ellerbrock/alpine-harden repository overview

⁠alpine-harden

Alpine Linux harden with an unprivileged user

• Docker: ellerbrock/alpine-harden⁠
• Quay: ellerbrock/alpine-harden⁠

⁠Installation

docker pull ellerbrock/alpine-harden

⁠About the Container

As Base Image i use Alpine Linux⁠ which is lightweight Distribution with a small surface area for security concerns, but with enough functionality for development and interactive debugging.

To prevent zombie reaping processes i run dumb-init⁠ as PID 1 which forwards signals to all processes running in the container.

⁠Configuration Parameter

These Settings are optional, if not set the default values will be used.

# Optional Configuration Parameter
ARG SERVICE_USER  # Username
ARG SERVICE_HOME  # User Home Directory

# Default Settings
ENV SERVICE_USER ${SERVICE_USER:-app}
ENV SERVICE_HOME ${SERVICE_HOME:-/home/${SERVICE_USER}}

Documentation: https://docs.docker.com/compose/compose-file/#/args⁠

⁠Contact / Social Media

Get the latest News about Web Development, Open Source, Tooling, Server & Security