Sign inSign up

ppaslan/prowlarr

By ppaslan

Updated 2 days ago

Image
0

3.8K

ppaslan/prowlarr repository overview

Prowlarr

Hardened Prowlarr image — no s6-overlay, non-root, read-only root filesystem.

Features

  • Runs as non-root (USER 1000:1000 default, overridable)
  • readOnlyRootFilesystem compatible
  • No init system — Prowlarr runs as PID 1
  • Includes curl for healthcheck
  • Multi-arch: amd64, arm64

Required mounts

PathPurposeRequired
/configPersistent data — database, config.xml, logsAlways
/tmpWritable temporary filesOnly with readOnlyRootFilesystem: true

Docker Compose

services:
  prowlarr:
    image: ppaslan/prowlarr:latest
    restart: unless-stopped
    user: "1000:1000"
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    ports:
      - "9696:9696"
    volumes:
      - ./config:/config
    tmpfs:
      - /tmp:size=128m

Kubernetes

spec:
  securityContext:
    runAsUser: 1000
    runAsGroup: 1000
    runAsNonRoot: true
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
    seccompProfile:
      type: RuntimeDefault
  containers:
    - name: prowlarr
      image: ppaslan/prowlarr:latest
      securityContext:
        readOnlyRootFilesystem: true
        allowPrivilegeEscalation: false
        capabilities:
          drop: [ALL]
      volumeMounts:
        - name: config
          mountPath: /config
        - name: tmp
          mountPath: /tmp
  volumes:
    - name: config
      persistentVolumeClaim:
        claimName: prowlarr-config
    - name: tmp
      emptyDir:
        medium: Memory
        sizeLimit: 128Mi

Building

docker buildx build \
  --platform linux/amd64,linux/arm64 \
  --build-arg PROWLARR_VERSION=2.3.5.5327 \
  -t ppaslan/prowlarr:2.3.5.5327 \
  images/prowlarr/

Tag summary

Content type

Image

Digest

sha256:8ef46d236

Size

97.6 MB

Last updated

2 days ago

docker pull ppaslan/prowlarr