for containers.",
+            fg="yellow",
+        )
+        click.secho(
+            "   To switch, add '\"image_distro\": \"wolfi\"' to your langgraph.json config file.",
+            fg="yellow",
+        )
+        click.secho("")  # Empty line for better readability