11notes/rclone

RCLONE!size!https://raw.githubusercontent.com/11notes/static/refs/heads/master/img/markdown/transparent5x2px.png!pulls!https://raw.githubusercontent.com/11notes/static/refs/heads/master/img/markdown/transparent5x2px.png%5B](https://github.com/11notes/docker-rclone/issues)!https://raw.githubusercontent.com/11notes/static/refs/heads/master/img/markdown/transparent5x2px.png!swiss_made

以无root权限方式运行rclone。

INTRODUCTION 📢

https://github.com/rclone/rclone%EF%BC%88%E7%94%B1https://github.com/rclone%E5%BC%80%E5%8F%91%EF%BC%8C%E8%A2%AB%E8%AA%89%E4%B8%BA%E2%80%9C%E4%BA%91%E5%AD%98%E5%82%A8%E7%89%88rsync%E2%80%9D%EF%BC%89%E6%98%AF%E4%B8%80%E6%AC%BE%E5%91%BD%E4%BB%A4%E8%A1%8C%E7%A8%8B%E5%BA%8F%EF%BC%8C%E7%94%A8%E4%BA%8E%E5%9C%A8%E4%B8%8D%E5%90%8C%E4%BA%91%E5%AD%98%E5%82%A8%E6%8F%90%E4%BE%9B%E5%95%86%E4%B9%8B%E9%97%B4%E5%90%8C%E6%AD%A5%E6%96%87%E4%BB%B6%E5%92%8C%E7%9B%AE%E5%BD%95%E3%80%82

SYNOPSIS 📖

此镜像能做什么？ 该镜像以https://github.com/11notes/RTFM/blob/main/linux/container/image/rootless.md%E6%96%B9%E5%BC%8F%E8%BF%90%E8%A1%8Crclone%EF%BC%8C%E4%BB%A5%E5%AE%9E%E7%8E%B0%E6%9C%80%E9%AB%98%E5%AE%89%E5%85%A8%E6%80%A7%E5%92%8C%E6%80%A7%E8%83%BD%E3%80%82%E5%AE%83%E4%BC%9A%E8%87%AA%E5%8A%A8%E5%9C%A8%E5%91%BD%E4%BB%A4%E4%B8%AD%E6%B7%BB%E5%8A%A0%60--rc%60%E5%8F%82%E6%95%B0%E4%BB%A5%E6%9A%B4%E9%9C%B2%E6%8C%87%E6%A0%87%EF%BC%8C%E5%B9%B6%E4%BB%8E%60/rclone/etc/default.conf%60%E8%AF%BB%E5%8F%96%E9%85%8D%E7%BD%AE%EF%BC%8C%E5%85%B6%E4%BD%99%E5%8A%9F%E8%83%BD%E7%94%B1%E7%94%A8%E6%88%B7%E8%87%AA%E8%A1%8C%E5%AE%9A%E4%B9%89%E3%80%82

UNIQUE VALUE PROPOSITION 💶

为什么选择此镜像而非其他现有镜像？ 这是个好问题！因为...

• ...此镜像以https://github.com/11notes/RTFM/blob/main/linux/container/image/rootless.md%E6%96%B9%E5%BC%8F%E8%BF%90%E8%A1%8C%EF%BC%8C%E7%94%A8%E6%88%B7ID/%E7%BB%84ID%E4%B8%BA1000:1000
• ...通过CI/CD自动更新至最新版本
• ...包含健康检查功能
• ...在发布前后自动扫描CVE漏洞
• ...通过安全且固定的CI/CD流程构建
• ...镜像体积非常小

如果您重视安全性、简洁性和极致优化，此镜像可能适合您。

COMPARISON 🏁

以下是本镜像与最常用或官方镜像的对比。

VOLUMES 📁

• /rclone/etc - 配置文件目录

COMPOSE ✂️

yaml
name: "rclone"

x-lockdown: &lockdown
  # 防止对镜像本身的写访问
  read_only: true
  # 防止容器内进程获取更多权限
  security_opt:
    - "no-new-privileges=true"

x-readonly: &readonly
  # 防止对镜像本身的写访问
  read_only: true

services:
  rclone:
    depends_on:
      mc:
        condition: service_completed_successfully
    image: "11notes/rclone:1.74.2"
    <<: *readonly
    cap_add:
      - SYS_ADMIN
    devices:
      - /dev/fuse:/dev/fuse
    command: "mount 11notes:rclone/ /rclone/mnt --allow-other --vfs-cache-mode writes --cache-dir /rclone/cache --no-modtime --allow-non-empty --vfs-read-chunk-streams 16 --vfs-read-chunk-size 4M --no-check-certificate"
    environment:
      TZ: "Europe/Zurich"
      RCLONE_CONFIG: |-
        [11notes]
        type = s3
        provider = Minio
        env_auth = false
        access_key_id = admin
        secret_access_key = ${MINIO_ROOT_PASSWORD}
        region =
        endpoint = https://minio:9000
        location_constraint =
        server_side_encryption =
    volumes:
      - "rclone.etc:/rclone/etc"
      - "${PWD}/mnt:/rclone/mnt:rshared"
      - "rclone.cache:/rclone/cache"
    networks:
      backend:
    restart: "always"

  minio:
    # 有关此镜像的更多信息，请查看：
    # https://github.com/11notes/docker-minio
    image: "11notes/minio:2025.10.15"
    <<: *lockdown
    environment:
      TZ: "Europe/Zurich"
      MINIO_ROOT_PASSWORD: "${MINIO_ROOT_PASSWORD}"
    command: "/mnt"
    volumes:
      - "minio.var:/mnt"
    networks:
      backend:
    restart: "always"

  mc:
    # 有关此镜像的更多信息，请查看：
    # https://github.com/11notes/docker-mc
    depends_on:
      minio:
        condition: "service_healthy"
        restart: true
    image: "11notes/mc:2025.08.13"
    <<: *lockdown
    environment:
      TZ: "Europe/Zurich"
      MC_MINIO_URL: "https://minio:9000"
      MC_MINIO_ROOT_PASSWORD: "${MINIO_ROOT_PASSWORD}"
      MC_INSECURE: true
    command:
      - mb --ignore-existing minio/rclone
    volumes:
      - "mc.etc:/mc/etc"
    networks:
      backend:
    restart: "no"

  prometheus:
    # 有关此镜像的更多信息，请查看：
    # https://github.com/11notes/docker-prometheus
    depends_on:
      rclone:
        condition: "service_healthy"
        restart: true
    image: "11notes/prometheus:3.8.1"
    <<: *lockdown
    environment:
      TZ: "Europe/Zurich"
      PROMETHEUS_CONFIG: |-
        global:
          scrape_interval: 5s

        scrape_configs:
          - job_name: "rclone"
            static_configs:
              - targets: ["rclone:5572"]
    volumes:
      - "prometheus.etc:/prometheus/etc"
      - "prometheus.var:/prometheus/var"
    ports:
      - "3000:3000/tcp"
    networks:
      frontend:
      backend:
    restart: "always"

volumes:
  mc.etc:
  minio.var:
  rclone.etc:
  rclone.cache:
  prometheus.etc:
  prometheus.var:

networks:
  frontend:
  backend:
    internal: true

要了解如何更改此容器镜像的默认UID/GID，请参考https://github.com/11notes/RTFM/blob/main/linux/container/image/11notes/how-to.changeUIDGID.md#change-uidgid-the-correct-way%E3%80%82

DEFAULT SETTINGS 🗃️

ENVIRONMENT 📝

MAIN TAGS 🏷️

以下是镜像的主要标签。此外，每个提交及其sha256短哈希值也有对应的标签。

• https://hub.docker.com/r/11notes/rclone/tags?name=1.74.2
• https://hub.docker.com/r/11notes/rclone/tags?name=1.74.2-unraid
• https://hub.docker.com/r/11notes/rclone/tags?name=1.74.2-nobody

没有latest标签，如何处理更新？

个人认为:latest标签是不良习惯，不应使用。许多开发者在新版本中引入破坏性变更，这会影响使用:latest的用户。如果不想将标签更改为最新语义化版本，可使用语义化版本的短格式。例如，不使用:1.74.2，而使用:1或:1.74。这些标签会在每次新版本发布时更新为最新软件版本，效果类似于:latest，但至少固定在主版本或次版本，理论上不会引入破坏性变更。

如果仍坚持使用最新版本，可使用:rolling标签，但需注意：这会立即获取应用的最新版本，无论是否存在破坏性变更或安全问题，风险自负！

REGISTRIES ☁️

docker pull 11notes/rclone:1.74.2
docker pull ghcr.io/11notes/rclone:1.74.2
docker pull quay.io/11notes/rclone:1.74.2

UNRAID VERSION 🟠

此镜像默认支持unraid。只需在任何标签后添加**-unraid**，镜像将以99:100而非1000:1000运行。

NOBODY VERSION 👻

此镜像默认支持nobody用户。只需在任何标签后添加**-nobody**，镜像将以65534:65534而非1000:1000运行。

SOURCE 💾

• https://github.com/11notes/docker-rclone

PARENT IMAGE 🏛️

• ${{ json_readme_parent_image }}

BUILT WITH 🧰

• https://github.com/rclone/rclone
• https://github.com/11notes/docker-util

GENERAL TIPS 📌

• 使用反向代理（如Traefik、Nginx、HAproxy）终止TLS并保护端点
• 使用Let’s Encrypt DNS-01挑战获取服务的有效SSL证书

CAUTION ⚠️

• compose示例启动了minio（用于S3）并通过未验证的SSL连接rclone。生产环境中，仅连接到具有有效SSL证书的已验证目标！

ElevenNotes™️

此镜像仅供您自行承担风险使用。更新镜像版本前请务必备份。查看https://github.com/11notes/docker-rclone/releases%E4%BA%86%E8%A7%A3%E7%A0%B4%E5%9D%8F%E6%80%A7%E5%8F%98%E6%9B%B4%E3%80%82%E4%BD%BF%E7%94%A8%E4%B8%AD%E9%81%87%E5%88%B0%E9%97%AE%E9%A2%98%E8%AF%B7%E6%8F%90%E4%BA%A4https://github.com/11notes/docker-rclone/issues%E3%80%82%E5%A6%82%E6%9C%89%E7%96%91%E9%97%AE%E6%88%96%E5%BB%BA%E8%AE%AE%EF%BC%8C%E8%AF%B7%E5%88%9B%E5%BB%BAhttps://github.com/11notes/docker-rclone/discussions%E8%80%8C%E9%9D%9Eissue%E3%80%82%E6%88%91%E7%9A%84%E6%89%80%E6%9C%89%E4%BB%93%E5%BA%93%E5%8F%AF%E5%9C%A8https://github.com/11notes?tab=repositories%E6%9F%A5%E7%9C%8B%E3%80%82

创建于24.05.2026, 09:45:41 (CET)