docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512 linux/amd64

docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512 - 国内下载镜像源 浏览次数:31
使用中文描述如下: OWASP ModSecurity Core Rule Set镜像提供ModSecurity Core Rule Set,用于保护 web 应用免受攻击和加速安全扫描。
源镜像 docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512
国内镜像 swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512
镜像ID sha256:cedb90f3f283bca7e646c2caf9898a184e1735bf39996505b8bd7144ea5a0b0b
镜像TAG 4.9.0-openresty-alpine-fat-202412090512
大小 425.81MB
镜像源 docker.io
项目信息 Docker-Hub主页 🚀项目TAG 🚀
CMD /usr/local/openresty/bin/openresty -g daemon off;
启动入口 /docker-entrypoint.sh
工作目录
OS/平台 linux/amd64
浏览量 31 次
贡献者 49****1@qq.com
镜像创建 2024-12-09T05:43:03.660832287Z
同步时间 2024-12-10 10:38
更新时间 2024-12-24 20:22
开放端口
80/tcp
环境变量
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/openresty/luajit/bin:/usr/local/openresty/nginx/sbin:/usr/local/openresty/bin LUA_PATH=/usr/local/openresty/site/lualib/?.ljbc;/usr/local/openresty/site/lualib/?/init.ljbc;/usr/local/openresty/lualib/?.ljbc;/usr/local/openresty/lualib/?/init.ljbc;/usr/local/openresty/site/lualib/?.lua;/usr/local/openresty/site/lualib/?/init.lua;/usr/local/openresty/lualib/?.lua;/usr/local/openresty/lualib/?/init.lua;./?.lua;/usr/local/openresty/luajit/share/luajit-2.1/?.lua;/usr/local/share/lua/5.1/?.lua;/usr/local/share/lua/5.1/?/init.lua;/usr/local/openresty/luajit/share/lua/5.1/?.lua;/usr/local/openresty/luajit/share/lua/5.1/?/init.lua LUA_CPATH=/usr/local/openresty/site/lualib/?.so;/usr/local/openresty/lualib/?.so;./?.so;/usr/local/lib/lua/5.1/?.so;/usr/local/openresty/luajit/lib/lua/5.1/?.so;/usr/local/lib/lua/5.1/loadall.so;/usr/local/openresty/luajit/lib/lua/5.1/?.so ACCESSLOG=/var/log/nginx/access.log BACKEND=http://localhost:80 DNS_SERVER= ERRORLOG=/var/log/nginx/error.log KEEPALIVE_TIMEOUT=60s LD_LIBRARY_PATH=/usr/local/lib:/usr/local/openresty LOGLEVEL=warn METRICS_ALLOW_FROM=127.0.0.0/24 METRICS_DENY_FROM=all METRICSLOG=/dev/null MODSEC_ARGUMENT_SEPARATOR=& MODSEC_ARGUMENTS_LIMIT=1000 MODSEC_AUDIT_ENGINE=RelevantOnly MODSEC_AUDIT_LOG=/dev/stdout MODSEC_AUDIT_LOG_FORMAT=JSON MODSEC_AUDIT_LOG_PARTS=ABIJDEFHZ MODSEC_AUDIT_LOG_RELEVANT_STATUS=^(?:5|4(?!04)) MODSEC_AUDIT_LOG_TYPE=Serial MODSEC_COOKIE_FORMAT=0 MODSEC_AUDIT_STORAGE_DIR=/var/log/modsecurity/audit/ MODSEC_DATA_DIR=/tmp/modsecurity/data MODSEC_DEBUG_LOG=/dev/null MODSEC_DEBUG_LOGLEVEL=0 MODSEC_DEFAULT_PHASE1_ACTION=phase:1,pass,log,tag:'${MODSEC_TAG}' MODSEC_DEFAULT_PHASE2_ACTION=phase:2,pass,log,tag:'${MODSEC_TAG}' MODSEC_DISABLE_BACKEND_COMPRESSION=Off MODSEC_PCRE_MATCH_LIMIT=100000 MODSEC_PCRE_MATCH_LIMIT_RECURSION=100000 MODSEC_REQ_BODY_ACCESS=on MODSEC_REQ_BODY_JSON_DEPTH_LIMIT=512 MODSEC_REQ_BODY_LIMIT=13107200 MODSEC_REQ_BODY_LIMIT_ACTION=Reject MODSEC_REQ_BODY_NOFILES_LIMIT=131072 MODSEC_RESP_BODY_ACCESS=on MODSEC_RESP_BODY_LIMIT=1048576 MODSEC_RESP_BODY_LIMIT_ACTION=ProcessPartial MODSEC_RESP_BODY_MIMETYPE=text/plain text/html text/xml MODSEC_RULE_ENGINE=on MODSEC_STATUS_ENGINE=Off MODSEC_TAG=modsecurity MODSEC_TMP_DIR=/tmp/modsecurity/tmp MODSEC_TMP_SAVE_UPLOADED_FILES=on MODSEC_UNICODE_MAPPING=20127 MODSEC_UPLOAD_DIR=/tmp/modsecurity/upload MODSEC_UPLOAD_FILE_MODE=0600 MODSEC_UPLOAD_KEEP_FILES=Off NGINX_ALWAYS_TLS_REDIRECT=off NGINX_ENVSUBST_OUTPUT_DIR=/usr/local/openresty/nginx/conf PORT=80 PROXY_SSL_CERT_KEY=/usr/local/openresty/nginx/conf/proxy.key PROXY_SSL_CERT=/usr/local/openresty/nginx/conf/proxy.crt PROXY_SSL_CIPHERS=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 PROXY_SSL=off PROXY_SSL_PROTOCOLS=TLSv1.2 TLSv1.3 PROXY_SSL_VERIFY_DEPTH=1 PROXY_SSL_VERIFY=off PROXY_TIMEOUT=60s REAL_IP_HEADER=X-REAL-IP REAL_IP_PROXY_HEADER=X-REAL-IP REAL_IP_RECURSIVE=on SERVER_NAME=localhost SERVER_TOKENS=off SET_REAL_IP_FROM=127.0.0.1 SSL_CERT_KEY=/usr/local/openresty/nginx/conf/server.key SSL_CERT=/usr/local/openresty/nginx/conf/server.crt SSL_CIPHERS=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 SSL_DH_BITS=2048 SSL_OCSP_STAPLING=on SSL_PORT=443 SSL_PREFER_CIPHERS=off SSL_PROTOCOLS=TLSv1.2 TLSv1.3 SSL_VERIFY_DEPTH=1 SSL_VERIFY=off WORKER_CONNECTIONS=1024 PARANOIA=1 ANOMALY_INBOUND=5 ANOMALY_OUTBOUND=4 BLOCKING_PARANOIA=1
镜像标签
Taavi Ansper <taaviansperr@gmail.com>: maintainer https://github.com/coreruleset/modsecurity-crs-docker: org.opencontainers.image.source : resty_add_package_builddeps : resty_add_package_rundeps --with-pcre --with-cc-opt='-DNGX_LUA_ABORT_AT_PANIC -I/usr/local/openresty/pcre/include -I/usr/local/openresty/openssl/include' --with-ld-opt='-L/usr/local/openresty/pcre/lib -L/usr/local/openresty/openssl/lib -Wl,-rpath,/usr/local/openresty/pcre/lib:/usr/local/openresty/openssl/lib' : resty_config_deps --with-compat --with-file-aio --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_geoip_module=dynamic --with-http_gunzip_module --with-http_gzip_static_module --with-http_image_filter_module=dynamic --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_v3_module --with-http_xslt_module=dynamic --with-ipv6 --with-mail --with-mail_ssl_module --with-md5-asm --with-sha1-asm --with-stream --with-stream_ssl_module --with-threads : resty_config_options : resty_config_options_more : resty_eval_post_download_pre_configure : resty_eval_post_make : resty_eval_pre_configure openresty/openresty: resty_fat_image_base 1.25.3.1-alpine-amd64: resty_fat_image_tag alpine: resty_image_base 3.20: resty_image_tag --with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT': resty_luajit_options 3.11.0: resty_luarocks_version 1.1.1f: resty_openssl_patch_version https://www.openssl.org/source/old/1.1.1: resty_openssl_url_base 1.1.1w: resty_openssl_version --enable-jit: resty_pcre_build_options --with-pcre-jit: resty_pcre_options 4e6ce03e0336e8b4a3d6c2b70b1c5e18590a5673a98186da90d4f33c23defc09: resty_pcre_sha256 8.45: resty_pcre_version 1.25.3.1: resty_version
镜像安全扫描 查看Trivy扫描报告

系统OS: alpine 3.20.1 扫描引擎: Trivy 扫描时间: 2024-12-10 10:38

低危漏洞:0 中危漏洞:1 高危漏洞:1 严重漏洞:3

Docker拉取命令 无权限下载?点我修复

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512  docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512  docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512

Shell快速替换命令

sed -i 's#owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512  docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512  docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512'

镜像构建历史


# 2024-12-09 13:43:03  0.00B 设置默认要执行的命令
CMD ["/usr/local/openresty/bin/openresty" "-g" "daemon off;"]
                        
# 2024-12-09 13:43:03  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/docker-entrypoint.sh"]
                        
# 2024-12-09 13:43:03  0.00B 指定检查容器健康状态的命令
HEALTHCHECK &{["CMD-SHELL" "/usr/local/bin/healthcheck"] "0s" "0s" "0s" "0s" '\x00'}
                        
# 2024-12-09 13:43:03  0.00B 声明容器运行时监听的端口
EXPOSE map[80/tcp:{}]
                        
# 2024-12-09 13:43:03  43.67MB 执行命令并创建新的镜像层
RUN |2 MODSEC3_VERSION=3.0.13 LUA_MODULES=lua-resty-openidc lua-zlib luasocket /bin/sh -c set -eux;     apk add --no-cache         curl         curl-dev         libfuzzy2         libmaxminddb-dev         libstdc++         libxml2-dev         lmdb-dev         git         moreutils         tzdata         pcre         pcre2         sed         yajl;     for module in lua-resty-openidc ${LUA_MODULES}; do         luarocks install "${module}";     done;     mkdir /var/log/nginx;     mkdir -p /tmp/modsecurity/data;     mkdir -p /tmp/modsecurity/upload;     mkdir -p /tmp/modsecurity/tmp;     mkdir -p /usr/local/modsecurity;     chown -R nobody:nobody /tmp/modsecurity;     sed -i 's/^\(SecDisableBackendCompression .*\)/# \1/' /usr/local/openresty/nginx/templates/modsecurity.d/modsecurity-override.conf.template;     ln -s /usr/local/modsecurity/lib/libmodsecurity.so.${MODSEC3_VERSION} /usr/local/modsecurity/lib/libmodsecurity.so.3.0;     ln -s /usr/local/modsecurity/lib/libmodsecurity.so.${MODSEC3_VERSION} /usr/local/modsecurity/lib/libmodsecurity.so.3;     ln -s /usr/local/modsecurity/lib/libmodsecurity.so.${MODSEC3_VERSION} /usr/local/modsecurity/lib/libmodsecurity.so;     ln -sv /opt/owasp-crs /etc/modsecurity.d/;     chmod -R g=u /var/log/ /var/run/ /usr/local/openresty/nginx/ /etc/modsecurity.d/ # buildkit
                        
# 2024-12-09 13:42:48  9.99KB 复制新文件或目录到容器中
COPY openresty/docker-entrypoint.d/*.sh /docker-entrypoint.d/ # buildkit
                        
# 2024-12-09 13:42:48  1.62KB 复制新文件或目录到容器中
COPY openresty/docker-entrypoint.sh / # buildkit
                        
# 2024-12-09 13:42:48  1.07KB 复制新文件或目录到容器中
COPY openresty/templates/nginx.conf.template /usr/local/openresty/nginx/templates # buildkit
                        
# 2024-12-09 13:42:48  2.20KB 复制新文件或目录到容器中
COPY src/bin/* /usr/local/bin/ # buildkit
                        
# 2024-12-09 13:42:48  9.06KB 复制新文件或目录到容器中
COPY src/opt/modsecurity/activate-rules.sh /docker-entrypoint.d/95-activate-rules.sh # buildkit
                        
# 2024-12-09 13:42:48  953.00B 复制新文件或目录到容器中
COPY src/opt/modsecurity/activate-plugins.sh /docker-entrypoint.d/94-activate-plugins.sh # buildkit
                        
# 2024-12-09 13:42:48  693.00B 复制新文件或目录到容器中
COPY src/etc/modsecurity.d/setup.conf /usr/local/openresty/nginx/templates/modsecurity.d/setup.conf.template # buildkit
                        
# 2024-12-09 13:42:48  93.00B 复制新文件或目录到容器中
COPY src/etc/modsecurity.d/modsecurity-override.conf /usr/local/openresty/nginx/templates/modsecurity.d/modsecurity-override.conf.template # buildkit
                        
# 2024-12-09 13:42:48  3.57KB 复制新文件或目录到容器中
COPY src/etc/modsecurity.d/modsecurity.conf /usr/local/openresty/nginx/templates/modsecurity.d/modsecurity.conf.template # buildkit
                        
# 2024-12-09 13:42:48  0.00B 复制新文件或目录到容器中
COPY nginx/templates/modsecurity.d /usr/local/openresty/nginx/templates/modsecurity.d # buildkit
                        
# 2024-12-09 13:42:48  1.67KB 复制新文件或目录到容器中
COPY nginx/templates/includes /usr/local/openresty/nginx/templates/includes # buildkit
                        
# 2024-12-09 13:42:48  1.98KB 复制新文件或目录到容器中
COPY nginx/templates/conf.d /usr/local/openresty/nginx/templates/conf.d # buildkit
                        
# 2024-12-09 13:42:48  1.04MB 复制新文件或目录到容器中
COPY /opt/owasp-crs /opt/owasp-crs # buildkit
                        
# 2024-12-09 13:42:48  53.15KB 复制新文件或目录到容器中
COPY /etc/modsecurity.d/unicode.mapping /etc/modsecurity.d/unicode.mapping # buildkit
                        
# 2024-12-09 13:42:48  1.19KB 复制新文件或目录到容器中
COPY /usr/share/TLS/dhparam-* /etc/ssl/certs/ # buildkit
                        
# 2024-12-09 13:42:48  273.98KB 复制新文件或目录到容器中
COPY /usr/local/openresty/nginx/modules/ngx_http_modsecurity_module.so /usr/local/openresty/nginx/modules/ngx_http_modsecurity_module.so # buildkit
                        
# 2024-12-09 13:42:48  2.53MB 复制新文件或目录到容器中
COPY /usr/local/modsecurity/lib/libmodsecurity.so.3.0.13 /usr/local/modsecurity/lib/ # buildkit
                        
# 2024-12-09 13:42:48  0.00B 设置环境变量 ACCESSLOG BACKEND DNS_SERVER ERRORLOG KEEPALIVE_TIMEOUT LD_LIBRARY_PATH LOGLEVEL METRICS_ALLOW_FROM METRICS_DENY_FROM METRICSLOG MODSEC_ARGUMENT_SEPARATOR MODSEC_ARGUMENTS_LIMIT MODSEC_AUDIT_ENGINE MODSEC_AUDIT_LOG MODSEC_AUDIT_LOG_FORMAT MODSEC_AUDIT_LOG_PARTS MODSEC_AUDIT_LOG_RELEVANT_STATUS MODSEC_AUDIT_LOG_TYPE MODSEC_COOKIE_FORMAT MODSEC_AUDIT_STORAGE_DIR MODSEC_DATA_DIR MODSEC_DEBUG_LOG MODSEC_DEBUG_LOGLEVEL MODSEC_DEFAULT_PHASE1_ACTION MODSEC_DEFAULT_PHASE2_ACTION MODSEC_DISABLE_BACKEND_COMPRESSION MODSEC_PCRE_MATCH_LIMIT MODSEC_PCRE_MATCH_LIMIT_RECURSION MODSEC_REQ_BODY_ACCESS MODSEC_REQ_BODY_JSON_DEPTH_LIMIT MODSEC_REQ_BODY_LIMIT MODSEC_REQ_BODY_LIMIT_ACTION MODSEC_REQ_BODY_NOFILES_LIMIT MODSEC_RESP_BODY_ACCESS MODSEC_RESP_BODY_LIMIT MODSEC_RESP_BODY_LIMIT_ACTION MODSEC_RESP_BODY_MIMETYPE MODSEC_RULE_ENGINE MODSEC_STATUS_ENGINE MODSEC_TAG MODSEC_TMP_DIR MODSEC_TMP_SAVE_UPLOADED_FILES MODSEC_UNICODE_MAPPING MODSEC_UPLOAD_DIR MODSEC_UPLOAD_FILE_MODE MODSEC_UPLOAD_KEEP_FILES NGINX_ALWAYS_TLS_REDIRECT NGINX_ENVSUBST_OUTPUT_DIR PORT PROXY_SSL_CERT_KEY PROXY_SSL_CERT PROXY_SSL_CIPHERS PROXY_SSL PROXY_SSL_PROTOCOLS PROXY_SSL_VERIFY_DEPTH PROXY_SSL_VERIFY PROXY_TIMEOUT REAL_IP_HEADER REAL_IP_PROXY_HEADER REAL_IP_RECURSIVE SERVER_NAME SERVER_TOKENS SET_REAL_IP_FROM SSL_CERT_KEY SSL_CERT SSL_CIPHERS SSL_DH_BITS SSL_OCSP_STAPLING SSL_PORT SSL_PREFER_CIPHERS SSL_PROTOCOLS SSL_VERIFY_DEPTH SSL_VERIFY WORKER_CONNECTIONS PARANOIA ANOMALY_INBOUND ANOMALY_OUTBOUND BLOCKING_PARANOIA
ENV ACCESSLOG=/var/log/nginx/access.log BACKEND=http://localhost:80 DNS_SERVER= ERRORLOG=/var/log/nginx/error.log KEEPALIVE_TIMEOUT=60s LD_LIBRARY_PATH=/usr/local/lib:/usr/local/openresty LOGLEVEL=warn METRICS_ALLOW_FROM=127.0.0.0/24 METRICS_DENY_FROM=all METRICSLOG=/dev/null MODSEC_ARGUMENT_SEPARATOR=& MODSEC_ARGUMENTS_LIMIT=1000 MODSEC_AUDIT_ENGINE=RelevantOnly MODSEC_AUDIT_LOG=/dev/stdout MODSEC_AUDIT_LOG_FORMAT=JSON MODSEC_AUDIT_LOG_PARTS=ABIJDEFHZ MODSEC_AUDIT_LOG_RELEVANT_STATUS=^(?:5|4(?!04)) MODSEC_AUDIT_LOG_TYPE=Serial MODSEC_COOKIE_FORMAT=0 MODSEC_AUDIT_STORAGE_DIR=/var/log/modsecurity/audit/ MODSEC_DATA_DIR=/tmp/modsecurity/data MODSEC_DEBUG_LOG=/dev/null MODSEC_DEBUG_LOGLEVEL=0 MODSEC_DEFAULT_PHASE1_ACTION=phase:1,pass,log,tag:'${MODSEC_TAG}' MODSEC_DEFAULT_PHASE2_ACTION=phase:2,pass,log,tag:'${MODSEC_TAG}' MODSEC_DISABLE_BACKEND_COMPRESSION=Off MODSEC_PCRE_MATCH_LIMIT=100000 MODSEC_PCRE_MATCH_LIMIT_RECURSION=100000 MODSEC_REQ_BODY_ACCESS=on MODSEC_REQ_BODY_JSON_DEPTH_LIMIT=512 MODSEC_REQ_BODY_LIMIT=13107200 MODSEC_REQ_BODY_LIMIT_ACTION=Reject MODSEC_REQ_BODY_NOFILES_LIMIT=131072 MODSEC_RESP_BODY_ACCESS=on MODSEC_RESP_BODY_LIMIT=1048576 MODSEC_RESP_BODY_LIMIT_ACTION=ProcessPartial MODSEC_RESP_BODY_MIMETYPE=text/plain text/html text/xml MODSEC_RULE_ENGINE=on MODSEC_STATUS_ENGINE=Off MODSEC_TAG=modsecurity MODSEC_TMP_DIR=/tmp/modsecurity/tmp MODSEC_TMP_SAVE_UPLOADED_FILES=on MODSEC_UNICODE_MAPPING=20127 MODSEC_UPLOAD_DIR=/tmp/modsecurity/upload MODSEC_UPLOAD_FILE_MODE=0600 MODSEC_UPLOAD_KEEP_FILES=Off NGINX_ALWAYS_TLS_REDIRECT=off NGINX_ENVSUBST_OUTPUT_DIR=/usr/local/openresty/nginx/conf PORT=80 PROXY_SSL_CERT_KEY=/usr/local/openresty/nginx/conf/proxy.key PROXY_SSL_CERT=/usr/local/openresty/nginx/conf/proxy.crt PROXY_SSL_CIPHERS=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 PROXY_SSL=off PROXY_SSL_PROTOCOLS=TLSv1.2 TLSv1.3 PROXY_SSL_VERIFY_DEPTH=1 PROXY_SSL_VERIFY=off PROXY_TIMEOUT=60s REAL_IP_HEADER=X-REAL-IP REAL_IP_PROXY_HEADER=X-REAL-IP REAL_IP_RECURSIVE=on SERVER_NAME=localhost SERVER_TOKENS=off SET_REAL_IP_FROM=127.0.0.1 SSL_CERT_KEY=/usr/local/openresty/nginx/conf/server.key SSL_CERT=/usr/local/openresty/nginx/conf/server.crt SSL_CIPHERS=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 SSL_DH_BITS=2048 SSL_OCSP_STAPLING=on SSL_PORT=443 SSL_PREFER_CIPHERS=off SSL_PROTOCOLS=TLSv1.2 TLSv1.3 SSL_VERIFY_DEPTH=1 SSL_VERIFY=off WORKER_CONNECTIONS=1024 PARANOIA=1 ANOMALY_INBOUND=5 ANOMALY_OUTBOUND=4 BLOCKING_PARANOIA=1
                        
# 2024-12-09 13:42:48  0.00B 添加元数据标签
LABEL maintainer=Taavi Ansper <taaviansperr@gmail.com>
                        
# 2024-12-09 13:42:48  0.00B 定义构建参数
ARG LUA_MODULES=lua-resty-openidc lua-zlib luasocket
                        
# 2024-12-09 13:42:48  0.00B 定义构建参数
ARG MODSEC3_VERSION=3.0.13
                        
# 2024-06-28 20:34:55  0.00B 设置环境变量 LUA_CPATH
ENV LUA_CPATH=/usr/local/openresty/site/lualib/?.so;/usr/local/openresty/lualib/?.so;./?.so;/usr/local/lib/lua/5.1/?.so;/usr/local/openresty/luajit/lib/lua/5.1/?.so;/usr/local/lib/lua/5.1/loadall.so;/usr/local/openresty/luajit/lib/lua/5.1/?.so
                        
# 2024-06-28 20:34:55  0.00B 设置环境变量 LUA_PATH
ENV LUA_PATH=/usr/local/openresty/site/lualib/?.ljbc;/usr/local/openresty/site/lualib/?/init.ljbc;/usr/local/openresty/lualib/?.ljbc;/usr/local/openresty/lualib/?/init.ljbc;/usr/local/openresty/site/lualib/?.lua;/usr/local/openresty/site/lualib/?/init.lua;/usr/local/openresty/lualib/?.lua;/usr/local/openresty/lualib/?/init.lua;./?.lua;/usr/local/openresty/luajit/share/luajit-2.1/?.lua;/usr/local/share/lua/5.1/?.lua;/usr/local/share/lua/5.1/?/init.lua;/usr/local/openresty/luajit/share/lua/5.1/?.lua;/usr/local/openresty/luajit/share/lua/5.1/?/init.lua
                        
# 2024-06-28 20:34:55  272.45MB 执行命令并创建新的镜像层
RUN |3 RESTY_FAT_IMAGE_BASE=openresty/openresty RESTY_FAT_IMAGE_TAG=1.25.3.1-alpine-amd64 RESTY_LUAROCKS_VERSION=3.11.0 /bin/sh -c apk add --no-cache --virtual .build-deps         perl-dev     && apk add --no-cache         bash         build-base         curl         libintl         linux-headers         make         musl         outils-md5         perl         unzip         wget     && cd /tmp     && curl -fSL https://luarocks.github.io/luarocks/releases/luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz -o luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz     && tar xzf luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz     && cd luarocks-${RESTY_LUAROCKS_VERSION}     && ./configure         --prefix=/usr/local/openresty/luajit         --with-lua=/usr/local/openresty/luajit         --with-lua-include=/usr/local/openresty/luajit/include/luajit-2.1     && make build     && make install     && cd /tmp     && rm -rf luarocks-${RESTY_LUAROCKS_VERSION} luarocks-${RESTY_LUAROCKS_VERSION}.tar.gz     && apk add --no-cache --virtual .gettext gettext     && mv /usr/bin/envsubst /tmp/     && apk del .build-deps .gettext     && mv /tmp/envsubst /usr/local/bin/ # buildkit
                        
# 2024-06-28 20:34:55  0.00B 添加元数据标签
LABEL resty_luarocks_version=3.11.0
                        
# 2024-06-28 20:34:55  0.00B 添加元数据标签
LABEL resty_fat_image_tag=1.25.3.1-alpine-amd64
                        
# 2024-06-28 20:34:55  0.00B 添加元数据标签
LABEL resty_fat_image_base=openresty/openresty
                        
# 2024-06-28 20:34:55  0.00B 添加元数据标签
LABEL maintainer=Evan Wies <evan@neomantra.net>
                        
# 2024-06-28 20:34:55  0.00B 定义构建参数
ARG RESTY_LUAROCKS_VERSION=3.11.0
                        
# 2024-06-28 20:34:55  0.00B 定义构建参数
ARG RESTY_FAT_IMAGE_TAG=1.25.3.1-alpine-amd64
                        
# 2024-06-28 20:34:55  0.00B 定义构建参数
ARG RESTY_FAT_IMAGE_BASE=openresty/openresty
                        
# 2024-06-28 20:25:49  0.00B 设置停止容器时发送的系统调用信号
STOPSIGNAL SIGQUIT
                        
# 2024-06-28 20:25:49  0.00B 设置默认要执行的命令
CMD ["/usr/local/openresty/bin/openresty" "-g" "daemon off;"]
                        
# 2024-06-28 20:25:49  1.59KB 复制新文件或目录到容器中
COPY nginx.vh.default.conf /etc/nginx/conf.d/default.conf # buildkit
                        
# 2024-06-28 20:25:49  2.99KB 复制新文件或目录到容器中
COPY nginx.conf /usr/local/openresty/nginx/conf/nginx.conf # buildkit
                        
# 2024-06-28 20:25:49  0.00B 设置环境变量 PATH
ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/openresty/luajit/bin:/usr/local/openresty/nginx/sbin:/usr/local/openresty/bin
                        
# 2024-06-28 20:25:49  97.96MB 执行命令并创建新的镜像层
RUN |20 RESTY_IMAGE_BASE=alpine RESTY_IMAGE_TAG=3.20 RESTY_VERSION=1.25.3.1 RESTY_OPENSSL_VERSION=1.1.1w RESTY_OPENSSL_PATCH_VERSION=1.1.1f RESTY_OPENSSL_URL_BASE=https://www.openssl.org/source/old/1.1.1 RESTY_PCRE_VERSION=8.45 RESTY_PCRE_BUILD_OPTIONS=--enable-jit RESTY_PCRE_SHA256=4e6ce03e0336e8b4a3d6c2b70b1c5e18590a5673a98186da90d4f33c23defc09 RESTY_J=1 RESTY_CONFIG_OPTIONS=    --with-compat     --with-file-aio     --with-http_addition_module     --with-http_auth_request_module     --with-http_dav_module     --with-http_flv_module     --with-http_geoip_module=dynamic     --with-http_gunzip_module     --with-http_gzip_static_module     --with-http_image_filter_module=dynamic     --with-http_mp4_module     --with-http_random_index_module     --with-http_realip_module     --with-http_secure_link_module     --with-http_slice_module     --with-http_ssl_module     --with-http_stub_status_module     --with-http_sub_module     --with-http_v2_module     --with-http_v3_module     --with-http_xslt_module=dynamic     --with-ipv6     --with-mail     --with-mail_ssl_module     --with-md5-asm     --with-sha1-asm     --with-stream     --with-stream_ssl_module     --with-threads      RESTY_CONFIG_OPTIONS_MORE= RESTY_LUAJIT_OPTIONS=--with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT' RESTY_PCRE_OPTIONS=--with-pcre-jit RESTY_ADD_PACKAGE_BUILDDEPS= RESTY_ADD_PACKAGE_RUNDEPS= RESTY_EVAL_PRE_CONFIGURE= RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE= RESTY_EVAL_POST_MAKE= _RESTY_CONFIG_DEPS=--with-pcre     --with-cc-opt='-DNGX_LUA_ABORT_AT_PANIC -I/usr/local/openresty/pcre/include -I/usr/local/openresty/openssl/include'     --with-ld-opt='-L/usr/local/openresty/pcre/lib -L/usr/local/openresty/openssl/lib -Wl,-rpath,/usr/local/openresty/pcre/lib:/usr/local/openresty/openssl/lib'      /bin/sh -c apk add --no-cache --virtual .build-deps         build-base         coreutils         curl         gd-dev         geoip-dev         libxslt-dev         linux-headers         make         perl-dev         readline-dev         zlib-dev         ${RESTY_ADD_PACKAGE_BUILDDEPS}     && apk add --no-cache         gd         geoip         libgcc         libxslt         zlib         ${RESTY_ADD_PACKAGE_RUNDEPS}     && cd /tmp     && if [ -n "${RESTY_EVAL_PRE_CONFIGURE}" ]; then eval $(echo ${RESTY_EVAL_PRE_CONFIGURE}); fi     && cd /tmp     && echo curl -fSL "${RESTY_OPENSSL_URL_BASE}/openssl-${RESTY_OPENSSL_VERSION}.tar.gz" -o openssl-${RESTY_OPENSSL_VERSION}.tar.gz     && curl -fSL "${RESTY_OPENSSL_URL_BASE}/openssl-${RESTY_OPENSSL_VERSION}.tar.gz" -o openssl-${RESTY_OPENSSL_VERSION}.tar.gz     && tar xzf openssl-${RESTY_OPENSSL_VERSION}.tar.gz     && cd openssl-${RESTY_OPENSSL_VERSION}     && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.1" ] ; then         echo 'patching OpenSSL 1.1.1 for OpenResty'         && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ;     fi     && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.0" ] ; then         echo 'patching OpenSSL 1.1.0 for OpenResty'         && curl -s https://raw.githubusercontent.com/openresty/openresty/ed328977028c3ec3033bc25873ee360056e247cd/patches/openssl-1.1.0j-parallel_build_fix.patch | patch -p1         && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ;     fi     && ./config       no-threads shared zlib -g       enable-ssl3 enable-ssl3-method       --prefix=/usr/local/openresty/openssl       --libdir=lib       -Wl,-rpath,/usr/local/openresty/openssl/lib     && make -j${RESTY_J}     && make -j${RESTY_J} install_sw     && cd /tmp     && curl -fSL https://downloads.sourceforge.net/project/pcre/pcre/${RESTY_PCRE_VERSION}/pcre-${RESTY_PCRE_VERSION}.tar.gz -o pcre-${RESTY_PCRE_VERSION}.tar.gz     && echo "${RESTY_PCRE_SHA256}  pcre-${RESTY_PCRE_VERSION}.tar.gz" | shasum -a 256 --check     && tar xzf pcre-${RESTY_PCRE_VERSION}.tar.gz     && cd /tmp/pcre-${RESTY_PCRE_VERSION}     && ./configure         --prefix=/usr/local/openresty/pcre         --disable-cpp         --enable-utf         --enable-unicode-properties         ${RESTY_PCRE_BUILD_OPTIONS}     && make -j${RESTY_J}     && make -j${RESTY_J} install     && cd /tmp     && curl -fSL https://openresty.org/download/openresty-${RESTY_VERSION}.tar.gz -o openresty-${RESTY_VERSION}.tar.gz     && tar xzf openresty-${RESTY_VERSION}.tar.gz     && cd /tmp/openresty-${RESTY_VERSION}     && if [ -n "${RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE}" ]; then eval $(echo ${RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE}); fi     && eval ./configure -j${RESTY_J} ${_RESTY_CONFIG_DEPS} ${RESTY_CONFIG_OPTIONS} ${RESTY_CONFIG_OPTIONS_MORE} ${RESTY_LUAJIT_OPTIONS} ${RESTY_PCRE_OPTIONS}     && make -j${RESTY_J}     && make -j${RESTY_J} install     && cd /tmp     && if [ -n "${RESTY_EVAL_POST_MAKE}" ]; then eval $(echo ${RESTY_EVAL_POST_MAKE}); fi     && rm -rf         openssl-${RESTY_OPENSSL_VERSION}.tar.gz openssl-${RESTY_OPENSSL_VERSION}         pcre-${RESTY_PCRE_VERSION}.tar.gz pcre-${RESTY_PCRE_VERSION}         openresty-${RESTY_VERSION}.tar.gz openresty-${RESTY_VERSION}     && apk del .build-deps     && mkdir -p /var/run/openresty     && ln -sf /dev/stdout /usr/local/openresty/nginx/logs/access.log     && ln -sf /dev/stderr /usr/local/openresty/nginx/logs/error.log # buildkit
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_pcre_options=--with-pcre-jit
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_luajit_options=--with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT'
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_eval_post_make=
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_eval_post_download_pre_configure=
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_eval_pre_configure=
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_add_package_rundeps=
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_add_package_builddeps=
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_config_deps=--with-pcre     --with-cc-opt='-DNGX_LUA_ABORT_AT_PANIC -I/usr/local/openresty/pcre/include -I/usr/local/openresty/openssl/include'     --with-ld-opt='-L/usr/local/openresty/pcre/lib -L/usr/local/openresty/openssl/lib -Wl,-rpath,/usr/local/openresty/pcre/lib:/usr/local/openresty/openssl/lib'     
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_config_options_more=
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_config_options=    --with-compat     --with-file-aio     --with-http_addition_module     --with-http_auth_request_module     --with-http_dav_module     --with-http_flv_module     --with-http_geoip_module=dynamic     --with-http_gunzip_module     --with-http_gzip_static_module     --with-http_image_filter_module=dynamic     --with-http_mp4_module     --with-http_random_index_module     --with-http_realip_module     --with-http_secure_link_module     --with-http_slice_module     --with-http_ssl_module     --with-http_stub_status_module     --with-http_sub_module     --with-http_v2_module     --with-http_v3_module     --with-http_xslt_module=dynamic     --with-ipv6     --with-mail     --with-mail_ssl_module     --with-md5-asm     --with-sha1-asm     --with-stream     --with-stream_ssl_module     --with-threads     
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_pcre_sha256=4e6ce03e0336e8b4a3d6c2b70b1c5e18590a5673a98186da90d4f33c23defc09
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_pcre_build_options=--enable-jit
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_pcre_version=8.45
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_openssl_url_base=https://www.openssl.org/source/old/1.1.1
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_openssl_patch_version=1.1.1f
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_openssl_version=1.1.1w
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_version=1.25.3.1
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_image_tag=3.20
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL resty_image_base=alpine
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG _RESTY_CONFIG_DEPS=--with-pcre     --with-cc-opt='-DNGX_LUA_ABORT_AT_PANIC -I/usr/local/openresty/pcre/include -I/usr/local/openresty/openssl/include'     --with-ld-opt='-L/usr/local/openresty/pcre/lib -L/usr/local/openresty/openssl/lib -Wl,-rpath,/usr/local/openresty/pcre/lib:/usr/local/openresty/openssl/lib'     
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_EVAL_POST_MAKE=
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_EVAL_POST_DOWNLOAD_PRE_CONFIGURE=
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_EVAL_PRE_CONFIGURE=
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_ADD_PACKAGE_RUNDEPS=
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_ADD_PACKAGE_BUILDDEPS=
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_PCRE_OPTIONS=--with-pcre-jit
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_LUAJIT_OPTIONS=--with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT'
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_CONFIG_OPTIONS_MORE=
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_CONFIG_OPTIONS=    --with-compat     --with-file-aio     --with-http_addition_module     --with-http_auth_request_module     --with-http_dav_module     --with-http_flv_module     --with-http_geoip_module=dynamic     --with-http_gunzip_module     --with-http_gzip_static_module     --with-http_image_filter_module=dynamic     --with-http_mp4_module     --with-http_random_index_module     --with-http_realip_module     --with-http_secure_link_module     --with-http_slice_module     --with-http_ssl_module     --with-http_stub_status_module     --with-http_sub_module     --with-http_v2_module     --with-http_v3_module     --with-http_xslt_module=dynamic     --with-ipv6     --with-mail     --with-mail_ssl_module     --with-md5-asm     --with-sha1-asm     --with-stream     --with-stream_ssl_module     --with-threads     
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_J=1
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_PCRE_SHA256=4e6ce03e0336e8b4a3d6c2b70b1c5e18590a5673a98186da90d4f33c23defc09
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_PCRE_BUILD_OPTIONS=--enable-jit
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_PCRE_VERSION=8.45
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_OPENSSL_URL_BASE=https://www.openssl.org/source/old/1.1.1
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_OPENSSL_PATCH_VERSION=1.1.1f
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_OPENSSL_VERSION=1.1.1w
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_VERSION=1.25.3.1
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_IMAGE_TAG=3.20
                        
# 2024-06-28 20:25:49  0.00B 定义构建参数
ARG RESTY_IMAGE_BASE=alpine
                        
# 2024-06-28 20:25:49  0.00B 添加元数据标签
LABEL maintainer=Evan Wies <evan@neomantra.net>
                        
# 2024-06-21 04:16:58  0.00B 
/bin/sh -c #(nop)  CMD ["/bin/sh"]
                        
# 2024-06-21 04:16:57  7.80MB 
/bin/sh -c #(nop) ADD file:33ebe56b967747a97dcec01bc2559962bee8823686c9739d26be060381bbb3ca in / 
                        
                    

镜像信息

{
    "Id": "sha256:cedb90f3f283bca7e646c2caf9898a184e1735bf39996505b8bd7144ea5a0b0b",
    "RepoTags": [
        "owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512",
        "owasp/modsecurity-crs:openresty-alpine-fat",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/owasp/modsecurity-crs:openresty-alpine-fat"
    ],
    "RepoDigests": [
        "owasp/modsecurity-crs@sha256:5394badd5f41431b474a3a2c37caa103c5eb588fc7174592d6bb3d3f60a19c49",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/owasp/modsecurity-crs@sha256:46172b23897eab42ac158b2c06a4049be06e12c524a28a56450a647b241d930c"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2024-12-09T05:43:03.660832287Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "ExposedPorts": {
            "80/tcp": {}
        },
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/openresty/luajit/bin:/usr/local/openresty/nginx/sbin:/usr/local/openresty/bin",
            "LUA_PATH=/usr/local/openresty/site/lualib/?.ljbc;/usr/local/openresty/site/lualib/?/init.ljbc;/usr/local/openresty/lualib/?.ljbc;/usr/local/openresty/lualib/?/init.ljbc;/usr/local/openresty/site/lualib/?.lua;/usr/local/openresty/site/lualib/?/init.lua;/usr/local/openresty/lualib/?.lua;/usr/local/openresty/lualib/?/init.lua;./?.lua;/usr/local/openresty/luajit/share/luajit-2.1/?.lua;/usr/local/share/lua/5.1/?.lua;/usr/local/share/lua/5.1/?/init.lua;/usr/local/openresty/luajit/share/lua/5.1/?.lua;/usr/local/openresty/luajit/share/lua/5.1/?/init.lua",
            "LUA_CPATH=/usr/local/openresty/site/lualib/?.so;/usr/local/openresty/lualib/?.so;./?.so;/usr/local/lib/lua/5.1/?.so;/usr/local/openresty/luajit/lib/lua/5.1/?.so;/usr/local/lib/lua/5.1/loadall.so;/usr/local/openresty/luajit/lib/lua/5.1/?.so",
            "ACCESSLOG=/var/log/nginx/access.log",
            "BACKEND=http://localhost:80",
            "DNS_SERVER=",
            "ERRORLOG=/var/log/nginx/error.log",
            "KEEPALIVE_TIMEOUT=60s",
            "LD_LIBRARY_PATH=/usr/local/lib:/usr/local/openresty",
            "LOGLEVEL=warn",
            "METRICS_ALLOW_FROM=127.0.0.0/24",
            "METRICS_DENY_FROM=all",
            "METRICSLOG=/dev/null",
            "MODSEC_ARGUMENT_SEPARATOR=\u0026",
            "MODSEC_ARGUMENTS_LIMIT=1000",
            "MODSEC_AUDIT_ENGINE=RelevantOnly",
            "MODSEC_AUDIT_LOG=/dev/stdout",
            "MODSEC_AUDIT_LOG_FORMAT=JSON",
            "MODSEC_AUDIT_LOG_PARTS=ABIJDEFHZ",
            "MODSEC_AUDIT_LOG_RELEVANT_STATUS=^(?:5|4(?!04))",
            "MODSEC_AUDIT_LOG_TYPE=Serial",
            "MODSEC_COOKIE_FORMAT=0",
            "MODSEC_AUDIT_STORAGE_DIR=/var/log/modsecurity/audit/",
            "MODSEC_DATA_DIR=/tmp/modsecurity/data",
            "MODSEC_DEBUG_LOG=/dev/null",
            "MODSEC_DEBUG_LOGLEVEL=0",
            "MODSEC_DEFAULT_PHASE1_ACTION=phase:1,pass,log,tag:'${MODSEC_TAG}'",
            "MODSEC_DEFAULT_PHASE2_ACTION=phase:2,pass,log,tag:'${MODSEC_TAG}'",
            "MODSEC_DISABLE_BACKEND_COMPRESSION=Off",
            "MODSEC_PCRE_MATCH_LIMIT=100000",
            "MODSEC_PCRE_MATCH_LIMIT_RECURSION=100000",
            "MODSEC_REQ_BODY_ACCESS=on",
            "MODSEC_REQ_BODY_JSON_DEPTH_LIMIT=512",
            "MODSEC_REQ_BODY_LIMIT=13107200",
            "MODSEC_REQ_BODY_LIMIT_ACTION=Reject",
            "MODSEC_REQ_BODY_NOFILES_LIMIT=131072",
            "MODSEC_RESP_BODY_ACCESS=on",
            "MODSEC_RESP_BODY_LIMIT=1048576",
            "MODSEC_RESP_BODY_LIMIT_ACTION=ProcessPartial",
            "MODSEC_RESP_BODY_MIMETYPE=text/plain text/html text/xml",
            "MODSEC_RULE_ENGINE=on",
            "MODSEC_STATUS_ENGINE=Off",
            "MODSEC_TAG=modsecurity",
            "MODSEC_TMP_DIR=/tmp/modsecurity/tmp",
            "MODSEC_TMP_SAVE_UPLOADED_FILES=on",
            "MODSEC_UNICODE_MAPPING=20127",
            "MODSEC_UPLOAD_DIR=/tmp/modsecurity/upload",
            "MODSEC_UPLOAD_FILE_MODE=0600",
            "MODSEC_UPLOAD_KEEP_FILES=Off",
            "NGINX_ALWAYS_TLS_REDIRECT=off",
            "NGINX_ENVSUBST_OUTPUT_DIR=/usr/local/openresty/nginx/conf",
            "PORT=80",
            "PROXY_SSL_CERT_KEY=/usr/local/openresty/nginx/conf/proxy.key",
            "PROXY_SSL_CERT=/usr/local/openresty/nginx/conf/proxy.crt",
            "PROXY_SSL_CIPHERS=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384",
            "PROXY_SSL=off",
            "PROXY_SSL_PROTOCOLS=TLSv1.2 TLSv1.3",
            "PROXY_SSL_VERIFY_DEPTH=1",
            "PROXY_SSL_VERIFY=off",
            "PROXY_TIMEOUT=60s",
            "REAL_IP_HEADER=X-REAL-IP",
            "REAL_IP_PROXY_HEADER=X-REAL-IP",
            "REAL_IP_RECURSIVE=on",
            "SERVER_NAME=localhost",
            "SERVER_TOKENS=off",
            "SET_REAL_IP_FROM=127.0.0.1",
            "SSL_CERT_KEY=/usr/local/openresty/nginx/conf/server.key",
            "SSL_CERT=/usr/local/openresty/nginx/conf/server.crt",
            "SSL_CIPHERS=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384",
            "SSL_DH_BITS=2048",
            "SSL_OCSP_STAPLING=on",
            "SSL_PORT=443",
            "SSL_PREFER_CIPHERS=off",
            "SSL_PROTOCOLS=TLSv1.2 TLSv1.3",
            "SSL_VERIFY_DEPTH=1",
            "SSL_VERIFY=off",
            "WORKER_CONNECTIONS=1024",
            "PARANOIA=1",
            "ANOMALY_INBOUND=5",
            "ANOMALY_OUTBOUND=4",
            "BLOCKING_PARANOIA=1"
        ],
        "Cmd": [
            "/usr/local/openresty/bin/openresty",
            "-g",
            "daemon off;"
        ],
        "Healthcheck": {
            "Test": [
                "CMD-SHELL",
                "/usr/local/bin/healthcheck"
            ]
        },
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "",
        "Entrypoint": [
            "/docker-entrypoint.sh"
        ],
        "OnBuild": null,
        "Labels": {
            "maintainer": "Taavi Ansper \u003ctaaviansperr@gmail.com\u003e",
            "org.opencontainers.image.source": "https://github.com/coreruleset/modsecurity-crs-docker",
            "resty_add_package_builddeps": "",
            "resty_add_package_rundeps": "",
            "resty_config_deps": "--with-pcre     --with-cc-opt='-DNGX_LUA_ABORT_AT_PANIC -I/usr/local/openresty/pcre/include -I/usr/local/openresty/openssl/include'     --with-ld-opt='-L/usr/local/openresty/pcre/lib -L/usr/local/openresty/openssl/lib -Wl,-rpath,/usr/local/openresty/pcre/lib:/usr/local/openresty/openssl/lib'     ",
            "resty_config_options": "    --with-compat     --with-file-aio     --with-http_addition_module     --with-http_auth_request_module     --with-http_dav_module     --with-http_flv_module     --with-http_geoip_module=dynamic     --with-http_gunzip_module     --with-http_gzip_static_module     --with-http_image_filter_module=dynamic     --with-http_mp4_module     --with-http_random_index_module     --with-http_realip_module     --with-http_secure_link_module     --with-http_slice_module     --with-http_ssl_module     --with-http_stub_status_module     --with-http_sub_module     --with-http_v2_module     --with-http_v3_module     --with-http_xslt_module=dynamic     --with-ipv6     --with-mail     --with-mail_ssl_module     --with-md5-asm     --with-sha1-asm     --with-stream     --with-stream_ssl_module     --with-threads     ",
            "resty_config_options_more": "",
            "resty_eval_post_download_pre_configure": "",
            "resty_eval_post_make": "",
            "resty_eval_pre_configure": "",
            "resty_fat_image_base": "openresty/openresty",
            "resty_fat_image_tag": "1.25.3.1-alpine-amd64",
            "resty_image_base": "alpine",
            "resty_image_tag": "3.20",
            "resty_luajit_options": "--with-luajit-xcflags='-DLUAJIT_NUMMODE=2 -DLUAJIT_ENABLE_LUA52COMPAT'",
            "resty_luarocks_version": "3.11.0",
            "resty_openssl_patch_version": "1.1.1f",
            "resty_openssl_url_base": "https://www.openssl.org/source/old/1.1.1",
            "resty_openssl_version": "1.1.1w",
            "resty_pcre_build_options": "--enable-jit",
            "resty_pcre_options": "--with-pcre-jit",
            "resty_pcre_sha256": "4e6ce03e0336e8b4a3d6c2b70b1c5e18590a5673a98186da90d4f33c23defc09",
            "resty_pcre_version": "8.45",
            "resty_version": "1.25.3.1"
        },
        "StopSignal": "SIGQUIT"
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 425810923,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/e4b22d58fd501df9333205ae7eaaddfc1c984be7e78d2047ad691241f3d0b803/diff:/var/lib/docker/overlay2/47c249b7e1122a54ba435652c9092e206231f3f319fd8eb9f7aa33ba73fb8a79/diff:/var/lib/docker/overlay2/fa4d0b1e7e1a7838e6b920f6fdc87cd89166cda9571c66f98f111cb122ff14ca/diff:/var/lib/docker/overlay2/4c0c82b82624a95eeccd92e50f007944ae4970f5c196f67eb25673ae820fc1c4/diff:/var/lib/docker/overlay2/44acfa2e4c92f029774dac979fd742e0bee1b2ebf4d77f6c2b7efb018e1cd092/diff:/var/lib/docker/overlay2/4f8fb4c337b911497d5f099627e0e1ad18d40dbf982ce203b6cd883badb4ebf3/diff:/var/lib/docker/overlay2/05167a0238d1cf5ddced8498fb1a018444431044b2e1414bc7f1024dd28bcdc2/diff:/var/lib/docker/overlay2/10dec2082deda0500045f6b36f91f74d4d1fba2b2fa22777a2d84c4ac3b3b806/diff:/var/lib/docker/overlay2/d105aeaa18a2798fcda20218fc448b5d158d6a81a5a6f1d5cf1187a1fa5c8002/diff:/var/lib/docker/overlay2/9efd931dc4bb127a241cbed56c03612c0c5d0b07505fa56b22dc4d69963fe105/diff:/var/lib/docker/overlay2/0d9bd335150c04ad901adfeb00cc376be28b07bc02117afc04eaa0181c6d63d5/diff:/var/lib/docker/overlay2/d2e4ec86d3812cad1b7924f495de238498249841dd1a74212ac3ef6af4dd0222/diff:/var/lib/docker/overlay2/d81d144cb31335d4cfa1226df298c095fd1cba1a5929e0e178494b3b98257c83/diff:/var/lib/docker/overlay2/a3876e6f842c823321e4935be086358a769950793e7b5f2f351024223a0d64a2/diff:/var/lib/docker/overlay2/047d6fe7325bf20e27154b93f1cd270c8260d79e1518a3ff1c6e573bdc4f3c1f/diff:/var/lib/docker/overlay2/837bf99bed819f9584c7ada581a1624c4a249d140a209c18f8f312b60526e700/diff:/var/lib/docker/overlay2/d7fe8f041cecfac9f43e49282834328e4f22d32f23c61b5f415bc28d601cb664/diff:/var/lib/docker/overlay2/8537983184bb08569226fa3ec6b902955705c451990b1bb11403228d67ab7bfc/diff:/var/lib/docker/overlay2/d0ec5b6cb4ac8df944e701eba43e0a9481399439c3e415f3b99cbed2e111a413/diff:/var/lib/docker/overlay2/8f39b274adb197003b562ccf92a107e56abcad3a46aec7d7a2949796617434bb/diff:/var/lib/docker/overlay2/d51291a27e59a7a546aba663522313980f58f507692cc639788856a3a0905cfb/diff:/var/lib/docker/overlay2/fe42b69fac812ecb965854f3c34900ace6abf263bc7d7c9cdbe1b75b0476b5b0/diff",
            "MergedDir": "/var/lib/docker/overlay2/d0651b88a4cc36b80ee92ca3eea256c22d07f767b9026a11938fbcc08f8e9093/merged",
            "UpperDir": "/var/lib/docker/overlay2/d0651b88a4cc36b80ee92ca3eea256c22d07f767b9026a11938fbcc08f8e9093/diff",
            "WorkDir": "/var/lib/docker/overlay2/d0651b88a4cc36b80ee92ca3eea256c22d07f767b9026a11938fbcc08f8e9093/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:94e5f06ff8e3d4441dc3cd8b090ff38dc911bfa8ebdb0dc28395bc98f82f983f",
            "sha256:26c2ab2f839b17440f68acec0e31927de572f98c911cb749971021c52727d08b",
            "sha256:d175d866f27e285ca7be38cfa6dc0ed9a7729e0d566b79308b031ed1868186ba",
            "sha256:9d441c09f504f46e15f72b02488fe8432eaa27a297c186c00af646caadebdc3d",
            "sha256:e54372abb134eb2a64dfe9cff87cf22386f85397c2b65b670768482574380474",
            "sha256:953e3a000ec72e3ec259149b3d305dd23cfb25ef4c6458ded410b18aa8462af6",
            "sha256:a95a0a8d882c3386a914a2b3d73cfccbc2dcad018b5bab89ff237530837b26e7",
            "sha256:603b759328380d8ee0a5b623fe19c2f946103e4c4742a5fa35dd1dadbcbcc8df",
            "sha256:09d8577b7080a0ff98c92f195920b8c26cd0f8c39c007db74cd4262627b206cd",
            "sha256:4d97bd8fd17214f8b68804e6109693f39e648734f4366ddfba6870327b655607",
            "sha256:4f330e0c25ffe181d2e13be31b311b09f44eea8b7d63b40aaf76488f7e873e87",
            "sha256:236f8d04cd1741773a794d74300f307fa0614002707f2b3abd9068f3bda87d74",
            "sha256:9f9282b74bb86ee1de4d88b9014e6b8119f7a533e7094f94f128e98444522fbe",
            "sha256:2351f41cce299b3a5cf269cd8ed1861889a5288a3cb14bcfc0541581a54f2443",
            "sha256:36f2e8b21c05933aec557f99507b6c6b3964dfc40e277beec0d0e18f805aae40",
            "sha256:9f19dacdbb46481450ad64b78819680a1aa937c204079f5937040e3f3c9eecee",
            "sha256:a2b9ea622fc960513f8732e04053bd4f07e3d845dcf6fba788997a6a054d335a",
            "sha256:4d67b62653e35a5a76fdad69f0e34203a8e5d643f236edb35c0689e9fac78225",
            "sha256:a6570130f759f7ca6db1f3fdea7e4e1ef2e07aab52c0a375ece236842f22fd99",
            "sha256:d08f82b4f3ac68368f9aeb67d6e7300d99d4940b6051b1880484cad69f7709b0",
            "sha256:fc539da702b7118255c407e4a45d471b2fae44f1d2ed2002c8b7b09975e7bf8e",
            "sha256:b0d114d976d22e9ff0a83ca081af8452fe3716a7fc8efedaba3d7e95f673a9f8",
            "sha256:832b871e0590de42cd519790cab828c9eec3a2a13f6f9613e777d2d828e95b23"
        ]
    },
    "Metadata": {
        "LastTagTime": "2024-12-10T10:38:50.409304961+08:00"
    }
}

更多版本

docker.io/owasp/modsecurity-crs:nginx

linux/amd64 docker.io275.82MB2024-11-14 14:55
54

docker.io/owasp/modsecurity-crs:openresty-alpine-fat

linux/amd64 docker.io425.81MB2024-12-09 18:07
26

docker.io/owasp/modsecurity-crs:4.9.0-openresty-alpine-fat-202412090512

linux/amd64 docker.io425.81MB2024-12-10 10:38
30

docker.io/owasp/modsecurity-crs:3.3.5-openresty-alpine-fat-202402140602

linux/amd64 docker.io410.69MB2024-12-10 11:30
26