docker.io/bunkerity/bunkerweb:1.6.6 linux/amd64

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/bunkerity/bunkerweb:1.6.6
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/bunkerity/bunkerweb:1.6.6  docker.io/bunkerity/bunkerweb:1.6.6

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/bunkerity/bunkerweb:1.6.6
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/bunkerity/bunkerweb:1.6.6  docker.io/bunkerity/bunkerweb:1.6.6

Shell快速替换命令

sed -i 's#bunkerity/bunkerweb:1.6.6#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/bunkerity/bunkerweb:1.6.6#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/bunkerity/bunkerweb:1.6.6 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/bunkerity/bunkerweb:1.6.6  docker.io/bunkerity/bunkerweb:1.6.6'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/bunkerity/bunkerweb:1.6.6 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/bunkerity/bunkerweb:1.6.6  docker.io/bunkerity/bunkerweb:1.6.6'

镜像构建历史

# 2025-11-24 22:35:25  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["./entrypoint.sh"]
                        
# 2025-11-24 22:35:25  0.00B 指定检查容器健康状态的命令
HEALTHCHECK &{["CMD-SHELL" "/usr/share/bunkerweb/helpers/healthcheck.sh"] "10s" "10s" "10s" "0s" '\x06'}
                        
# 2025-11-24 22:35:25  0.00B 指定运行容器时使用的用户
USER nginx:nginx
                        
# 2025-11-24 22:35:25  0.00B 声明容器运行时监听的端口
EXPOSE [8080/tcp 8443/tcp 8443/udp]
                        
# 2025-11-24 22:35:25  0.00B 添加元数据标签
LABEL bunkerweb.INSTANCE=bunkerweb
                        
# 2025-11-24 22:35:25  0.00B 添加元数据标签
LABEL bunkerweb.type=bunkerweb
                        
# 2025-11-24 22:35:25  0.00B 添加元数据标签
LABEL url=https://www.bunkerweb.io
                        
# 2025-11-24 22:35:25  0.00B 添加元数据标签
LABEL version=1.6.6
                        
# 2025-11-24 22:35:25  0.00B 添加元数据标签
LABEL maintainer=Bunkerity <contact@bunkerity.com>
                        
# 2025-11-24 22:35:25  39.19MB 执行命令并创建新的镜像层
RUN /bin/sh -c cp helpers/bwcli /usr/bin/ &&   mkdir -p /etc/bunkerweb /var/tmp/bunkerweb /var/run/bunkerweb /var/log/bunkerweb /var/www &&   mkdir -p /data/cache && ln -s /data/cache /var/cache/bunkerweb &&   mkdir -p /data/lib && ln -s /data/lib /var/lib/bunkerweb &&   mkdir -p /data/www && ln -s /data/www /var/www/html &&   for dir in $(echo "pro configs plugins") ; do mkdir -p "/data/${dir}" && ln -s "/data/${dir}" "/etc/bunkerweb/${dir}" ; done &&   for dir in $(echo "pro/plugins configs/http configs/stream configs/server-http configs/server-stream configs/default-server-http configs/default-server-stream configs/modsec configs/modsec-crs configs/crs-plugins-before configs/crs-plugins-after") ; do mkdir "/data/${dir}" ; done &&   chown -R root:nginx /data /etc/nginx /var/cache/bunkerweb /var/lib/bunkerweb /var/www/html /etc/bunkerweb /var/tmp/bunkerweb /var/run/bunkerweb /var/log/bunkerweb /usr/bin/bwcli &&   chmod -R 770 /data /etc/nginx /var/cache/bunkerweb /var/lib/bunkerweb /var/www/html /etc/bunkerweb /var/tmp/bunkerweb /var/log/bunkerweb /var/run/bunkerweb &&   chmod 2770 /var/tmp/bunkerweb &&   find . \( -path './cli' -o -path './lua' -o -path './core' -o -path './gen' -o -path './helpers' -o -path './utils' -o -path './deps' \) -prune -o -type f -print0 | xargs -0 -P "$(nproc)" -n 1024 chmod 440 &&   find cli lua gen helpers utils deps -type f ! -path 'deps/bin/*' ! -path 'deps/python/bin/*' ! -name '*.lua' ! -name '*.py' ! -name '*.pyc' ! -name '*.sh' ! -name '*.so' -print0 | xargs -0 -P "$(nproc)" -n 1024 chmod 440 &&   find core -type f ! -name '*.lua' -print0 | xargs -0 -P "$(nproc)" -n 1024 chmod 440 &&   chmod 550 entrypoint.sh &&   rm -f /var/log/bunkerweb/* &&   ln -s /proc/1/fd/2 /var/log/bunkerweb/error.log &&   ln -s /proc/1/fd/2 /var/log/bunkerweb/modsec_audit.log &&   ln -s /proc/1/fd/1 /var/log/bunkerweb/access.log # buildkit
                        
# 2025-11-24 22:35:24  0.00B 设置工作目录为/usr/share/bunkerweb
WORKDIR /usr/share/bunkerweb
                        
# 2025-11-24 22:35:24  53.82MB 复制新文件或目录到容器中
COPY --chown=0:101 --chmod=550 /usr/share/bunkerweb /usr/share/bunkerweb # buildkit
                        
# 2025-11-24 22:31:41  1.03MB 执行命令并创建新的镜像层
RUN /bin/sh -c apk add --no-cache "busybox>=1.37.0-r14" "busybox-binsh>=1.37.0-r14" "ssl_client>=1.37.0-r14" # CVE-2024-58251 CVE-2025-46394 # buildkit
                        
# 2025-11-24 22:31:41  66.47MB 执行命令并创建新的镜像层
RUN /bin/sh -c apk add --no-cache openssl pcre bash python3 yajl geoip libxml2 libgd curl tzdata # buildkit
                        
# 2025-11-24 22:35:24  0.00B 执行命令并创建新的镜像层
RUN /bin/sh -c umask 027 # buildkit
                        
# 2025-08-14 00:03:17  0.00B 设置默认要执行的命令
CMD ["nginx" "-g" "daemon off;"]
                        
# 2025-08-14 00:03:17  0.00B 设置停止容器时发送的系统调用信号
STOPSIGNAL SIGQUIT
                        
# 2025-08-14 00:03:17  0.00B 声明容器运行时监听的端口
EXPOSE map[80/tcp:{}]
                        
# 2025-08-14 00:03:17  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/docker-entrypoint.sh"]
                        
# 2025-08-14 00:03:17  4.62KB 复制新文件或目录到容器中
COPY 30-tune-worker-processes.sh /docker-entrypoint.d # buildkit
                        
# 2025-08-14 00:03:17  3.02KB 复制新文件或目录到容器中
COPY 20-envsubst-on-templates.sh /docker-entrypoint.d # buildkit
                        
# 2025-08-14 00:03:17  389.00B 复制新文件或目录到容器中
COPY 15-local-resolvers.envsh /docker-entrypoint.d # buildkit
                        
# 2025-08-14 00:03:17  2.12KB 复制新文件或目录到容器中
COPY 10-listen-on-ipv6-by-default.sh /docker-entrypoint.d # buildkit
                        
# 2025-08-14 00:03:17  1.62KB 复制新文件或目录到容器中
COPY docker-entrypoint.sh / # buildkit
                        
# 2025-08-14 00:03:17  4.05MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -x     && addgroup -g 101 -S nginx     && adduser -S -D -H -u 101 -h /var/cache/nginx -s /sbin/nologin -G nginx -g nginx nginx     && apkArch="$(cat /etc/apk/arch)"     && nginxPackages="         nginx=${NGINX_VERSION}-r${PKG_RELEASE}     "     && apk add --no-cache --virtual .checksum-deps         openssl     && case "$apkArch" in         x86_64|aarch64)             set -x             && KEY_SHA512="e09fa32f0a0eab2b879ccbbc4d0e4fb9751486eedda75e35fac65802cc9faa266425edf83e261137a2f4d16281ce2c1a5f4502930fe75154723da014214f0655"             && wget -O /tmp/nginx_signing.rsa.pub https://nginx.org/keys/nginx_signing.rsa.pub             && if echo "$KEY_SHA512 */tmp/nginx_signing.rsa.pub" | sha512sum -c -; then                 echo "key verification succeeded!";                 mv /tmp/nginx_signing.rsa.pub /etc/apk/keys/;             else                 echo "key verification failed!";                 exit 1;             fi             && apk add -X "https://nginx.org/packages/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages             ;;         *)             set -x             && tempDir="$(mktemp -d)"             && chown nobody:nobody $tempDir             && apk add --no-cache --virtual .build-deps                 gcc                 libc-dev                 make                 openssl-dev                 pcre2-dev                 zlib-dev                 linux-headers                 bash                 alpine-sdk                 findutils                 curl             && su nobody -s /bin/sh -c "                 export HOME=${tempDir}                 && cd ${tempDir}                 && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz                 && PKGOSSCHECKSUM=\"517bc18954ccf4efddd51986584ca1f37966833ad342a297e1fe58fd0faf14c5a4dabcb23519dca433878a2927a95d6bea05a6749ee2fa67a33bf24cdc41b1e4 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\"                 && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then                     echo \"pkg-oss tarball checksum verification succeeded!\";                 else                     echo \"pkg-oss tarball checksum verification failed!\";                     exit 1;                 fi                 && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz                 && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE}                 && cd alpine                 && make base                 && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk                 && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz                 "             && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/             && apk del --no-network .build-deps             && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages             ;;     esac     && apk del --no-network .checksum-deps     && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi     && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi     && apk add --no-cache gettext-envsubst     && apk add --no-cache tzdata     && ln -sf /dev/stdout /var/log/nginx/access.log     && ln -sf /dev/stderr /var/log/nginx/error.log     && mkdir /docker-entrypoint.d # buildkit
                        
# 2025-08-14 00:03:17  0.00B 设置环境变量 DYNPKG_RELEASE
ENV DYNPKG_RELEASE=1
                        
# 2025-08-14 00:03:17  0.00B 设置环境变量 PKG_RELEASE
ENV PKG_RELEASE=1
                        
# 2025-08-14 00:03:17  0.00B 设置环境变量 NGINX_VERSION
ENV NGINX_VERSION=1.28.0
                        
# 2025-08-14 00:03:17  0.00B 添加元数据标签
LABEL maintainer=NGINX Docker Maintainers <docker-maint@nginx.com>
                        
# 2025-08-14 00:03:17  0.00B 设置默认要执行的命令
CMD ["/bin/sh"]
                        
# 2025-08-14 00:03:17  7.83MB 复制文件或目录到容器中
ADD alpine-minirootfs-3.21.5-x86_64.tar.gz / # buildkit
                        
                    

镜像信息

{
    "Id": "sha256:e7d26753ac7c7aaa64128b551773ed8171fb3bce60538604750e4fae7ed8a067",
    "RepoTags": [
        "bunkerity/bunkerweb:1.6.6",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/bunkerity/bunkerweb:1.6.6"
    ],
    "RepoDigests": [
        "bunkerity/bunkerweb@sha256:a574f9e19741b9404ceb252585a7059cf1dfe6923698362375d74c5e92ff9e74",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/bunkerity/bunkerweb@sha256:7357d9a6e6fde8106b39d209bb10271cced91c46515c823508d8fba617267931"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2025-11-24T14:35:25.60943019Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "nginx:nginx",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "ExposedPorts": {
            "80/tcp": {},
            "8080/tcp": {},
            "8443/tcp": {},
            "8443/udp": {}
        },
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "NGINX_VERSION=1.28.0",
            "PKG_RELEASE=1",
            "DYNPKG_RELEASE=1"
        ],
        "Cmd": null,
        "Healthcheck": {
            "Test": [
                "CMD-SHELL",
                "/usr/share/bunkerweb/helpers/healthcheck.sh"
            ],
            "Interval": 10000000000,
            "Timeout": 10000000000,
            "StartPeriod": 10000000000,
            "Retries": 6
        },
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/usr/share/bunkerweb",
        "Entrypoint": [
            "./entrypoint.sh"
        ],
        "OnBuild": null,
        "Labels": {
            "bunkerweb.INSTANCE": "bunkerweb",
            "bunkerweb.type": "bunkerweb",
            "maintainer": "Bunkerity \u003ccontact@bunkerity.com\u003e",
            "org.opencontainers.image.created": "2025-11-24T14:59:05.499Z",
            "org.opencontainers.image.description": "🛡️ Open-source and next-generation Web Application Firewall (WAF)",
            "org.opencontainers.image.licenses": "AGPL-3.0",
            "org.opencontainers.image.revision": "8106af04d4807ced6f48cce2f041762372b3151b",
            "org.opencontainers.image.source": "https://github.com/bunkerity/bunkerweb",
            "org.opencontainers.image.title": "bunkerweb",
            "org.opencontainers.image.url": "https://github.com/bunkerity/bunkerweb",
            "org.opencontainers.image.version": "master",
            "url": "https://www.bunkerweb.io",
            "version": "1.6.6"
        },
        "StopSignal": "SIGQUIT"
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 172405509,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/c3cd59f23a3550ed8db2357ccbf42899d89a4014e91cb0be781204cb0aff9937/diff:/var/lib/docker/overlay2/44f47b3671c35ed931bdac8c15ca4ccf64a242a62869e29ccc1bfc1bc78e55aa/diff:/var/lib/docker/overlay2/071abb51a46276ab71d766e7ef0a5a45f6d5a6ce391b87bae7533ab1be3284bf/diff:/var/lib/docker/overlay2/fa8cdf52fca7f20a857d273ab16ddfc0d6f4c32edd53961d32ae107e9d5357cb/diff:/var/lib/docker/overlay2/106c024636fb839e4a2351b49bff0fdd93ff730c11a51ee0f15563bc4bbab73a/diff:/var/lib/docker/overlay2/69f3677d038448efa67b1c10225860bbb4ff407d61195de2b3a1eaa861640cbc/diff:/var/lib/docker/overlay2/3e9ff8b47286d26d6d909fee997037499fe57ef1e6bf06e68843463f87b9d33c/diff:/var/lib/docker/overlay2/518f21b2b6571706751b5bd9a90d8fbef12398f8017ad2282925084d2911eabf/diff:/var/lib/docker/overlay2/f9b390bf99e87d05fb3e1762afc1744ffaef6f29a26231fb4763209c20f22e5e/diff:/var/lib/docker/overlay2/a9c1e9f02fd38cc7a3933aa2983516ea77aa54709e4434e2939241a27ed97c5d/diff:/var/lib/docker/overlay2/fc0f84fea66304c08f5240d3fdc3c59af9b0b15b945614e92f80e5265a11ff08/diff:/var/lib/docker/overlay2/14e8c666d918e7603b93e09a5088443da9ef63e7ca5bccee76b97634e4e3ee5b/diff",
            "MergedDir": "/var/lib/docker/overlay2/22398f057f200faa1f12fa7b0b4d363cad82272adb33c19e242c08951e83613c/merged",
            "UpperDir": "/var/lib/docker/overlay2/22398f057f200faa1f12fa7b0b4d363cad82272adb33c19e242c08951e83613c/diff",
            "WorkDir": "/var/lib/docker/overlay2/22398f057f200faa1f12fa7b0b4d363cad82272adb33c19e242c08951e83613c/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:922ec217407c0fd31cb18b46090bf62e439fb53ecd01f09406d62e25a906e09b",
            "sha256:412e147b334cddb83eedf352f7f2ea40844abceb3614a5d9c9726d076e5c3b6f",
            "sha256:570a1c87f279a67fc5509cf76c4b57cf722c8de9f9cdaa214c787d0fb0e1e7a5",
            "sha256:34034c5235653389adbf8982e9fc868561e62e5d88c58c878331ed89abfd1a6f",
            "sha256:7d9abb9ab3b7a473c37818aee5eb0f4637716ef9d8b28989ebab09d29f987246",
            "sha256:5f23a9cf34f1103f7564dfb3f036e877efedde5372cb2190285418008372fdde",
            "sha256:a231a657395e32fc50a9dd243cbf8476a246468d0faf68dacfd9a9a1befbb456",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:e2733ac55d1b196d8120f25ba7d3c71fb6874dc76cc9f5dd972e2732379d7960",
            "sha256:bf1f83eefaf003ed74d8981f755d3138645087fb7e67f5d9d9e1812046bc66a8",
            "sha256:483946beb0400e4bf8375c567d12358eae5b9a528a200964cc6fc4bcc484c866",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:3d64820e2a1ae186d86c70e4cc302d984903e618c6935dbf217d5b71aaf211eb"
        ]
    },
    "Metadata": {
        "LastTagTime": "2025-12-04T14:34:08.223876144+08:00"
    }
}