registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0 linux/amd64

registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0 - 国内下载镜像源 浏览次数:28 安全受验证的发布者-Kubernetes
```html

该镜像 registry.k8s.io/ingress-nginx/controller-chroot 是用于 Kubernetes 集群的 Nginx Ingress 控制器的一个版本。它与标准的 Ingress Nginx 控制器镜像有所不同，主要区别在于使用了 chroot 技术。

chroot 技术能够创建一个隔离的环境，将 Nginx 进程限制在一个虚拟的根目录下运行。这增强了安全性，减少了潜在的攻击面，因为即使 Nginx 进程被攻破，攻击者也无法访问主机系统上的其他文件和资源。

因此，这个镜像提供了一个更安全可靠的方式来部署 Nginx Ingress 控制器，特别是在安全性要求较高的环境中。

```
源镜像 registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0
国内镜像 swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0
镜像ID sha256:9718d4c6d4eb835ca232ce770fe5a046f3cf40c97b0e4b183bb7d5e5baeffee6
镜像TAG v1.12.0-beta.0
大小 308.34MB
镜像源 registry.k8s.io
CMD /nginx-ingress-controller
启动入口 /usr/bin/dumb-init --
工作目录 /chroot/etc/nginx
OS/平台 linux/amd64
浏览量 28 次
贡献者
镜像创建 2024-10-08T18:33:58.641958721Z
同步时间 2024-12-05 01:12
更新时间 2024-12-11 07:50
开放端口
443/tcp 80/tcp
环境变量
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/luajit/bin:/usr/local/nginx/sbin:/usr/local/nginx/bin LUA_PATH=/usr/local/share/luajit-2.1.0-beta3/?.lua;/usr/local/share/lua/5.1/?.lua;/usr/local/lib/lua/?.lua;; LUA_CPATH=/usr/local/lib/lua/?/?.so;/usr/local/lib/lua/?.so;;
镜像标签
a03def5d-2503-486c-9171-a4c36ff42d86: build_id https://kubernetes.github.io/ingress-nginx/: org.opencontainers.image.documentation Apache-2.0: org.opencontainers.image.licenses 80154a3694b52736c88de408811ebd1888712520: org.opencontainers.image.revision https://github.com/kubernetes/ingress-nginx: org.opencontainers.image.source NGINX Ingress Controller for Kubernetes: org.opencontainers.image.title The Kubernetes Authors: org.opencontainers.image.vendor v1.12.0-beta.0: org.opencontainers.image.version
镜像安全扫描 查看Trivy扫描报告

系统OS: alpine 3.20.3 扫描引擎: Trivy 扫描时间: 2024-12-05 01:14

低危漏洞:3 中危漏洞:0 高危漏洞:0 严重漏洞:0
registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0 (alpine 3.20.3) (alpine) dbg (gobinary) nginx-ingress-controller (gobinary) wait-shutdown (gobinary)

Docker拉取命令 无权限下载?点我修复 

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0  registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0

Containerd拉取命令 

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0  registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0

Shell快速替换命令 

sed -i 's#registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0#' deployment.yaml

Ansible快速分发-Docker 

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0  registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0'

Ansible快速分发-Containerd 

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0  registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0'

镜像历史

大小 创建时间 层信息
0.00B 2024-10-09 02:33:58 CMD ["/nginx-ingress-controller"]
0.00B 2024-10-09 02:33:58 ENTRYPOINT ["/usr/bin/dumb-init" "--"]
0.00B 2024-10-09 02:33:58 EXPOSE map[443/tcp:{} 80/tcp:{}]
0.00B 2024-10-09 02:33:58 USER www-data
14.00B 2024-10-09 02:33:58 RUN |4 TARGETARCH=amd64 VERSION=v1.12.0-beta.0 COMMIT_SHA=80154a3694b52736c88de408811ebd1888712520 BUILD_ID=a03def5d-2503-486c-9171-a4c36ff42d86 /bin/sh -c mkdir -p /chroot/modules_mount && mkdir -p modules_mount && ln -s /modules_mount /chroot/modules_mount # buildkit
86.00B 2024-10-09 02:33:58 RUN |4 TARGETARCH=amd64 VERSION=v1.12.0-beta.0 COMMIT_SHA=80154a3694b52736c88de408811ebd1888712520 BUILD_ID=a03def5d-2503-486c-9171-a4c36ff42d86 /bin/sh -c ln -sf /chroot/etc/nginx /etc/nginx && ln -sf /chroot/tmp/nginx /tmp/nginx && ln -sf /chroot/etc/ingress-controller /etc/ingress-controller && ln -sf /chroot/var/log/nginx /var/log/nginx && touch /chroot/var/log/nginx/access.log && chown www-data:www-data /chroot/var/log/nginx/access.log && echo "" > /chroot/etc/resolv.conf && chown -R www-data.www-data /chroot/var/log/nginx /chroot/etc/resolv.conf && mknod -m 0666 /chroot/dev/null c 1 3 && mknod -m 0666 /chroot/dev/random c 1 8 && mknod -m 0666 /chroot/dev/urandom c 1 9 && mknod -m 0666 /chroot/dev/full c 1 7 && mknod -m 0666 /chroot/dev/ptmx c 5 2 && mknod -m 0666 /chroot/dev/zero c 1 5 && mknod -m 0666 /chroot/dev/tty c 5 0 # buildkit
63.69MB 2024-10-09 02:33:58 RUN |4 TARGETARCH=amd64 VERSION=v1.12.0-beta.0 COMMIT_SHA=80154a3694b52736c88de408811ebd1888712520 BUILD_ID=a03def5d-2503-486c-9171-a4c36ff42d86 /bin/sh -c apk add --no-cache libcap && setcap cap_sys_chroot,cap_net_bind_service=+ep /nginx-ingress-controller && setcap -v cap_sys_chroot,cap_net_bind_service=+ep /nginx-ingress-controller && setcap cap_sys_chroot,cap_net_bind_service=+ep /usr/bin/unshare && setcap -v cap_sys_chroot,cap_net_bind_service=+ep /usr/bin/unshare && setcap cap_net_bind_service=+ep /chroot/usr/local/nginx/sbin/nginx && setcap -v cap_net_bind_service=+ep /chroot/usr/local/nginx/sbin/nginx && setcap cap_sys_chroot,cap_net_bind_service=+ep /usr/bin/dumb-init && setcap -v cap_sys_chroot,cap_net_bind_service=+ep /usr/bin/dumb-init && apk del libcap # buildkit
67.00B 2024-10-09 02:33:53 RUN |4 TARGETARCH=amd64 VERSION=v1.12.0-beta.0 COMMIT_SHA=80154a3694b52736c88de408811ebd1888712520 BUILD_ID=a03def5d-2503-486c-9171-a4c36ff42d86 /bin/sh -c bash -xeu -c ' writeDirs=( /var/log ); for dir in "${writeDirs[@]}"; do mkdir -p ${dir}; chown -R www-data.www-data ${dir}; done' && echo "/lib:/usr/lib:/usr/local/lib:/modules_mount/etc/nginx/modules/otel" > /chroot/etc/ld-musl-x86_64.path # buildkit
0.00B 2024-10-09 02:33:52 WORKDIR /chroot/etc/nginx
685.00B 2024-10-09 02:33:52 COPY --chown=www-data:www-data nginx-chroot-wrapper.sh /usr/bin/nginx # buildkit
3.20MB 2024-10-09 02:33:52 COPY --chown=www-data:www-data bin/amd64/wait-shutdown / # buildkit
50.08MB 2024-10-09 02:33:52 COPY --chown=www-data:www-data bin/amd64/nginx-ingress-controller / # buildkit
7.36MB 2024-10-09 02:33:52 COPY --chown=www-data:www-data bin/amd64/dbg / # buildkit
258.18KB 2024-10-09 02:33:52 COPY --chown=www-data:www-data etc /chroot/etc # buildkit
162.44MB 2024-10-09 02:33:52 COPY /chroot /chroot # buildkit
13.52MB 2024-10-09 02:33:49 RUN |4 TARGETARCH=amd64 VERSION=v1.12.0-beta.0 COMMIT_SHA=80154a3694b52736c88de408811ebd1888712520 BUILD_ID=a03def5d-2503-486c-9171-a4c36ff42d86 /bin/sh -c apk update && apk upgrade && apk add -U --no-cache bash openssl ca-certificates dumb-init tzdata diffutils util-linux && ln -s /usr/local/nginx/sbin/nginx /sbin/nginx && adduser -S -D -H -u 101 -h /usr/local/nginx -s /sbin/nologin -G www-data -g www-data www-data # buildkit
0.00B 2024-10-09 02:33:49 ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/luajit/bin:/usr/local/nginx/sbin:/usr/local/nginx/bin
0.00B 2024-10-09 02:33:49 ENV LUA_CPATH=/usr/local/lib/lua/?/?.so;/usr/local/lib/lua/?.so;;
0.00B 2024-10-09 02:33:49 ENV LUA_PATH=/usr/local/share/luajit-2.1.0-beta3/?.lua;/usr/local/share/lua/5.1/?.lua;/usr/local/lib/lua/?.lua;;
0.00B 2024-10-09 02:33:49 LABEL build_id=a03def5d-2503-486c-9171-a4c36ff42d86
0.00B 2024-10-09 02:33:49 LABEL org.opencontainers.image.revision=80154a3694b52736c88de408811ebd1888712520
0.00B 2024-10-09 02:33:49 LABEL org.opencontainers.image.version=v1.12.0-beta.0
0.00B 2024-10-09 02:33:49 LABEL org.opencontainers.image.licenses=Apache-2.0
0.00B 2024-10-09 02:33:49 LABEL org.opencontainers.image.vendor=The Kubernetes Authors
0.00B 2024-10-09 02:33:49 LABEL org.opencontainers.image.source=https://github.com/kubernetes/ingress-nginx
0.00B 2024-10-09 02:33:49 LABEL org.opencontainers.image.documentation=https://kubernetes.github.io/ingress-nginx/
0.00B 2024-10-09 02:33:49 LABEL org.opencontainers.image.title=NGINX Ingress Controller for Kubernetes
0.00B 2024-10-09 02:33:49 ARG BUILD_ID=a03def5d-2503-486c-9171-a4c36ff42d86
0.00B 2024-10-09 02:33:49 ARG COMMIT_SHA=80154a3694b52736c88de408811ebd1888712520
0.00B 2024-10-09 02:33:49 ARG VERSION=v1.12.0-beta.0
0.00B 2024-10-09 02:33:49 ARG TARGETARCH=amd64
0.00B 2024-09-07 06:20:07 /bin/sh -c #(nop) CMD ["/bin/sh"]
7.80MB 2024-09-07 06:20:07 /bin/sh -c #(nop) ADD file:5758b97d8301c84a204a6e516241275d785a7cade40b2fb99f01fe122482e283 in /

镜像信息 

{
    "Id": "sha256:9718d4c6d4eb835ca232ce770fe5a046f3cf40c97b0e4b183bb7d5e5baeffee6",
    "RepoTags": [
        "registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0"
    ],
    "RepoDigests": [
        "registry.k8s.io/ingress-nginx/controller-chroot@sha256:6e2f8f52e1f2571ff65bc4fc4826d5282d5def5835ec4ab433dcb8e659b2fbac",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/ingress-nginx/controller-chroot@sha256:e5f68751ab63caa09bacece53e6a447e4b87f3722599915e6ce5c55f3c1672e3"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2024-10-08T18:33:58.641958721Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "www-data",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "ExposedPorts": {
            "443/tcp": {},
            "80/tcp": {}
        },
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/luajit/bin:/usr/local/nginx/sbin:/usr/local/nginx/bin",
            "LUA_PATH=/usr/local/share/luajit-2.1.0-beta3/?.lua;/usr/local/share/lua/5.1/?.lua;/usr/local/lib/lua/?.lua;;",
            "LUA_CPATH=/usr/local/lib/lua/?/?.so;/usr/local/lib/lua/?.so;;"
        ],
        "Cmd": [
            "/nginx-ingress-controller"
        ],
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/chroot/etc/nginx",
        "Entrypoint": [
            "/usr/bin/dumb-init",
            "--"
        ],
        "OnBuild": null,
        "Labels": {
            "build_id": "a03def5d-2503-486c-9171-a4c36ff42d86",
            "org.opencontainers.image.documentation": "https://kubernetes.github.io/ingress-nginx/",
            "org.opencontainers.image.licenses": "Apache-2.0",
            "org.opencontainers.image.revision": "80154a3694b52736c88de408811ebd1888712520",
            "org.opencontainers.image.source": "https://github.com/kubernetes/ingress-nginx",
            "org.opencontainers.image.title": "NGINX Ingress Controller for Kubernetes",
            "org.opencontainers.image.vendor": "The Kubernetes Authors",
            "org.opencontainers.image.version": "v1.12.0-beta.0"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 308335671,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/ee16328eab1257b05c87e19031552086c4dc52ade1f60906d025b4a1340752f1/diff:/var/lib/docker/overlay2/72190cca3791c3b44d76dc99a0255a6e8a104bc7033c32664a4f67a2eee94d3c/diff:/var/lib/docker/overlay2/d41fbd180517352ca2d8ed2adbf7e2482ebdb2ac49e1ec5495267a787bfc2fcd/diff:/var/lib/docker/overlay2/7d8e32f28cb0e70a3c5f800a0071df1b22845a383e9d967f4163066ef3820ed0/diff:/var/lib/docker/overlay2/3749a090b61a17d72358ff806083e98338ed25aa47d7efb01e8ae8fff44aea91/diff:/var/lib/docker/overlay2/6705137c6412343defd3ed6c1728595d464918452d1585fa14ab9d2683b310ff/diff:/var/lib/docker/overlay2/f1fd8a4c5fc14f704ced5fcf635c92f05719cc28df8d3582462b0df3b7facce5/diff:/var/lib/docker/overlay2/f6b5fe0b9867920c50f146541aac7a50076ca82876e1c242428c63a3323122b0/diff:/var/lib/docker/overlay2/505e85040688fa46be3095715833dde81d38f48060e578b77cb0cec16f9217c4/diff:/var/lib/docker/overlay2/d5d74f054a186398d2286cde30ee1b07606856906b9993bc56118b435dec53fa/diff:/var/lib/docker/overlay2/f40822c721fcc0a4deb7f205f16b8fab408106233dfe2b0a154ee3e2a71b9c57/diff:/var/lib/docker/overlay2/56dbc2212cbc9b991b1a93a72a8c08a3a8460c06576fe4f3267009446334aa65/diff",
            "MergedDir": "/var/lib/docker/overlay2/774a70f51d913dd519d42a6b7b02f899cf98a9b6934f1ac8768842d929dd64d8/merged",
            "UpperDir": "/var/lib/docker/overlay2/774a70f51d913dd519d42a6b7b02f899cf98a9b6934f1ac8768842d929dd64d8/diff",
            "WorkDir": "/var/lib/docker/overlay2/774a70f51d913dd519d42a6b7b02f899cf98a9b6934f1ac8768842d929dd64d8/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:63ca1fbb43ae5034640e5e6cb3e083e05c290072c5366fcaa9d62435a4cced85",
            "sha256:ff639f27ede9fec3e33b1aa231d50364f90a82f3a1aba11217a43d9346ed18aa",
            "sha256:e976b4cd64af79fca89dbc823b3dad8ac5b6c621b220645bcb5803ef3ff639ca",
            "sha256:761a728c5d47a6e447000c9d3cb887d5f4250805d8970021d7f4961fba926520",
            "sha256:e5a313cdda8c8801e5626bfb68b5ccd3370904f62e0fdaa74468dbf305296ed9",
            "sha256:627dd9ec0579e7d07a9757bf4dccb4f09748bf3027747d2b2aa7314c8ed1575b",
            "sha256:59b32b50506e82ba1b8eb4d3dcc171b51cadb7360409d26d1c659679b218ccc4",
            "sha256:1d7e8e71198dee4896e2af1bbc11aa69b1e933af02b831d7b01e4ad77d4aa6e1",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:cc46d8fae1551c6402e7556d3006b9cad548bb1f108116d0159c2a45851fc913",
            "sha256:1bcdd76ab2c3ea56e6970b1facfce5257cd04237005bddfa8cecdbf897e7bd51",
            "sha256:4c1420c1e758f0f073c258c0e2b936dda773e499312acfbd6ec1d8ac42c8e4e9",
            "sha256:2acab756a38d174589d39491485afb3db025b1a09ac18242a1707a31da5f6498"
        ]
    },
    "Metadata": {
        "LastTagTime": "2024-12-05T01:12:36.746910564+08:00"
    }
}

更多版本

registry.k8s.io/ingress-nginx/controller-chroot:v1.11.3

linux/amd64 registry.k8s.io308.50MB2024-11-22 09:36
28

registry.k8s.io/ingress-nginx/controller-chroot:v1.12.0-beta.0

linux/amd64 registry.k8s.io308.34MB2024-12-05 01:12
27