基于Ubuntu的高性能、灵活的授权/权限引擎,受Google Zanzibar启发,用于开发者构建细粒度授权系统,支持安全更新和版本滚动,免费使用且不受速率限制。

下载次数: 0状态:社区镜像维护者:Ubuntu 官方镜像仓库类型:镜像最近更新:
下载命令
点击查看

ubuntu/openfga is a rock for openfga maintained by https://canonical.com/.

A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA is designed to make it easy for developers to model their application permissions and add and integrate fine-grained authorization into their applications. It allows in-memory data storage for quick development, as well as pluggable database modules.

\https://openfga.dev/\]

Tags and Architectures

NOTE: These tags follow a specific naming convention that respects the concept of channels.

TagsSupported untilVersionBaseArchitectures
1-22.04_stable
aliases1-22.04, 1-22.04_beta, 1-22.04_candidate, 1-22.04_edge
12/2026122.04arm64, amd64

Get started

This rock's entrypoint is Pebble, a container-optimized init process that enables the orchestration of a collection of local service processes as an organized set.

\https://documentation.ubuntu.com/pebble/\]

Inspect

To view the https://documentation.ubuntu.com/rockcraft/en/latest/reference/rockcraft-yaml/#services and https://documentation.ubuntu.com/rockcraft/latest/reference/rockcraft-yaml/#checks defined in this rock:

sh
docker run --rm ubuntu/openfga:1-22.04_stable plan

Run

To run this rock, use any of the usual container runtimes, for example, docker:

sh
docker run --name openfga-container \
    -p 8080:8080  -p 8081:8081 -p 3000:3000 -p 2112:2112 \
    ubuntu/openfga:1-22.04_stable

Access the API either on http via http://localhost:8080 or grpc on localhost:8081, UI playground on http://localhost:3000. Prometheus metrics are available at http://localhost:2112/metrics.

Get logs

To view the logs of the running container, run:

sh
docker exec openfga-container pebble logs

Or, for a specific service:

sh
docker exec openfga-container pebble logs <service>

Monitor health checks

Rocks may have predefined health checks that you can list by running:

sh
docker exec openfga-container pebble checks

The overall health of your container can be inspected via:

sh
docker exec openfga-container pebble health

Configuration

Environment variables

OptionDescriptionDefault
OPENFGA_DATASTORE_ENGINEDatastore type, currently supports postgresql, mysql and sqlite (beta).None
OPENFGA_DATASTORE_URIDatabase connection string, e.g., postgres://postgres:password@postgres:5432/postgres?sslmode=disable.None
OPENFGA_PLAYGROUND_ENABLEDAllow playground UI, e.g., true.None

Ports

OptionDescriptionDefault
-p <port>:8080Expose the container's port 8080 on the host's <port> for HTTP connections.None
-p <port>:8081Expose the container's port 8081 on the host's <port> for gRPC connections.None
-p <port>:3000Expose the container's port 3000 on the host's <port> for the playground UI.None
-p <port>:2112Expose the container's port 2112 on the host's <port> for Prometheus metrics endpoint.None

Application parameters

OptionDescriptionDefault
openfga runLaunch OpenFGA server(s) using a mix of environment variables.None

\https://github.com/canonical/openfga-rock/issues\] \https://github.com/canonical/openfga-rock\]

Canonical is the provider of this container image. It is the user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within, as well as with https://canonical.com/legal/intellectual-property-policy.

镜像拉取方式

您可以使用以下命令拉取该镜像。请将 <标签> 替换为具体的标签版本。如需查看所有可用标签版本,请访问 标签列表页面。

轩辕镜像加速拉取命令点我查看更多 openfga 镜像标签

docker pull docker.xuanyuan.run/ubuntu/openfga:<标签>

DockerHub 原生拉取命令

docker pull ubuntu/openfga:<标签>
专业版 · 高速稳定拉取镜像
50GB 仅 ¥8/年
高速镜像下载在线技术支持专业版保障服务可用付费会员免广告