ghcr.io/idaholab/malcolm/arkime:26.06.0 linux/amd64

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/arkime:26.06.0
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/arkime:26.06.0  ghcr.io/idaholab/malcolm/arkime:26.06.0

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/arkime:26.06.0
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/arkime:26.06.0  ghcr.io/idaholab/malcolm/arkime:26.06.0

Shell快速替换命令

sed -i 's#ghcr.io/idaholab/malcolm/arkime:26.06.0#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/arkime:26.06.0#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/arkime:26.06.0 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/arkime:26.06.0  ghcr.io/idaholab/malcolm/arkime:26.06.0'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/arkime:26.06.0 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/arkime:26.06.0  ghcr.io/idaholab/malcolm/arkime:26.06.0'

镜像构建历史

# 2026-05-29 05:53:57  0.00B 添加元数据标签
LABEL org.opencontainers.image.revision=ffe2817
                        
# 2026-05-29 05:53:57  0.00B 添加元数据标签
LABEL org.opencontainers.image.version=26.06.0
                        
# 2026-05-29 05:53:57  0.00B 添加元数据标签
LABEL org.opencontainers.image.created=2026-05-28T21:53:07Z
                        
# 2026-05-29 05:53:57  0.00B 设置环境变量 VCS_REVISION
ENV VCS_REVISION=ffe2817
                        
# 2026-05-29 05:53:57  0.00B 设置环境变量 MALCOLM_VERSION
ENV MALCOLM_VERSION=26.06.0
                        
# 2026-05-29 05:53:57  0.00B 设置环境变量 BUILD_DATE
ENV BUILD_DATE=2026-05-28T21:53:07Z
                        
# 2026-05-29 05:53:57  0.00B 定义构建参数
ARG VCS_REVISION=ffe2817
                        
# 2026-05-29 05:53:57  0.00B 定义构建参数
ARG MALCOLM_VERSION=26.06.0
                        
# 2026-05-29 05:53:57  0.00B 定义构建参数
ARG BUILD_DATE=2026-05-28T21:53:07Z
                        
# 2026-05-29 05:53:57  0.00B 设置默认要执行的命令
CMD ["/usr/local/bin/supervisord" "-c" "/etc/supervisord.conf" "-n"]
                        
# 2026-05-29 05:53:57  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/usr/bin/tini" "--" "/usr/local/bin/docker-uid-gid-setup.sh" "/usr/local/bin/service_check_passthrough.sh" "-s" "arkime" "/usr/local/bin/docker_entrypoint.sh"]
                        
# 2026-05-29 05:53:57  0.00B 设置工作目录为/opt/arkime
WORKDIR /opt/arkime
                        
# 2026-05-29 05:53:57  0.00B 声明容器运行时监听的端口
EXPOSE [8000/tcp 8005/tcp 8081/tcp]
                        
# 2026-05-29 05:53:57  0.00B 设置环境变量 PATH
ENV PATH=/opt:/opt/arkime/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-05-29 05:53:57  99.68MB 执行命令并创建新的镜像层
RUN |27 DEFAULT_UID=1000 DEFAULT_GID=1000 MALCOLM_USERNAME=admin ARKIME_ECS_PROVIDER=arkime ARKIME_ECS_DATASET=session ARKIME_AUTO_ANALYZE_PCAP_FILES=false ARKIME_AUTO_ANALYZE_PCAP_THREADS=1 ARKIME_PACKET_THREADS=2 ARKIME_TPACKETV3_NUM_THREADS=2 WISE=on VIEWER=on ARKIME_SSL=true ARKIME_VIEWER_PORT=8005 MANAGE_PCAP_FILES=false ARKIME_PCAP_LIBPCAP=false ARKIME_PCAP_PROCESSOR=true ARKIME_LIVE_CAPTURE=false ARKIME_ROTATED_PCAP=true ARKIME_COMPRESSION_TYPE=none ARKIME_COMPRESSION_LEVEL=0 AUTO_TAG=true PCAP_PIPELINE_VERBOSITY= PCAP_MONITOR_HOST=pcap-monitor PCAP_NODE_NAME=malcolm PCAP_PROCESSED_DIRECTORY=/data/pcap/processed MAXMIND_GEOIP_DB_LICENSE_KEY=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 MAXMIND_GEOIP_DB_ALTERNATE_DOWNLOAD_URL=https://malcolm.fyi/mmdb /bin/sh -c groupadd --gid $DEFAULT_GID $PGROUP &&     useradd -M --uid $DEFAULT_UID --gid $DEFAULT_GID --home $ARKIME_DIR $PUSER &&       usermod -a -G tty $PUSER &&     chmod 755 /usr/local/bin/*.sh &&     ln -sfr /usr/local/bin/pcap_processor.py /usr/local/bin/pcap_arkime_processor.py &&     ln -sfr /usr/local/bin/arkime_update_geo.sh $ARKIME_DIR/bin/arkime_update_geo.sh &&     mv $ARKIME_DIR/etc/config.ini $ARKIME_DIR/etc/config.orig.ini &&     cp $ARKIME_DIR/bin/capture $ARKIME_DIR/bin/capture-offline &&     chown root:${PGROUP} $ARKIME_DIR/bin/capture &&       setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip CAP_IPC_LOCK+eip' $ARKIME_DIR/bin/capture &&     chown root:${PGROUP} /sbin/ethtool &&       setcap 'CAP_NET_RAW+eip CAP_NET_ADMIN+eip' /sbin/ethtool &&     mkdir -p /var/run/arkime $ARKIME_DIR/logs $ARKIME_DIR/parsers $ARKIME_DIR/lua &&     chown -R $PUSER:$PGROUP $ARKIME_DIR/etc $ARKIME_DIR/parsers $ARKIME_DIR/lua $ARKIME_DIR/rules $ARKIME_DIR/logs /var/run/arkime # buildkit
                        
# 2026-05-29 05:53:57  90.59MB 执行命令并创建新的镜像层
RUN |27 DEFAULT_UID=1000 DEFAULT_GID=1000 MALCOLM_USERNAME=admin ARKIME_ECS_PROVIDER=arkime ARKIME_ECS_DATASET=session ARKIME_AUTO_ANALYZE_PCAP_FILES=false ARKIME_AUTO_ANALYZE_PCAP_THREADS=1 ARKIME_PACKET_THREADS=2 ARKIME_TPACKETV3_NUM_THREADS=2 WISE=on VIEWER=on ARKIME_SSL=true ARKIME_VIEWER_PORT=8005 MANAGE_PCAP_FILES=false ARKIME_PCAP_LIBPCAP=false ARKIME_PCAP_PROCESSOR=true ARKIME_LIVE_CAPTURE=false ARKIME_ROTATED_PCAP=true ARKIME_COMPRESSION_TYPE=none ARKIME_COMPRESSION_LEVEL=0 AUTO_TAG=true PCAP_PIPELINE_VERBOSITY= PCAP_MONITOR_HOST=pcap-monitor PCAP_NODE_NAME=malcolm PCAP_PROCESSED_DIRECTORY=/data/pcap/processed MAXMIND_GEOIP_DB_LICENSE_KEY=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 MAXMIND_GEOIP_DB_ALTERNATE_DOWNLOAD_URL=https://malcolm.fyi/mmdb /bin/sh -c ( /usr/local/bin/maxmind-mmdb-download.sh -o $ARKIME_DIR/etc || true ) &&     curl -s -S -L -o $ARKIME_DIR/etc/ipv4-address-space.csv "https://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.csv" &&     curl -s -S -L -o $ARKIME_DIR/etc/oui.txt "https://www.wireshark.org/download/automated/data/manuf" # buildkit
                        
# 2026-05-29 05:53:55  192.80KB 复制文件或目录到容器中
ADD --chmod=644 arkime/wise/source.*.js /opt/arkime/wiseService/ # buildkit
                        
# 2026-05-29 05:53:55  550.00B 复制文件或目录到容器中
ADD --chmod=644 arkime/rules/*.yml /opt/arkime/rules/ # buildkit
                        
# 2026-05-29 05:53:55  845.00KB 复制文件或目录到容器中
ADD arkime/etc /opt/arkime/etc/ # buildkit
                        
# 2026-05-29 05:53:55  37.73KB 复制文件或目录到容器中
ADD arkime/scripts /usr/local/bin/ # buildkit
                        
# 2026-05-29 05:53:55  625.00B 复制文件或目录到容器中
ADD --chmod=755 container-health-scripts/arkime.sh /usr/local/bin/container_health.sh # buildkit
                        
# 2026-05-29 05:53:55  2.57KB 复制文件或目录到容器中
ADD --chmod=644 arkime/supervisord.conf /etc/supervisord.conf # buildkit
                        
# 2026-05-29 05:53:55  14.62KB 复制文件或目录到容器中
ADD --chmod=644 shared/bin/watch_common.py /usr/local/bin/ # buildkit
                        
# 2026-05-29 05:53:55  6.67KB 复制文件或目录到容器中
ADD --chmod=644 scripts/malcolm_constants.py /usr/local/bin/ # buildkit
                        
# 2026-05-29 05:53:55  52.21KB 复制文件或目录到容器中
ADD --chmod=644 scripts/malcolm_utils.py /usr/local/bin/ # buildkit
                        
# 2026-05-29 05:53:55  1.03KB 复制文件或目录到容器中
ADD --chmod=644 shared/bin/pcap_utils.py /usr/local/bin/ # buildkit
                        
# 2026-05-29 05:53:55  38.21KB 复制文件或目录到容器中
ADD --chmod=755 shared/bin/pcap_processor.py /usr/local/bin/ # buildkit
                        
# 2026-05-29 05:53:55  5.12KB 复制文件或目录到容器中
ADD --chmod=755 shared/bin/opensearch_status.sh /usr/local/bin/ # buildkit
                        
# 2026-05-29 05:53:55  530.00B 复制文件或目录到容器中
ADD --chmod=755 shared/bin/nic-capture-setup.sh /usr/local/bin/ # buildkit
                        
# 2026-05-29 05:53:55  11.45KB 复制文件或目录到容器中
ADD --chmod=755 shared/bin/self_signed_key_gen.sh /usr/local/bin/ # buildkit
                        
# 2026-05-29 05:53:55  7.14KB 复制文件或目录到容器中
ADD --chmod=755 shared/bin/service_check_passthrough.sh /usr/local/bin/ # buildkit
                        
# 2026-05-29 05:53:55  10.93KB 复制文件或目录到容器中
ADD --chmod=755 shared/bin/docker-uid-gid-setup.sh /usr/local/bin/ # buildkit
                        
# 2026-05-29 05:53:55  2.46MB 复制新文件或目录到容器中
COPY --chmod=755 /goStatic /usr/bin/goStatic # buildkit
                        
# 2026-05-29 05:53:54  784.56MB 执行命令并创建新的镜像层
RUN |27 DEFAULT_UID=1000 DEFAULT_GID=1000 MALCOLM_USERNAME=admin ARKIME_ECS_PROVIDER=arkime ARKIME_ECS_DATASET=session ARKIME_AUTO_ANALYZE_PCAP_FILES=false ARKIME_AUTO_ANALYZE_PCAP_THREADS=1 ARKIME_PACKET_THREADS=2 ARKIME_TPACKETV3_NUM_THREADS=2 WISE=on VIEWER=on ARKIME_SSL=true ARKIME_VIEWER_PORT=8005 MANAGE_PCAP_FILES=false ARKIME_PCAP_LIBPCAP=false ARKIME_PCAP_PROCESSOR=true ARKIME_LIVE_CAPTURE=false ARKIME_ROTATED_PCAP=true ARKIME_COMPRESSION_TYPE=none ARKIME_COMPRESSION_LEVEL=0 AUTO_TAG=true PCAP_PIPELINE_VERBOSITY= PCAP_MONITOR_HOST=pcap-monitor PCAP_NODE_NAME=malcolm PCAP_PROCESSED_DIRECTORY=/data/pcap/processed MAXMIND_GEOIP_DB_LICENSE_KEY=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 MAXMIND_GEOIP_DB_ALTERNATE_DOWNLOAD_URL=https://malcolm.fyi/mmdb /bin/sh -c export DEBARCH=$(dpkg --print-architecture) &&     sed -i "s/main$/main contrib non-free/g" /etc/apt/sources.list.d/debian.sources &&     apt-get -q update &&     apt-get install -q -y --no-install-recommends       bc       bzip2       curl       ethtool       file       git       gzip       inotify-tools       jq       libcap2-bin       libglib2.0-0       libjson-perl       libkrb5-3       liblua5.4-0       libmaxminddb0       libpcap0.8       libpcre2-8-0       libpython3.13       librdkafka1       libssl3       libtool       libwww-perl       libyaml-0-2       libyaml-dev       libyara10       libzmq5       lua5.4       lzma       mmdb-bin       p7zip-full       procps       psmisc       python3       python3-pip       python3-setuptools       python3-wheel       rsync       tar       tini       unrar       unzip       vim-tiny       wget       xz-utils       zlib1g &&     cd /tmp &&       curl -fsSL -o ./arkime.deb "$(echo "${ARKIME_DEB_URL}" | sed "s/XXX/${DEBARCH}/g")" &&       dpkg -i /tmp/arkime.deb &&       rm -f ${ARKIME_DIR}/etc/*.systemd.service &&     mkdir -p "${ARKIME_DIR}"/plugins "${ARKIME_DIR}"/rules &&       curl -fsSL -o "${ARKIME_DIR}/plugins/ja4plus.${DEBARCH}.so" "$(echo "${ARKIME_JA4_SO_URL}" | sed "s/XXX/${DEBARCH}/g")" &&       chmod 755 "${ARKIME_DIR}/plugins/ja4plus.${DEBARCH}.so" &&     python3 -m pip install --break-system-packages --no-compile --no-cache-dir -r /usr/local/src/requirements.txt &&     ln -sfr $ARKIME_DIR/bin/npm /usr/local/bin/npm &&       ln -sfr $ARKIME_DIR/bin/node /usr/local/bin/node &&       ln -sfr $ARKIME_DIR/bin/npx /usr/local/bin/npx &&     apt-get -q -y --purge remove git gcc gcc-12 cpp cpp-12 &&       apt-get -q -y autoremove &&       apt-get clean &&       rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* # buildkit
                        
# 2026-05-29 05:53:19  71.00B 复制文件或目录到容器中
ADD --chmod=644 arkime/requirements.txt /usr/local/src/ # buildkit
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 PCAP_PROCESSED_DIRECTORY
ENV PCAP_PROCESSED_DIRECTORY=/data/pcap/processed
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 PCAP_NODE_NAME
ENV PCAP_NODE_NAME=malcolm
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 PCAP_MONITOR_HOST
ENV PCAP_MONITOR_HOST=pcap-monitor
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 PCAP_PIPELINE_VERBOSITY
ENV PCAP_PIPELINE_VERBOSITY=
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 AUTO_TAG
ENV AUTO_TAG=true
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_PCAP_LIBPCAP
ENV ARKIME_PCAP_LIBPCAP=false
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 MANAGE_PCAP_FILES
ENV MANAGE_PCAP_FILES=false
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_VIEWER_PORT
ENV ARKIME_VIEWER_PORT=8005
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_SSL
ENV ARKIME_SSL=true
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 VIEWER
ENV VIEWER=on
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 WISE
ENV WISE=on
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_ROTATED_PCAP
ENV ARKIME_ROTATED_PCAP=true
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_COMPRESSION_LEVEL
ENV ARKIME_COMPRESSION_LEVEL=0
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_COMPRESSION_TYPE
ENV ARKIME_COMPRESSION_TYPE=none
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_LIVE_CAPTURE
ENV ARKIME_LIVE_CAPTURE=false
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_PCAP_PROCESSOR
ENV ARKIME_PCAP_PROCESSOR=true
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_TPACKETV3_NUM_THREADS
ENV ARKIME_TPACKETV3_NUM_THREADS=2
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_PACKET_THREADS
ENV ARKIME_PACKET_THREADS=2
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_AUTO_ANALYZE_PCAP_THREADS
ENV ARKIME_AUTO_ANALYZE_PCAP_THREADS=1
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_AUTO_ANALYZE_PCAP_FILES
ENV ARKIME_AUTO_ANALYZE_PCAP_FILES=false
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_DIR
ENV ARKIME_DIR=/opt/arkime
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_ECS_DATASET
ENV ARKIME_ECS_DATASET=session
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_ECS_PROVIDER
ENV ARKIME_ECS_PROVIDER=arkime
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_PASSWORD
ENV ARKIME_PASSWORD=ignored
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 MALCOLM_USERNAME
ENV MALCOLM_USERNAME=admin
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG MAXMIND_GEOIP_DB_ALTERNATE_DOWNLOAD_URL=https://malcolm.fyi/mmdb
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG MAXMIND_GEOIP_DB_LICENSE_KEY=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
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG PCAP_PROCESSED_DIRECTORY=/data/pcap/processed
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG PCAP_NODE_NAME=malcolm
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG PCAP_MONITOR_HOST=pcap-monitor
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG PCAP_PIPELINE_VERBOSITY=
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG AUTO_TAG=true
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG ARKIME_COMPRESSION_LEVEL=0
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG ARKIME_COMPRESSION_TYPE=none
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG ARKIME_ROTATED_PCAP=true
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG ARKIME_LIVE_CAPTURE=false
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG ARKIME_PCAP_PROCESSOR=true
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG ARKIME_PCAP_LIBPCAP=false
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG MANAGE_PCAP_FILES=false
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG ARKIME_VIEWER_PORT=8005
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG ARKIME_SSL=true
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG VIEWER=on
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG WISE=on
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG ARKIME_TPACKETV3_NUM_THREADS=2
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG ARKIME_PACKET_THREADS=2
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG ARKIME_AUTO_ANALYZE_PCAP_THREADS=1
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG ARKIME_AUTO_ANALYZE_PCAP_FILES=false
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG ARKIME_ECS_DATASET=session
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG ARKIME_ECS_PROVIDER=arkime
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG MALCOLM_USERNAME=admin
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_INET
ENV ARKIME_INET=yes
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_LOCALELASTICSEARCH
ENV ARKIME_LOCALELASTICSEARCH=no
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_JA4_SO_URL
ENV ARKIME_JA4_SO_URL=https://github.com/arkime/arkime/releases/download/v6.4.0/ja4plus.XXX.so
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_DEB_URL
ENV ARKIME_DEB_URL=https://github.com/arkime/arkime/releases/download/v6.4.0/arkime_6.4.0-1.debian13_XXX.deb
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_VERSION
ENV ARKIME_VERSION=6.4.0
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 ARKIME_DIR
ENV ARKIME_DIR=/opt/arkime
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 PYTHONUNBUFFERED
ENV PYTHONUNBUFFERED=1
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 PYTHONDONTWRITEBYTECODE
ENV PYTHONDONTWRITEBYTECODE=1
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 TERM
ENV TERM=xterm
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 DEBIAN_FRONTEND
ENV DEBIAN_FRONTEND=noninteractive
                        
# 2026-05-29 05:53:19  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 PUSER_RLIMIT_UNLOCK
ENV PUSER_RLIMIT_UNLOCK=true
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 PUSER_PRIV_DROP
ENV PUSER_PRIV_DROP=false
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 PGROUP
ENV PGROUP=arkime
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 PUSER
ENV PUSER=arkime
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 DEFAULT_GID
ENV DEFAULT_GID=1000
                        
# 2026-05-29 05:53:19  0.00B 设置环境变量 DEFAULT_UID
ENV DEFAULT_UID=1000
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG DEFAULT_GID=1000
                        
# 2026-05-29 05:53:19  0.00B 定义构建参数
ARG DEFAULT_UID=1000
                        
# 2026-05-29 05:53:19  0.00B 添加元数据标签
LABEL org.opencontainers.image.description=Malcolm container providing Arkime
                        
# 2026-05-29 05:53:19  0.00B 添加元数据标签
LABEL org.opencontainers.image.title=ghcr.io/idaholab/malcolm/arkime
                        
# 2026-05-29 05:53:19  0.00B 添加元数据标签
LABEL org.opencontainers.image.vendor=Idaho National Laboratory
                        
# 2026-05-29 05:53:19  0.00B 添加元数据标签
LABEL org.opencontainers.image.source=https://github.com/idaholab/Malcolm
                        
# 2026-05-29 05:53:19  0.00B 添加元数据标签
LABEL org.opencontainers.image.documentation=https://github.com/idaholab/Malcolm/blob/main/README.md
                        
# 2026-05-29 05:53:19  0.00B 添加元数据标签
LABEL org.opencontainers.image.url=https://github.com/idaholab/Malcolm
                        
# 2026-05-29 05:53:19  0.00B 添加元数据标签
LABEL org.opencontainers.image.authors=malcolm@inl.gov
                        
# 2026-05-29 05:53:19  0.00B 添加元数据标签
LABEL maintainer=malcolm@inl.gov
                        
# 2026-05-18 08:00:00  78.62MB 
# debian.sh --arch 'amd64' out/ 'trixie' '@1779062400'
                        
                    

镜像信息

{
    "Id": "sha256:45cf64909f63ddb88d0fd33e9ac4d3b768c3eca93dd737f6dee63ba56f881219",
    "RepoTags": [
        "ghcr.io/idaholab/malcolm/arkime:26.06.0",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/arkime:26.06.0"
    ],
    "RepoDigests": [
        "ghcr.io/idaholab/malcolm/arkime@sha256:34a68a9a8699832af42575c83cf9ff1bf8b01b2e72eeb1dad519081e79f59117",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/idaholab/malcolm/arkime@sha256:9e5341096c682681dcd55f015099856ece829570c0be80bb55c5849f5e67ca3d"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-05-28T21:53:57.890070121Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "root",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "ExposedPorts": {
            "8000/tcp": {},
            "8005/tcp": {},
            "8081/tcp": {}
        },
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/opt:/opt/arkime/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "DEFAULT_UID=1000",
            "DEFAULT_GID=1000",
            "PUSER=arkime",
            "PGROUP=arkime",
            "PUSER_PRIV_DROP=false",
            "PUSER_RLIMIT_UNLOCK=true",
            "DEBIAN_FRONTEND=noninteractive",
            "TERM=xterm",
            "PYTHONDONTWRITEBYTECODE=1",
            "PYTHONUNBUFFERED=1",
            "ARKIME_DIR=/opt/arkime",
            "ARKIME_VERSION=6.4.0",
            "ARKIME_DEB_URL=https://github.com/arkime/arkime/releases/download/v6.4.0/arkime_6.4.0-1.debian13_XXX.deb",
            "ARKIME_JA4_SO_URL=https://github.com/arkime/arkime/releases/download/v6.4.0/ja4plus.XXX.so",
            "ARKIME_LOCALELASTICSEARCH=no",
            "ARKIME_INET=yes",
            "MALCOLM_USERNAME=admin",
            "ARKIME_PASSWORD=ignored",
            "ARKIME_ECS_PROVIDER=arkime",
            "ARKIME_ECS_DATASET=session",
            "ARKIME_AUTO_ANALYZE_PCAP_FILES=false",
            "ARKIME_AUTO_ANALYZE_PCAP_THREADS=1",
            "ARKIME_PACKET_THREADS=2",
            "ARKIME_TPACKETV3_NUM_THREADS=2",
            "ARKIME_PCAP_PROCESSOR=true",
            "ARKIME_LIVE_CAPTURE=false",
            "ARKIME_COMPRESSION_TYPE=none",
            "ARKIME_COMPRESSION_LEVEL=0",
            "ARKIME_ROTATED_PCAP=true",
            "WISE=on",
            "VIEWER=on",
            "ARKIME_SSL=true",
            "ARKIME_VIEWER_PORT=8005",
            "MANAGE_PCAP_FILES=false",
            "ARKIME_PCAP_LIBPCAP=false",
            "AUTO_TAG=true",
            "PCAP_PIPELINE_VERBOSITY=",
            "PCAP_MONITOR_HOST=pcap-monitor",
            "PCAP_NODE_NAME=malcolm",
            "PCAP_PROCESSED_DIRECTORY=/data/pcap/processed",
            "BUILD_DATE=2026-05-28T21:53:07Z",
            "MALCOLM_VERSION=26.06.0",
            "VCS_REVISION=ffe2817"
        ],
        "Cmd": [
            "/usr/local/bin/supervisord",
            "-c",
            "/etc/supervisord.conf",
            "-n"
        ],
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/opt/arkime",
        "Entrypoint": [
            "/usr/bin/tini",
            "--",
            "/usr/local/bin/docker-uid-gid-setup.sh",
            "/usr/local/bin/service_check_passthrough.sh",
            "-s",
            "arkime",
            "/usr/local/bin/docker_entrypoint.sh"
        ],
        "OnBuild": null,
        "Labels": {
            "maintainer": "malcolm@inl.gov",
            "org.opencontainers.image.authors": "malcolm@inl.gov",
            "org.opencontainers.image.created": "2026-05-28T21:53:07Z",
            "org.opencontainers.image.description": "Malcolm container providing Arkime",
            "org.opencontainers.image.documentation": "https://github.com/idaholab/Malcolm/blob/main/README.md",
            "org.opencontainers.image.revision": "ffe2817",
            "org.opencontainers.image.source": "https://github.com/idaholab/Malcolm",
            "org.opencontainers.image.title": "ghcr.io/idaholab/malcolm/arkime",
            "org.opencontainers.image.url": "https://github.com/idaholab/Malcolm",
            "org.opencontainers.image.vendor": "Idaho National Laboratory",
            "org.opencontainers.image.version": "26.06.0"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 1057126407,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/5c83876cbae8c14c44b456f2f208512f903ab90c47cfe70bce4e9f39d107ff93/diff:/var/lib/docker/overlay2/3f8701653a6d1b917cbdc32dbe8a0c05c872f7c00024ebfa5ba72d982ecd4f9c/diff:/var/lib/docker/overlay2/2b8fad87f4aa969fa7e5206bbbb02649a0b1a3c072fa9669058713cd3f9f6747/diff:/var/lib/docker/overlay2/8fe9742e117cd8a2e7f5a07b06e6497a1ffaf0c0b18b9c5eaad05135d6bf4227/diff:/var/lib/docker/overlay2/1e84d2a5e9c9be5a357515071f589b2293b0bc4bafe6307f5260bf388728709c/diff:/var/lib/docker/overlay2/2136b0816731943d8fc1a664cc8cde0096871ef55876a770d5c58b2a2902be27/diff:/var/lib/docker/overlay2/1da171dcd0b481aa07a79af96d79852187641c7f1cda66c80bfb315b049081e9/diff:/var/lib/docker/overlay2/869330d38a1c04876f7c2dd95131c33efde6668de7ca4d7b57dcf1588f78a0f7/diff:/var/lib/docker/overlay2/909f0262da317ec990e9f30bc839615495d97448e8d3a017bac31480c05bfa62/diff:/var/lib/docker/overlay2/34d8ff954e8e46f01e9e7d44bbd8b437369a191acfdeec204a6441b4d04c87cb/diff:/var/lib/docker/overlay2/3f94cb08358f281511c5cc977b064174c9799af9fae1e31fdae8b0422ba976d4/diff:/var/lib/docker/overlay2/48fccb656d2f23578f5b93f765da1bee0bf69d9408882443dd3aaac0b865d354/diff:/var/lib/docker/overlay2/05b83fbce20a4d3fa035e33182c7b7b3e9eb8c82e30f04d5a3793b919e7840be/diff:/var/lib/docker/overlay2/1143cdfdd332ca13dae2fb4e836ae11ef3b1e0759ebc84530aaad7c156a81d91/diff:/var/lib/docker/overlay2/8fd3db73c3559f86ee8af529be58f72a567f4f5ee031645f57c625477333df5d/diff:/var/lib/docker/overlay2/2ca8ce7edd2ce0814d8351d51b37f9411ad2e8c98e6d6e250a04d7c3c018c084/diff:/var/lib/docker/overlay2/522ec6eb5b523ea55d99236b35f19208a0ed3e7a80bfdc217f966fa964297b6f/diff:/var/lib/docker/overlay2/6247602bb8c66ef02899ea1d83e72f023803cebe0d2eebce667152a3bb26198e/diff:/var/lib/docker/overlay2/b12cfc0136bc2342095f2685632ba21cf38b82932f9c745e70d214d8a237eac3/diff:/var/lib/docker/overlay2/63cc2aac015cb2997ff9409c4b91870dc1a183e373674fbb4e0ef14e7bf36db5/diff:/var/lib/docker/overlay2/7ea0e3bbc978f0551ae1ededf781e7f30140fd73efb1d9a98c58129fa639f193/diff:/var/lib/docker/overlay2/cd0bbc9c69e026633d38a0c4693c779a3d10a0542c78032cd6cc9dbe54fe597d/diff",
            "MergedDir": "/var/lib/docker/overlay2/5c14d9ac515081616e0ecaf5827a26ea9655925bc4a145f8bbc32ef0ceaca4f8/merged",
            "UpperDir": "/var/lib/docker/overlay2/5c14d9ac515081616e0ecaf5827a26ea9655925bc4a145f8bbc32ef0ceaca4f8/diff",
            "WorkDir": "/var/lib/docker/overlay2/5c14d9ac515081616e0ecaf5827a26ea9655925bc4a145f8bbc32ef0ceaca4f8/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:219a998c60509502b47b97f1158067d5dd62640d2d689560d32cfd5594f6bc40",
            "sha256:10b48dcdd3451e42d574a1d9e45cac3462f482452b84f44c22d3933aca03bb4c",
            "sha256:a014aca4a4206a8abbe474508b5d638df1d722d192c21110c99486fe15f0c954",
            "sha256:1d361d2e84777a6d4247260d9fcd7b1025c1f0a8de14a42985789c8c07907b75",
            "sha256:e7864da9895e44255fd685e0db77a77d5fe3e1c2fd41c95257c8fbe880af302d",
            "sha256:32fb855c249b09aefcc52e138bd2715a54e3b06ae5108d2772d495d90e4165b7",
            "sha256:d2f014e2a1be091bffd9183bc975033fd0c84f565ca92e156f5b241681a25879",
            "sha256:5b9bc3727412fde8b47b86f387305d200127f2892a985936a778d8d4e78b53fc",
            "sha256:45112e6322a5e331d662d05dba811639db963b5b67eb08434329c9f6691852a1",
            "sha256:e9d6e83358d84c3c1ffec09290c1205deda77ebe16c35c02630c6edb2535f0bc",
            "sha256:3ab7e535f694d72b9246d0f9007f10484e084c232404df14dfd94aee642343d1",
            "sha256:dc8171b17bdcbea93862f9c92f6151ac5089b8f2a6a39db42e6e9e4d3e41e824",
            "sha256:1b1e6bf5f4091989baffb7153b653ca6f57d34b6e42c398285f7072742fa95c8",
            "sha256:22ec0070c93e1925dfda9d6ea1ecbefdf08d670506ddbfa883cd71f860f779cd",
            "sha256:7d70f16e8893c1184bc244a92e3b9bd0cf3444edfa570961c2a2903411379223",
            "sha256:eb49e8084ad99a3d49bbea196043685c8c1dfc53d4ebbbae8dbe422162b4bc32",
            "sha256:c24bc71c8ab5f543679a787ac7357d741a736479bf58e92f87ca0f0268433638",
            "sha256:c052e4c03ab13695f1d318b6e096c100320dc9b424f0c8822e57eedf4c7b7f45",
            "sha256:efceb4fc9c58eeb6714f6032db93279fc10d9627f2fb81be4102f9c60db82103",
            "sha256:5a03e26cc000f490546821d762ba4d7bd1acbcc7f03dc17d9ac3f3794c8cc0a6",
            "sha256:efaab14d602b6fcaa96fc1cb3132c128241aea819cba42bbadc6a828e80480de",
            "sha256:7ceb30fa9202558ae61515bbf80607d8de16674eb0e36fba693eabfca1422c63",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-06-13T17:48:14.527312695+08:00"
    }
}