All Projects β†’ ironpeakservices β†’ Iron Alpine

ironpeakservices / Iron Alpine

Licence: apache-2.0
Hardened alpine linux baseimage for Docker.

Projects that are alternatives of or similar to Iron Alpine

Postgresql Postgis Timescaledb
PostgreSQL + PostGIS + TimescaleDB docker image πŸ˜πŸŒŽπŸ“ˆ
Stars: ✭ 19 (-77.38%)
Mutual labels:  alpine
Socat
Run socat command in alpine container
Stars: ✭ 53 (-36.9%)
Mutual labels:  alpine
Alpine Phoenix Builder
Up to date Alpine image with the latest language versions for staged Elixir and Phoenix builds.
Stars: ✭ 71 (-15.48%)
Mutual labels:  alpine
Machine Learning Alpine
Alpine Container for Machine Learning
Stars: ✭ 30 (-64.29%)
Mutual labels:  alpine
Docker4drupal
Docker-based Drupal stack
Stars: ✭ 1,045 (+1144.05%)
Mutual labels:  alpine
Docker Traefik Cloudflare Companion
Automatically Create CNAME records for containers served by Traefik
Stars: ✭ 59 (-29.76%)
Mutual labels:  alpine
Docker Node Nginx Alpine
Dockerfile to build an image with Nginx and Node (npm and yarn) on Alpine Linux
Stars: ✭ 16 (-80.95%)
Mutual labels:  alpine
Docker Ruby Node
🐳 Alpine Docker Image with latest versions of Ruby, Node.js and yarn installed. This Docker Image is actively maintained and updated regularly.
Stars: ✭ 74 (-11.9%)
Mutual labels:  alpine
Docker Backuppc
Docker container with BackupPC version 4.x/3.x based on Alpine distribution.
Stars: ✭ 53 (-36.9%)
Mutual labels:  alpine
Dockerfiles
lots of dockerfiles, based on alpine
Stars: ✭ 69 (-17.86%)
Mutual labels:  alpine
Docker Mariadb Alpine
[DEPRECATED] Lightweight MariaDB docker image with Alpine Linux.
Stars: ✭ 38 (-54.76%)
Mutual labels:  alpine
Docker Serveo Server
https://serveo.net is an alternative for ngrok. taichunmin/serveo-server can let you host your own serveo. And taichunmin/serveo can let you secure URL to your localhost server through any NAT or firewall in Docker.
Stars: ✭ 44 (-47.62%)
Mutual labels:  alpine
Freqbench
Comprehensive CPU frequency performance/power benchmark
Stars: ✭ 65 (-22.62%)
Mutual labels:  alpine
Chip Alpine
πŸ’» Daily build of Alpine Linux for the $9 C.H.I.P. computer
Stars: ✭ 21 (-75%)
Mutual labels:  alpine
Dockerfile
πŸ“¦ Dockerfiles from WebDevOps for PHP, Apache and Nginx (with PHP5 and PHP7)
Stars: ✭ 1,169 (+1291.67%)
Mutual labels:  alpine
Docker Youtrack
Dockerfile for YouTrack.
Stars: ✭ 11 (-86.9%)
Mutual labels:  alpine
Docker Alpine Postgres
Minimal PostgreSQL images based on Alpine Linux
Stars: ✭ 54 (-35.71%)
Mutual labels:  alpine
Docker Alpine Python Machinelearning
Small Docker image with Python Machine Learning tools (~180MB) https://hub.docker.com/r/frolvlad/alpine-python-machinelearning/
Stars: ✭ 76 (-9.52%)
Mutual labels:  alpine
Docker Openldap
Docker OpenLDAP Container w/TLS & Replication Support S6 Overlay, and Zabbix Monitoring based on Alpine
Stars: ✭ 74 (-11.9%)
Mutual labels:  alpine
Nextjs Pkg Docker Alpine
πŸ“₯Deploy a commercial Next.js application with pkg and docker.
Stars: ✭ 66 (-21.43%)
Mutual labels:  alpine

ironpeakservices/iron-alpine

Hardened alpine linux baseimage for Docker.

Note: If you use Golang, build statically and use iron-scratch. If you are using Java/Python/NodeJS/dotnet, use a distroless image instead.

docker pull ghcr.io/ironpeakservices/iron-alpine:1.0.0

How is this different?

  • ca-certificates included
  • /app for everything app-related; /app/conf, /app/tmp, /app/data
  • no interactive shells for users
  • removed unneccessary accounts, only 'app' and 'root' users
  • removed crontabs
  • removed dangerous commands and utilities
  • strictened permissions on system files and directories
  • removed temporary shadow/passwd/group
  • removed suid/guid files
  • removed init scripts
  • removed kernel tunables
  • removed /root/
  • removed fstab
  • post-install.sh:
    • removes apk manager after installation
    • sets permissions on /app after installation

Example

docker pull ghcr.io/ironpeakservices/iron-alpine:1.0.0

See the nginx example.

Update policy

Updates to the official alpine docker image are automatically created as a pull request and trigger linting & a docker build. When those checks complete without errors, a merge into master will trigger a deploy with the same version to packages.

Additional

If you want, you can also enable vulnerability scanning during your build (for free). Take a look at https://github.com/aquasecurity/microscanner

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].