cleanstart/openldap Docker Image

Verified OPENLDAP Container Image

A hardened, minimal OPENLDAP container image built from source with verifiable software provenance and an SBOM, designed for secure production deployments.

For additional versions including FIPS support, explore CleanStart Images — secure, hardened container images

Pull Latest Image

Download the container image from the registry

bash
docker pull cleanstart/openldap:latest

bash
docker pull cleanstart/openldap:latest-dev

Basic Run

Run the container with basic configuration

bash
docker run -it --name openldap cleanstart/openldap:latest

Production Deployment

Deploy with production security settings

bash
docker volume create openldap-prod-libdir

docker run --rm -v openldap-prod-libdir:/mount alpine sh -c \
  "mkdir -p /mount/openldap-data && chown -R 1000:1000 /mount && chmod -R 700 /mount" && \
docker run -d --name openldap-prod \
  --security-opt=no-new-privileges \
  --user 1000:1000 \
  --cap-drop ALL \
  --cap-add NET_BIND_SERVICE \
  --restart unless-stopped \
  -v openldap-prod-libdir:/var/lib/openldap \
  -v ~/slapd.conf:/etc/openldap/slapd.conf:ro \
  -p 389:389 -p 636:636 \
  --entrypoint slapd \
  ghcr.io/cleanstart-containers/openldap:latest \
  -h "ldap:// ldaps://" -d 0

Volume Mount local directory for persistent data

bash
docker run -it --name openldap \
  -v openldap-data:/var/lib/openldap/openldap-data \
  ghcr.io/cleanstart-containers/openldap:latest

Port Forwarding Run with custom port mappings

bash
docker run -it --name openldap \
  -p 1389:389 -p 1636:636 \
  ghcr.io/cleanstart-containers/openldap:latest

Why Use CleanStart Images

• Verified — Built from source with verifiable software provenance
• Hardened — Minimal software footprint designed for secure deployment
• Transparent — SBOM available for visibility into image contents
• Production-ready — Built for modern container environments