logo
registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0
linux/amd64 registry.k8s.io 已验证 · Kubernetes

该镜像 registry.k8s.io/ingress-nginx/controller-chroot 是用于 Kubernetes 集群的 Nginx Ingress 控制器的一个版本。它与标准的 Ingress Nginx 控制器镜像有所不同,主要区别在于使用了 chroot 技术。

chroot 技术能够创建一个隔离的环境,将 Nginx 进程限制在一个虚拟的根目录下运行。这增强了安全性,减少了潜在的攻击面,因为即使 Nginx 进程被攻破,攻击者也无法访问主机系统上的其他文件和资源。

因此,这个镜像提供了一个更安全可靠的方式来部署 Nginx Ingress 控制器,特别是在安全性要求较高的环境中。

513
浏览次数
308.34MB
镜像大小
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0
源镜像
registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0
镜像ID
sha256:9718d4c6d4eb835ca232ce770fe5a046f3cf40c97b0e4b183bb7d5e5baeffee6
镜像 TAG
v1.12.0-beta.0
镜像大小
308.34MB
平台架构
linux/amd64
镜像源
registry.k8s.io
CMD
/nginx-ingress-controller
启动入口
/usr/bin/dumb-init --
工作目录
/chroot/etc/nginx
OS/平台
linux/amd64
镜像创建
2024-10-08T18:33:58.641958721Z
同步时间
2024-12-05 01:12
浏览量
513 次
贡献者
🔌 开放端口 2
443/tcp 80/tcp
⚙️ 环境变量 3
KeyValue
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/luajit/bin:/usr/local/nginx/sbin:/usr/local/nginx/bin 0
LUA_PATH=/usr/local/share/luajit-2.1.0-beta3/?.lua;/usr/local/share/lua/5.1/?.lua;/usr/local/lib/lua/?.lua;; 1
LUA_CPATH=/usr/local/lib/lua/?/?.so;/usr/local/lib/lua/?.so;; 2
🏷️ 镜像标签 8
KeyValue
a03def5d-2503-486c-9171-a4c36ff42d86 build_id
https://kubernetes.github.io/ingress-nginx/ org.opencontainers.image.documentation
Apache-2.0 org.opencontainers.image.licenses
80154a3694b52736c88de408811ebd1888712520 org.opencontainers.image.revision
https://github.com/kubernetes/ingress-nginx org.opencontainers.image.source
NGINX Ingress Controller for Kubernetes org.opencontainers.image.title
The Kubernetes Authors org.opencontainers.image.vendor
v1.12.0-beta.0 org.opencontainers.image.version
🛡️ 镜像安全扫描
alpine 3.20.3 Trivy 2024-12-05 01:14 查看完整报告
3
低危 LOW
0
中危 MEDIUM
0
高危 HIGH
0
严重 CRITICAL
受影响目标 (4)
registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0 (alpine 3.20.3) alpine dbg gobinary nginx-ingress-controller gobinary wait-shutdown gobinary

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0  registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0  registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0

Shell快速替换命令

sed -i 's#registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0  registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0  registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0'

镜像构建历史


# 2024-10-09 02:33:58  0.00B 设置默认要执行的命令
CMD ["/nginx-ingress-controller"]
                        
# 2024-10-09 02:33:58  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/usr/bin/dumb-init" "--"]
                        
# 2024-10-09 02:33:58  0.00B 声明容器运行时监听的端口
EXPOSE map[443/tcp:{} 80/tcp:{}]
                        
# 2024-10-09 02:33:58  0.00B 指定运行容器时使用的用户
USER www-data
                        
# 2024-10-09 02:33:58  14.00B 执行命令并创建新的镜像层
RUN |4 TARGETARCH=amd64 VERSION=v1.12.0-beta.0 COMMIT_SHA=80154a3694b52736c88de408811ebd1888712520 BUILD_ID=a03def5d-2503-486c-9171-a4c36ff42d86 /bin/sh -c mkdir -p /chroot/modules_mount   && mkdir -p modules_mount   && ln -s /modules_mount /chroot/modules_mount # buildkit
                        
# 2024-10-09 02:33:58  86.00B 执行命令并创建新的镜像层
RUN |4 TARGETARCH=amd64 VERSION=v1.12.0-beta.0 COMMIT_SHA=80154a3694b52736c88de408811ebd1888712520 BUILD_ID=a03def5d-2503-486c-9171-a4c36ff42d86 /bin/sh -c ln -sf /chroot/etc/nginx /etc/nginx   && ln -sf /chroot/tmp/nginx /tmp/nginx   && ln -sf /chroot/etc/ingress-controller /etc/ingress-controller   && ln -sf /chroot/var/log/nginx /var/log/nginx   && touch /chroot/var/log/nginx/access.log   && chown www-data:www-data /chroot/var/log/nginx/access.log   && echo "" > /chroot/etc/resolv.conf   && chown -R www-data.www-data /chroot/var/log/nginx /chroot/etc/resolv.conf   && mknod -m 0666 /chroot/dev/null c 1 3   && mknod -m 0666 /chroot/dev/random c 1 8   && mknod -m 0666 /chroot/dev/urandom c 1 9   && mknod -m 0666 /chroot/dev/full c 1 7   && mknod -m 0666 /chroot/dev/ptmx c 5 2   && mknod -m 0666 /chroot/dev/zero c 1 5   && mknod -m 0666 /chroot/dev/tty c 5 0 # buildkit
                        
# 2024-10-09 02:33:58  63.69MB 执行命令并创建新的镜像层
RUN |4 TARGETARCH=amd64 VERSION=v1.12.0-beta.0 COMMIT_SHA=80154a3694b52736c88de408811ebd1888712520 BUILD_ID=a03def5d-2503-486c-9171-a4c36ff42d86 /bin/sh -c apk add --no-cache libcap   && setcap    cap_sys_chroot,cap_net_bind_service=+ep /nginx-ingress-controller   && setcap -v cap_sys_chroot,cap_net_bind_service=+ep /nginx-ingress-controller   && setcap    cap_sys_chroot,cap_net_bind_service=+ep /usr/bin/unshare   && setcap -v cap_sys_chroot,cap_net_bind_service=+ep /usr/bin/unshare   && setcap    cap_net_bind_service=+ep /chroot/usr/local/nginx/sbin/nginx   && setcap -v cap_net_bind_service=+ep /chroot/usr/local/nginx/sbin/nginx   && setcap    cap_sys_chroot,cap_net_bind_service=+ep /usr/bin/dumb-init   && setcap -v cap_sys_chroot,cap_net_bind_service=+ep /usr/bin/dumb-init   && apk del libcap # buildkit
                        
# 2024-10-09 02:33:53  67.00B 执行命令并创建新的镜像层
RUN |4 TARGETARCH=amd64 VERSION=v1.12.0-beta.0 COMMIT_SHA=80154a3694b52736c88de408811ebd1888712520 BUILD_ID=a03def5d-2503-486c-9171-a4c36ff42d86 /bin/sh -c bash -xeu -c '   writeDirs=(     /var/log   );   for dir in "${writeDirs[@]}"; do     mkdir -p ${dir};     chown -R www-data.www-data ${dir};   done'   && echo "/lib:/usr/lib:/usr/local/lib:/modules_mount/etc/nginx/modules/otel" > /chroot/etc/ld-musl-x86_64.path # buildkit
                        
# 2024-10-09 02:33:52  0.00B 设置工作目录为/chroot/etc/nginx
WORKDIR /chroot/etc/nginx
                        
# 2024-10-09 02:33:52  685.00B 复制新文件或目录到容器中
COPY --chown=www-data:www-data nginx-chroot-wrapper.sh /usr/bin/nginx # buildkit
                        
# 2024-10-09 02:33:52  3.20MB 复制新文件或目录到容器中
COPY --chown=www-data:www-data bin/amd64/wait-shutdown / # buildkit
                        
# 2024-10-09 02:33:52  50.08MB 复制新文件或目录到容器中
COPY --chown=www-data:www-data bin/amd64/nginx-ingress-controller / # buildkit
                        
# 2024-10-09 02:33:52  7.36MB 复制新文件或目录到容器中
COPY --chown=www-data:www-data bin/amd64/dbg / # buildkit
                        
# 2024-10-09 02:33:52  258.18KB 复制新文件或目录到容器中
COPY --chown=www-data:www-data etc /chroot/etc # buildkit
                        
# 2024-10-09 02:33:52  162.44MB 复制新文件或目录到容器中
COPY /chroot /chroot # buildkit
                        
# 2024-10-09 02:33:49  13.52MB 执行命令并创建新的镜像层
RUN |4 TARGETARCH=amd64 VERSION=v1.12.0-beta.0 COMMIT_SHA=80154a3694b52736c88de408811ebd1888712520 BUILD_ID=a03def5d-2503-486c-9171-a4c36ff42d86 /bin/sh -c apk update   && apk upgrade   && apk add -U --no-cache      bash      openssl      ca-certificates      dumb-init      tzdata      diffutils      util-linux   && ln -s /usr/local/nginx/sbin/nginx /sbin/nginx   && adduser -S -D -H -u 101 -h /usr/local/nginx     -s /sbin/nologin -G www-data -g www-data www-data # buildkit
                        
# 2024-10-09 02:33:49  0.00B 设置环境变量 PATH
ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/luajit/bin:/usr/local/nginx/sbin:/usr/local/nginx/bin
                        
# 2024-10-09 02:33:49  0.00B 设置环境变量 LUA_CPATH
ENV LUA_CPATH=/usr/local/lib/lua/?/?.so;/usr/local/lib/lua/?.so;;
                        
# 2024-10-09 02:33:49  0.00B 设置环境变量 LUA_PATH
ENV LUA_PATH=/usr/local/share/luajit-2.1.0-beta3/?.lua;/usr/local/share/lua/5.1/?.lua;/usr/local/lib/lua/?.lua;;
                        
# 2024-10-09 02:33:49  0.00B 添加元数据标签
LABEL build_id=a03def5d-2503-486c-9171-a4c36ff42d86
                        
# 2024-10-09 02:33:49  0.00B 添加元数据标签
LABEL org.opencontainers.image.revision=80154a3694b52736c88de408811ebd1888712520
                        
# 2024-10-09 02:33:49  0.00B 添加元数据标签
LABEL org.opencontainers.image.version=v1.12.0-beta.0
                        
# 2024-10-09 02:33:49  0.00B 添加元数据标签
LABEL org.opencontainers.image.licenses=Apache-2.0
                        
# 2024-10-09 02:33:49  0.00B 添加元数据标签
LABEL org.opencontainers.image.vendor=The Kubernetes Authors
                        
# 2024-10-09 02:33:49  0.00B 添加元数据标签
LABEL org.opencontainers.image.source=https://github.com/kubernetes/ingress-nginx
                        
# 2024-10-09 02:33:49  0.00B 添加元数据标签
LABEL org.opencontainers.image.documentation=https://kubernetes.github.io/ingress-nginx/
                        
# 2024-10-09 02:33:49  0.00B 添加元数据标签
LABEL org.opencontainers.image.title=NGINX Ingress Controller for Kubernetes
                        
# 2024-10-09 02:33:49  0.00B 定义构建参数
ARG BUILD_ID=a03def5d-2503-486c-9171-a4c36ff42d86
                        
# 2024-10-09 02:33:49  0.00B 定义构建参数
ARG COMMIT_SHA=80154a3694b52736c88de408811ebd1888712520
                        
# 2024-10-09 02:33:49  0.00B 定义构建参数
ARG VERSION=v1.12.0-beta.0
                        
# 2024-10-09 02:33:49  0.00B 定义构建参数
ARG TARGETARCH=amd64
                        
# 2024-09-07 06:20:07  0.00B 
/bin/sh -c #(nop)  CMD ["/bin/sh"]
                        
# 2024-09-07 06:20:07  7.80MB 
/bin/sh -c #(nop) ADD file:5758b97d8301c84a204a6e516241275d785a7cade40b2fb99f01fe122482e283 in / 
                        
                    

镜像信息

{
    "Id": "sha256:9718d4c6d4eb835ca232ce770fe5a046f3cf40c97b0e4b183bb7d5e5baeffee6",
    "RepoTags": [
        "registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0"
    ],
    "RepoDigests": [
        "registry.k8s.io/ingress-nginx/controller-chroot@sha256:6e2f8f52e1f2571ff65bc4fc4826d5282d5def5835ec4ab433dcb8e659b2fbac",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot@sha256:e5f68751ab63caa09bacece53e6a447e4b87f3722599915e6ce5c55f3c1672e3"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2024-10-08T18:33:58.641958721Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "www-data",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "ExposedPorts": {
            "443/tcp": {},
            "80/tcp": {}
        },
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/luajit/bin:/usr/local/nginx/sbin:/usr/local/nginx/bin",
            "LUA_PATH=/usr/local/share/luajit-2.1.0-beta3/?.lua;/usr/local/share/lua/5.1/?.lua;/usr/local/lib/lua/?.lua;;",
            "LUA_CPATH=/usr/local/lib/lua/?/?.so;/usr/local/lib/lua/?.so;;"
        ],
        "Cmd": [
            "/nginx-ingress-controller"
        ],
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/chroot/etc/nginx",
        "Entrypoint": [
            "/usr/bin/dumb-init",
            "--"
        ],
        "OnBuild": null,
        "Labels": {
            "build_id": "a03def5d-2503-486c-9171-a4c36ff42d86",
            "org.opencontainers.image.documentation": "https://kubernetes.github.io/ingress-nginx/",
            "org.opencontainers.image.licenses": "Apache-2.0",
            "org.opencontainers.image.revision": "80154a3694b52736c88de408811ebd1888712520",
            "org.opencontainers.image.source": "https://github.com/kubernetes/ingress-nginx",
            "org.opencontainers.image.title": "NGINX Ingress Controller for Kubernetes",
            "org.opencontainers.image.vendor": "The Kubernetes Authors",
            "org.opencontainers.image.version": "v1.12.0-beta.0"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 308335671,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/ee16328eab1257b05c87e19031552086c4dc52ade1f60906d025b4a1340752f1/diff:/var/lib/docker/overlay2/72190cca3791c3b44d76dc99a0255a6e8a104bc7033c32664a4f67a2eee94d3c/diff:/var/lib/docker/overlay2/d41fbd180517352ca2d8ed2adbf7e2482ebdb2ac49e1ec5495267a787bfc2fcd/diff:/var/lib/docker/overlay2/7d8e32f28cb0e70a3c5f800a0071df1b22845a383e9d967f4163066ef3820ed0/diff:/var/lib/docker/overlay2/3749a090b61a17d72358ff806083e98338ed25aa47d7efb01e8ae8fff44aea91/diff:/var/lib/docker/overlay2/6705137c6412343defd3ed6c1728595d464918452d1585fa14ab9d2683b310ff/diff:/var/lib/docker/overlay2/f1fd8a4c5fc14f704ced5fcf635c92f05719cc28df8d3582462b0df3b7facce5/diff:/var/lib/docker/overlay2/f6b5fe0b9867920c50f146541aac7a50076ca82876e1c242428c63a3323122b0/diff:/var/lib/docker/overlay2/505e85040688fa46be3095715833dde81d38f48060e578b77cb0cec16f9217c4/diff:/var/lib/docker/overlay2/d5d74f054a186398d2286cde30ee1b07606856906b9993bc56118b435dec53fa/diff:/var/lib/docker/overlay2/f40822c721fcc0a4deb7f205f16b8fab408106233dfe2b0a154ee3e2a71b9c57/diff:/var/lib/docker/overlay2/56dbc2212cbc9b991b1a93a72a8c08a3a8460c06576fe4f3267009446334aa65/diff",
            "MergedDir": "/var/lib/docker/overlay2/774a70f51d913dd519d42a6b7b02f899cf98a9b6934f1ac8768842d929dd64d8/merged",
            "UpperDir": "/var/lib/docker/overlay2/774a70f51d913dd519d42a6b7b02f899cf98a9b6934f1ac8768842d929dd64d8/diff",
            "WorkDir": "/var/lib/docker/overlay2/774a70f51d913dd519d42a6b7b02f899cf98a9b6934f1ac8768842d929dd64d8/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85",
            "sha256:ff639f27ede9fec3e33b1aa231d50364f90a82f3a1aba11217a43d9346ed18aa",
            "sha256:e976b4cd64af79fca89dbc823b3dad8ac5b6c621b220645bcb5803ef3ff639ca",
            "sha256:761a728c5d47a6e447000c9d3cb887d5f4250805d8970021d7f4961fba926520",
            "sha256:e5a313cdda8c8801e5626bfb68b5ccd3370904f62e0fdaa74468dbf305296ed9",
            "sha256:627dd9ec0579e7d07a9757bf4dccb4f09748bf3027747d2b2aa7314c8ed1575b",
            "sha256:59b32b50506e82ba1b8eb4d3dcc171b51cadb7360409d26d1c659679b218ccc4",
            "sha256:1d7e8e71198dee4896e2af1bbc11aa69b1e933af02b831d7b01e4ad77d4aa6e1",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:cc46d8fae1551c6402e7556d3006b9cad548bb1f108116d0159c2a45851fc913",
            "sha256:1bcdd76ab2c3ea56e6970b1facfce5257cd04237005bddfa8cecdbf897e7bd51",
            "sha256:4c1420c1e758f0f073c258c0e2b936dda773e499312acfbd6ec1d8ac42c8e4e9",
            "sha256:2acab756a38d174589d39491485afb3db025b1a09ac18242a1707a31da5f6498"
        ]
    },
    "Metadata": {
        "LastTagTime": "2024-12-05T01:12:36.746910564+08:00"
    }
}

更多版本

registry.k8s.io/ingress-nginx/controller-chroot:v1.11.3

linux/amd64 registry.k8s.io308.50MB2024-11-22 09:36
538

registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0

linux/amd64 registry.k8s.io308.34MB2024-12-05 01:12
512

registry.k8s.io/ingress-nginx/controller-chroot:v1.12.1

linux/amd64 registry.k8s.io315.65MB2025-04-22 14:58
480
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×