openeuler/distroless-static Docker 镜像 - 轩辕镜像 | Docker 镜像高效稳定拉取服务

Quick reference

• The official distroless-static docker image.

• Maintained by: openEuler CloudNative SIG.

• Where to get help: openEuler CloudNative SIG, openEuler.

distroless-static | openEuler

This image contains a minimal Linux, glibc runtime for "mostly-statically compiled" languages like Rust and Go.

Statically compiled applications (Go) that do not require libc can use the openeuler/distroless-static image, which contains:

• ca-certificates
• tzdata

Supported tags and respective Dockerfile links

The tag details are as follows

Usage

Users are expected to include their compiled application and set the correct cmd in their image. For example

# Dockerfile

FROM openeuler/go:latest AS build
WORKDIR /go/src/app
COPY . .
RUN go mod download
RUN go vet -v
RUN go test -v
RUN CGO_ENABLED=0 go build -o /go/bin/app

FROM openeuler/distroless-static:1.0.0-oe2403lts
COPY --from=build /go/bin/app /
CMD ["/app"]

Run Applications as a Non-Root User

For implementation details, refer to the distroless-base-nonroot documentation.

Question and answering

If you have any questions or want to use some special features, please submit an issue or a pull request on openeuler-docker-images.