nginx (container image)

Built-from-source container image of the NGINX HTTP server

Tags

Docker Hub

Available on Docker Hub as ricardbejarano/nginx:

• 1.17.1-glibc, 1.17.1, glibc, master, latest (Dockerfile.glibc)
• 1.17.1-musl, musl (Dockerfile.musl)

Quay

Available on Quay as:

• quay.io/ricardbejarano/nginx-glibc, tags: 1.17.1, master, latest (Dockerfile.glibc)
• quay.io/ricardbejarano/nginx-musl, tags: 1.17.1, master, latest (Dockerfile.musl)

Features

• Super tiny (glibc-based is ~13.2MB and musl-based is ~12.5MB)
• Compiled from source during build time
• Built FROM scratch, see Filesystem for an exhaustive list of the image's contents
• Reduced attack surface (no shell, no UNIX tools, no package manager...)
• Built with binary exploit mitigations enabled

Configuration

Volumes

• Bind your configuration at /etc/nginx/nginx.conf.

Building

• To build the glibc-based image: $ docker build -t nginx:glibc -f Dockerfile.glibc .
• To build the musl-based image: $ docker build -t nginx:musl -f Dockerfile.musl .

Filesystem

The images' contents are:

glibc

Based on the glibc implementation of libc. Dynamically linked.

/
├── etc/
│   ├── group
│   ├── nginx/
│   │   ├── html/
│   │   │   ├── 50x.html
│   │   │   └── index.html
│   │   ├── mime.types
│   │   └── nginx.conf
│   └── passwd
├── lib/
│   └── x86_64-linux-gnu/
│       ├── libc.so.6
│       ├── libcrypt.so.1
│       ├── libdl.so.2
│       ├── libnss_dns.so.2
│       ├── libnss_files.so.2
│       ├── libpthread.so.0
│       └── libresolv.so.2
├── lib64/
│   └── ld-linux-x86-64.so.2
├── nginx
└── tmp/
    └── .keep

musl

Based on the musl implementation of libc. Statically linked.

/
├── etc/
│   ├── group
│   ├── nginx/
│   │   ├── html/
│   │   │   ├── 50x.html
│   │   │   └── index.html
│   │   ├── mime.types
│   │   └── nginx.conf
│   └── passwd
├── nginx
└── tmp/
    └── .keep

License

See LICENSE.