Sign inSign up

ppaslan/tautulli

By ppaslan

Updated 3 days ago

Image
0

5.2K

ppaslan/tautulli repository overview

Tautulli

Hardened Tautulli image — no s6-overlay, non-root, read-only root filesystem.

Features

  • Runs as non-root (USER 1000:1000 default, overridable)
  • readOnlyRootFilesystem compatible
  • No init system — Tautulli runs as PID 1
  • Multi-arch: amd64, arm64

Required mounts

PathPurposeRequired
/configPersistent data — database, config.ini, logsAlways
/tmpWritable temporary filesOnly with readOnlyRootFilesystem: true

Docker Compose

services:
  tautulli:
    image: ppaslan/tautulli:latest
    restart: unless-stopped
    user: "1000:1000"
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    ports:
      - "8181:8181"
    volumes:
      - ./config:/config
    tmpfs:
      - /tmp:size=128m

Kubernetes

spec:
  securityContext:
    runAsUser: 1000
    runAsGroup: 1000
    runAsNonRoot: true
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
    seccompProfile:
      type: RuntimeDefault
  containers:
    - name: tautulli
      image: ppaslan/tautulli:latest
      securityContext:
        readOnlyRootFilesystem: true
        allowPrivilegeEscalation: false
        capabilities:
          drop: [ALL]
      volumeMounts:
        - name: config
          mountPath: /config
        - name: tmp
          mountPath: /tmp
  volumes:
    - name: config
      persistentVolumeClaim:
        claimName: tautulli-config
    - name: tmp
      emptyDir:
        medium: Memory
        sizeLimit: 128Mi

Building

docker buildx build \
  --platform linux/amd64,linux/arm64 \
  --build-arg TAUTULLI_VERSION=2.17.1 \
  -t ppaslan/tautulli:2.17.1 \
  images/tautulli/

Tag summary

Content type

Image

Digest

sha256:ff7bce77d

Size

58 MB

Last updated

3 days ago

docker pull ppaslan/tautulli