Docker Registry Browser

Namespace

nginxinc

Image / Tag

nginx-unprivileged:1-alpine-perl

Content Digest

sha256:538611d9f1be720456933a6c1aa794d6287ea8074f0fa4a5f22c6f35b4809d98

Details

Created

2026-03-30 04:36:13 UTC

Size

30.7 MB

Content Digest

Labels

maintainer

NGINX Docker Maintainers <docker-maint@nginx.com>
org.opencontainers.image.created

2026-03-30T04:35:08.535Z
org.opencontainers.image.description

Unprivileged NGINX Dockerfiles
org.opencontainers.image.licenses

Apache-2.0
org.opencontainers.image.revision

61141700fbe3bb03ee7379fd0a5cba5c9c5fc885
org.opencontainers.image.source

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.title

docker-nginx-unprivileged
org.opencontainers.image.url

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.version

1.29.5-alpine-perl

Environment

DYNPKG_RELEASE

1

NGINX_VERSION

1.29.5

NJS_RELEASE

1

NJS_VERSION

0.9.5

PATH

/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

PKG_RELEASE

1

Layers

[#000] sha256:18bdec7eea78464ecf9b88f4ec630eaeb694ea1c0101ecd9c20eda20c9065e23 - 11.47% (3.52 MB)

[#001] sha256:12de1444d62bb0c9b35d9a95cb8cbc83539909e256718ff54662e58fec9bfe97 - 6.18% (1.89 MB)

[#002] sha256:e2189580c0d4a191694fc9ca308a998eef0cfb21eb53ad528f6ca76787251219 - 0.01% (2.73 KB)

[#003] sha256:d65594a401a339f244761d5439dca24d14979a72787e43b4a073c7fdad6ed618 - 0.0% (628 Bytes)

[#004] sha256:1a6787cdddfa8bf8e367a669c2470ebe5e5068e4229c53f84f79b52f141bd5d4 - 0.0% (958 Bytes)

[#005] sha256:96aa24f16c5bf7825df1e62c769e488bfea5376ef83f86b3314053b40ff2db51 - 0.0% (406 Bytes)

[#006] sha256:795911a295cd39bef7e4b057eb944b4cf5609c7681125556a247ebec47ba1978 - 0.0% (1.18 KB)

[#007] sha256:ccedce829a10ca84da89d75e7714fd9f7a8a8ebea949c94f2d50c52a8b46843b - 0.0% (1.37 KB)

[#008] sha256:bbb7b981da665b15e60cced0adf5e536acbd91c4fb528908178e6cd3eb4fb892 - 51.75% (15.9 MB)

[#009] sha256:6298e0df71d738e8c79c1892caf6feb04e5bc098f8014b2a9ca3b08cf2540cf8 - 30.58% (9.37 MB)

History

2026-01-28 01:18:11 UTC (buildkit.dockerfile.v0)

ADD alpine-minirootfs-3.23.3-x86.tar.gz / # buildkit

2026-01-28 01:18:11 UTC (buildkit.dockerfile.v0)

CMD ["/bin/sh"]

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

LABEL maintainer=NGINX Docker Maintainers <docker-maint@nginx.com>

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

ENV NGINX_VERSION=1.29.5

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

ENV PKG_RELEASE=1

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

ENV DYNPKG_RELEASE=1

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && addgroup -g $GID -S nginx || true && adduser -S -D -H -u $UID -h /var/cache/nginx -s /sbin/nologin -G nginx -g nginx nginx || true && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) set -x && KEY_SHA512="e09fa32f0a0eab2b879ccbbc4d0e4fb9751486eedda75e35fac65802cc9faa266425edf83e261137a2f4d16281ce2c1a5f4502930fe75154723da014214f0655" && wget -O /tmp/nginx_signing.rsa.pub https://nginx.org/keys/nginx_signing.rsa.pub && if echo "$KEY_SHA512 */tmp/nginx_signing.rsa.pub" | sha512sum -c -; then echo "key verification succeeded!"; mv /tmp/nginx_signing.rsa.pub /etc/apk/keys/; else echo "key verification failed!"; exit 1; fi && apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make base && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache gettext-envsubst && apk add --no-cache tzdata && ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log && mkdir /docker-entrypoint.d # buildkit

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c sed -i 's,listen 80;,listen 8080;,' /etc/nginx/conf.d/default.conf && sed -i '/user nginx;/d' /etc/nginx/nginx.conf && sed -i 's,\(/var\)\{0\,1\}/run/nginx.pid,/tmp/nginx.pid,' /etc/nginx/nginx.conf && sed -i "/^http {/a \ proxy_temp_path /tmp/proxy_temp;\n client_body_temp_path /tmp/client_temp;\n fastcgi_temp_path /tmp/fastcgi_temp;\n uwsgi_temp_path /tmp/uwsgi_temp;\n scgi_temp_path /tmp/scgi_temp;\n" /etc/nginx/nginx.conf && chown -R $UID:0 /var/cache/nginx && chmod -R g+w /var/cache/nginx && chown -R $UID:0 /etc/nginx && chmod -R g+w /etc/nginx # buildkit

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

COPY docker-entrypoint.sh / # buildkit

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

COPY 10-listen-on-ipv6-by-default.sh /docker-entrypoint.d # buildkit

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

COPY 15-local-resolvers.envsh /docker-entrypoint.d # buildkit

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

COPY 20-envsubst-on-templates.sh /docker-entrypoint.d # buildkit

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

COPY 30-tune-worker-processes.sh /docker-entrypoint.d # buildkit

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

ENTRYPOINT ["/docker-entrypoint.sh"]

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

EXPOSE [8080/tcp]

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

STOPSIGNAL SIGQUIT

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 00:48:18 UTC (buildkit.dockerfile.v0)

CMD ["nginx" "-g" "daemon off;"]

2026-03-30 02:32:11 UTC (buildkit.dockerfile.v0)

ENV NJS_VERSION=0.9.5

2026-03-30 02:32:11 UTC (buildkit.dockerfile.v0)

ENV NJS_RELEASE=1

2026-03-30 02:32:11 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 02:32:11 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 02:32:11 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 02:32:11 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers libxslt-dev gd-dev geoip-dev libedit-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-geoip module-image-filter module-njs module-xslt && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache curl ca-certificates # buildkit

2026-03-30 02:32:11 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 04:36:13 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 04:36:13 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 04:36:13 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 04:36:13 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-perl=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers perl-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-perl && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi # buildkit

2026-03-30 04:36:13 UTC (buildkit.dockerfile.v0)

USER 101

Details

Created

2026-03-30 04:35:17 UTC

Size

31.8 MB

Content Digest

Labels

maintainer

NGINX Docker Maintainers <docker-maint@nginx.com>
org.opencontainers.image.created

2026-03-30T04:35:08.535Z
org.opencontainers.image.description

Unprivileged NGINX Dockerfiles
org.opencontainers.image.licenses

Apache-2.0
org.opencontainers.image.revision

61141700fbe3bb03ee7379fd0a5cba5c9c5fc885
org.opencontainers.image.source

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.title

docker-nginx-unprivileged
org.opencontainers.image.url

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.version

1.29.5-alpine-perl

Environment

DYNPKG_RELEASE

1

NGINX_VERSION

1.29.5

NJS_RELEASE

1

NJS_VERSION

0.9.5

PATH

/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

PKG_RELEASE

1

Layers

[#000] sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153 - 11.58% (3.68 MB)

[#001] sha256:778513213754272ae8784d506c45dda95112a1cc81b74092a767ebabe62d7b49 - 5.57% (1.77 MB)

[#002] sha256:8c65213165e5cca6f5629d9584f0b1a01e755ceab198a60ad7cc5ec2f0815a7f - 0.01% (2.73 KB)

[#003] sha256:d65594a401a339f244761d5439dca24d14979a72787e43b4a073c7fdad6ed618 - 0.0% (628 Bytes)

[#004] sha256:ae4041c2085439feefd1817b13fd24b6c021a409b007824bfd1bf5eed410dfae - 0.0% (956 Bytes)

[#005] sha256:3669d0ccda18ac1980bacb1fe0d11b0c31d3af880619c738af0e1bfd93b22466 - 0.0% (404 Bytes)

[#006] sha256:52ae254a9ecc7fb77890260f1a54147012ae712271d9a66845a3fc0700fba420 - 0.0% (1.18 KB)

[#007] sha256:7f0898f16221538bce6de33362fc13287d91fa49f62e6e85aa29da535159ab70 - 0.0% (1.37 KB)

[#008] sha256:5dc88f59dd2e37012d29ca7c828bf62d1e13a6f4a88654b3997429c585b2e154 - 51.96% (16.5 MB)

[#009] sha256:72b9da2fd9cdb471f957667b2c62f0ffd85b62e3f10afe9d5e6f3034db356374 - 30.87% (9.81 MB)

History

2026-01-28 01:18:04 UTC (buildkit.dockerfile.v0)

ADD alpine-minirootfs-3.23.3-x86_64.tar.gz / # buildkit

2026-01-28 01:18:04 UTC (buildkit.dockerfile.v0)

CMD ["/bin/sh"]

2026-03-30 00:39:38 UTC (buildkit.dockerfile.v0)

LABEL maintainer=NGINX Docker Maintainers <docker-maint@nginx.com>

2026-03-30 00:39:38 UTC (buildkit.dockerfile.v0)

ENV NGINX_VERSION=1.29.5

2026-03-30 00:39:38 UTC (buildkit.dockerfile.v0)

ENV PKG_RELEASE=1

2026-03-30 00:39:38 UTC (buildkit.dockerfile.v0)

ENV DYNPKG_RELEASE=1

2026-03-30 00:39:38 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 00:39:38 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 00:39:38 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && addgroup -g $GID -S nginx || true && adduser -S -D -H -u $UID -h /var/cache/nginx -s /sbin/nologin -G nginx -g nginx nginx || true && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) set -x && KEY_SHA512="e09fa32f0a0eab2b879ccbbc4d0e4fb9751486eedda75e35fac65802cc9faa266425edf83e261137a2f4d16281ce2c1a5f4502930fe75154723da014214f0655" && wget -O /tmp/nginx_signing.rsa.pub https://nginx.org/keys/nginx_signing.rsa.pub && if echo "$KEY_SHA512 */tmp/nginx_signing.rsa.pub" | sha512sum -c -; then echo "key verification succeeded!"; mv /tmp/nginx_signing.rsa.pub /etc/apk/keys/; else echo "key verification failed!"; exit 1; fi && apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make base && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache gettext-envsubst && apk add --no-cache tzdata && ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log && mkdir /docker-entrypoint.d # buildkit

2026-03-30 00:39:39 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c sed -i 's,listen 80;,listen 8080;,' /etc/nginx/conf.d/default.conf && sed -i '/user nginx;/d' /etc/nginx/nginx.conf && sed -i 's,\(/var\)\{0\,1\}/run/nginx.pid,/tmp/nginx.pid,' /etc/nginx/nginx.conf && sed -i "/^http {/a \ proxy_temp_path /tmp/proxy_temp;\n client_body_temp_path /tmp/client_temp;\n fastcgi_temp_path /tmp/fastcgi_temp;\n uwsgi_temp_path /tmp/uwsgi_temp;\n scgi_temp_path /tmp/scgi_temp;\n" /etc/nginx/nginx.conf && chown -R $UID:0 /var/cache/nginx && chmod -R g+w /var/cache/nginx && chown -R $UID:0 /etc/nginx && chmod -R g+w /etc/nginx # buildkit

2026-03-30 00:39:39 UTC (buildkit.dockerfile.v0)

COPY docker-entrypoint.sh / # buildkit

2026-03-30 00:39:39 UTC (buildkit.dockerfile.v0)

COPY 10-listen-on-ipv6-by-default.sh /docker-entrypoint.d # buildkit

2026-03-30 00:39:39 UTC (buildkit.dockerfile.v0)

COPY 15-local-resolvers.envsh /docker-entrypoint.d # buildkit

2026-03-30 00:39:39 UTC (buildkit.dockerfile.v0)

COPY 20-envsubst-on-templates.sh /docker-entrypoint.d # buildkit

2026-03-30 00:39:39 UTC (buildkit.dockerfile.v0)

COPY 30-tune-worker-processes.sh /docker-entrypoint.d # buildkit

2026-03-30 00:39:39 UTC (buildkit.dockerfile.v0)

ENTRYPOINT ["/docker-entrypoint.sh"]

2026-03-30 00:39:39 UTC (buildkit.dockerfile.v0)

EXPOSE [8080/tcp]

2026-03-30 00:39:39 UTC (buildkit.dockerfile.v0)

STOPSIGNAL SIGQUIT

2026-03-30 00:39:39 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 00:39:39 UTC (buildkit.dockerfile.v0)

CMD ["nginx" "-g" "daemon off;"]

2026-03-30 02:22:33 UTC (buildkit.dockerfile.v0)

ENV NJS_VERSION=0.9.5

2026-03-30 02:22:33 UTC (buildkit.dockerfile.v0)

ENV NJS_RELEASE=1

2026-03-30 02:22:33 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 02:22:33 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 02:22:33 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 02:22:33 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers libxslt-dev gd-dev geoip-dev libedit-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-geoip module-image-filter module-njs module-xslt && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache curl ca-certificates # buildkit

2026-03-30 02:22:33 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 04:35:17 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 04:35:17 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 04:35:17 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 04:35:17 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-perl=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers perl-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-perl && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi # buildkit

2026-03-30 04:35:17 UTC (buildkit.dockerfile.v0)

USER 101

Details

Created

2026-03-30 04:47:51 UTC

Size

27.8 MB

Content Digest

Labels

maintainer

NGINX Docker Maintainers <docker-maint@nginx.com>
org.opencontainers.image.created

2026-03-30T04:35:08.535Z
org.opencontainers.image.description

Unprivileged NGINX Dockerfiles
org.opencontainers.image.licenses

Apache-2.0
org.opencontainers.image.revision

61141700fbe3bb03ee7379fd0a5cba5c9c5fc885
org.opencontainers.image.source

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.title

docker-nginx-unprivileged
org.opencontainers.image.url

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.version

1.29.5-alpine-perl

Environment

DYNPKG_RELEASE

1

NGINX_VERSION

1.29.5

NJS_RELEASE

1

NJS_VERSION

0.9.5

PATH

/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

PKG_RELEASE

1

Layers

[#000] sha256:f067a9ad7b3a4e3b687105344f6ad0934a0623c4359c2d841a3d4fab27e26060 - 12.23% (3.4 MB)

[#001] sha256:35892e72033bcd97bcba096eee562bc0a378adc5beadbc693dd945497b1c4133 - 6.52% (1.81 MB)

[#002] sha256:28cece8a3f8cac6208f179e9943a835c19ff688fae7e141e86297c64b322e58c - 0.01% (2.73 KB)

[#003] sha256:d65594a401a339f244761d5439dca24d14979a72787e43b4a073c7fdad6ed618 - 0.0% (628 Bytes)

[#004] sha256:42dd96cdebe5328a453d784a8aa1d729a025dbf04c509c578242de09d4ffd3c7 - 0.0% (959 Bytes)

[#005] sha256:df0819a637c2827811fe610b384e5723ff35ec72fb150535bf00993b48024a6a - 0.0% (407 Bytes)

[#006] sha256:67f5db837aadaa4ed7fe9a2d2d6d539b5d9a07d201817740b3eb14456af36a55 - 0.0% (1.18 KB)

[#007] sha256:55f012634dc9840d0d70590ae54bf49cf95326327c872e66ab651887bd6b6314 - 0.0% (1.37 KB)

[#008] sha256:b33d01361d5d570ad4c936117bedd2678eff5fb3b3b852b2160ff6bb07bf787d - 48.63% (13.5 MB)

[#009] sha256:7d3c1404036227e0a91112ac631c254cc81b087a5bfbb3af2ca306e2ab5efedd - 32.6% (9.08 MB)

History

2026-01-28 01:17:52 UTC (buildkit.dockerfile.v0)

ADD alpine-minirootfs-3.23.3-armhf.tar.gz / # buildkit

2026-01-28 01:17:52 UTC (buildkit.dockerfile.v0)

CMD ["/bin/sh"]

2026-03-30 02:17:41 UTC (buildkit.dockerfile.v0)

LABEL maintainer=NGINX Docker Maintainers <docker-maint@nginx.com>

2026-03-30 02:17:41 UTC (buildkit.dockerfile.v0)

ENV NGINX_VERSION=1.29.5

2026-03-30 02:17:41 UTC (buildkit.dockerfile.v0)

ENV PKG_RELEASE=1

2026-03-30 02:17:41 UTC (buildkit.dockerfile.v0)

ENV DYNPKG_RELEASE=1

2026-03-30 02:17:41 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 02:17:41 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 02:17:41 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && addgroup -g $GID -S nginx || true && adduser -S -D -H -u $UID -h /var/cache/nginx -s /sbin/nologin -G nginx -g nginx nginx || true && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) set -x && KEY_SHA512="e09fa32f0a0eab2b879ccbbc4d0e4fb9751486eedda75e35fac65802cc9faa266425edf83e261137a2f4d16281ce2c1a5f4502930fe75154723da014214f0655" && wget -O /tmp/nginx_signing.rsa.pub https://nginx.org/keys/nginx_signing.rsa.pub && if echo "$KEY_SHA512 */tmp/nginx_signing.rsa.pub" | sha512sum -c -; then echo "key verification succeeded!"; mv /tmp/nginx_signing.rsa.pub /etc/apk/keys/; else echo "key verification failed!"; exit 1; fi && apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make base && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache gettext-envsubst && apk add --no-cache tzdata && ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log && mkdir /docker-entrypoint.d # buildkit

2026-03-30 02:17:42 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c sed -i 's,listen 80;,listen 8080;,' /etc/nginx/conf.d/default.conf && sed -i '/user nginx;/d' /etc/nginx/nginx.conf && sed -i 's,\(/var\)\{0\,1\}/run/nginx.pid,/tmp/nginx.pid,' /etc/nginx/nginx.conf && sed -i "/^http {/a \ proxy_temp_path /tmp/proxy_temp;\n client_body_temp_path /tmp/client_temp;\n fastcgi_temp_path /tmp/fastcgi_temp;\n uwsgi_temp_path /tmp/uwsgi_temp;\n scgi_temp_path /tmp/scgi_temp;\n" /etc/nginx/nginx.conf && chown -R $UID:0 /var/cache/nginx && chmod -R g+w /var/cache/nginx && chown -R $UID:0 /etc/nginx && chmod -R g+w /etc/nginx # buildkit

2026-03-30 02:17:42 UTC (buildkit.dockerfile.v0)

COPY docker-entrypoint.sh / # buildkit

2026-03-30 02:17:42 UTC (buildkit.dockerfile.v0)

COPY 10-listen-on-ipv6-by-default.sh /docker-entrypoint.d # buildkit

2026-03-30 02:17:42 UTC (buildkit.dockerfile.v0)

COPY 15-local-resolvers.envsh /docker-entrypoint.d # buildkit

2026-03-30 02:17:42 UTC (buildkit.dockerfile.v0)

COPY 20-envsubst-on-templates.sh /docker-entrypoint.d # buildkit

2026-03-30 02:17:42 UTC (buildkit.dockerfile.v0)

COPY 30-tune-worker-processes.sh /docker-entrypoint.d # buildkit

2026-03-30 02:17:42 UTC (buildkit.dockerfile.v0)

ENTRYPOINT ["/docker-entrypoint.sh"]

2026-03-30 02:17:42 UTC (buildkit.dockerfile.v0)

EXPOSE [8080/tcp]

2026-03-30 02:17:42 UTC (buildkit.dockerfile.v0)

STOPSIGNAL SIGQUIT

2026-03-30 02:17:42 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 02:17:42 UTC (buildkit.dockerfile.v0)

CMD ["nginx" "-g" "daemon off;"]

2026-03-30 04:26:32 UTC (buildkit.dockerfile.v0)

ENV NJS_VERSION=0.9.5

2026-03-30 04:26:32 UTC (buildkit.dockerfile.v0)

ENV NJS_RELEASE=1

2026-03-30 04:26:32 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 04:26:32 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 04:26:32 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 04:26:32 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers libxslt-dev gd-dev geoip-dev libedit-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-geoip module-image-filter module-njs module-xslt && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache curl ca-certificates # buildkit

2026-03-30 04:26:32 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 04:47:51 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 04:47:51 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 04:47:51 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 04:47:51 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-perl=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers perl-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-perl && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi # buildkit

2026-03-30 04:47:51 UTC (buildkit.dockerfile.v0)

USER 101

Details

Created

2026-03-30 04:48:01 UTC

Size

27.3 MB

Content Digest

Labels

maintainer

NGINX Docker Maintainers <docker-maint@nginx.com>
org.opencontainers.image.created

2026-03-30T04:35:08.535Z
org.opencontainers.image.description

Unprivileged NGINX Dockerfiles
org.opencontainers.image.licenses

Apache-2.0
org.opencontainers.image.revision

61141700fbe3bb03ee7379fd0a5cba5c9c5fc885
org.opencontainers.image.source

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.title

docker-nginx-unprivileged
org.opencontainers.image.url

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.version

1.29.5-alpine-perl

Environment

DYNPKG_RELEASE

1

NGINX_VERSION

1.29.5

NJS_RELEASE

1

NJS_VERSION

0.9.5

PATH

/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

PKG_RELEASE

1

Layers

[#000] sha256:7ed661450d9b41ba25f81f6ef8649bb379f47471d21c4898a8a6a3e11b819220 - 11.45% (3.13 MB)

[#001] sha256:8fd4bf1bf0c60f424b3b7d9c522b4fa9213a6570770af96c7a7fb0120753eb20 - 6.02% (1.65 MB)

[#002] sha256:ba8eaf0bf2f3f33cf9d62187f856b602be1b3e3e4292a6b8264b95abec640336 - 0.01% (2.73 KB)

[#003] sha256:d65594a401a339f244761d5439dca24d14979a72787e43b4a073c7fdad6ed618 - 0.0% (628 Bytes)

[#004] sha256:4ebafda6f1e49c945499c6bd5f69e8b565b24116de78c4722f559080bcb145c6 - 0.0% (959 Bytes)

[#005] sha256:3ee8c59da87c9914da98f972c497116ede52e3600d2ff66a4bf9d590276ab339 - 0.0% (407 Bytes)

[#006] sha256:af2c88d605825fb468926362385bdbcc629de427c4333c1ecebb2b47266fa8ad - 0.0% (1.18 KB)

[#007] sha256:f8ef2e14fb59f08ff8d0135b9b2e8e54c2200f8bdba17ade93d09dfa3ce8765d - 0.0% (1.37 KB)

[#008] sha256:156e97950d4901b5f7c00fe6cb4c9f67b995849b12eaed825761324eb2da5bef - 49.89% (13.6 MB)

[#009] sha256:c073707d6f09c722cac3fd9579c3ca9a5026eb539474b484347163c2ef66d4b4 - 32.62% (8.92 MB)

History

2026-01-28 01:18:44 UTC (buildkit.dockerfile.v0)

ADD alpine-minirootfs-3.23.3-armv7.tar.gz / # buildkit

2026-01-28 01:18:44 UTC (buildkit.dockerfile.v0)

CMD ["/bin/sh"]

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

LABEL maintainer=NGINX Docker Maintainers <docker-maint@nginx.com>

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

ENV NGINX_VERSION=1.29.5

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

ENV PKG_RELEASE=1

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

ENV DYNPKG_RELEASE=1

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && addgroup -g $GID -S nginx || true && adduser -S -D -H -u $UID -h /var/cache/nginx -s /sbin/nologin -G nginx -g nginx nginx || true && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) set -x && KEY_SHA512="e09fa32f0a0eab2b879ccbbc4d0e4fb9751486eedda75e35fac65802cc9faa266425edf83e261137a2f4d16281ce2c1a5f4502930fe75154723da014214f0655" && wget -O /tmp/nginx_signing.rsa.pub https://nginx.org/keys/nginx_signing.rsa.pub && if echo "$KEY_SHA512 */tmp/nginx_signing.rsa.pub" | sha512sum -c -; then echo "key verification succeeded!"; mv /tmp/nginx_signing.rsa.pub /etc/apk/keys/; else echo "key verification failed!"; exit 1; fi && apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make base && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache gettext-envsubst && apk add --no-cache tzdata && ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log && mkdir /docker-entrypoint.d # buildkit

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c sed -i 's,listen 80;,listen 8080;,' /etc/nginx/conf.d/default.conf && sed -i '/user nginx;/d' /etc/nginx/nginx.conf && sed -i 's,\(/var\)\{0\,1\}/run/nginx.pid,/tmp/nginx.pid,' /etc/nginx/nginx.conf && sed -i "/^http {/a \ proxy_temp_path /tmp/proxy_temp;\n client_body_temp_path /tmp/client_temp;\n fastcgi_temp_path /tmp/fastcgi_temp;\n uwsgi_temp_path /tmp/uwsgi_temp;\n scgi_temp_path /tmp/scgi_temp;\n" /etc/nginx/nginx.conf && chown -R $UID:0 /var/cache/nginx && chmod -R g+w /var/cache/nginx && chown -R $UID:0 /etc/nginx && chmod -R g+w /etc/nginx # buildkit

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

COPY docker-entrypoint.sh / # buildkit

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

COPY 10-listen-on-ipv6-by-default.sh /docker-entrypoint.d # buildkit

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

COPY 15-local-resolvers.envsh /docker-entrypoint.d # buildkit

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

COPY 20-envsubst-on-templates.sh /docker-entrypoint.d # buildkit

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

COPY 30-tune-worker-processes.sh /docker-entrypoint.d # buildkit

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

ENTRYPOINT ["/docker-entrypoint.sh"]

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

EXPOSE [8080/tcp]

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

STOPSIGNAL SIGQUIT

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 02:18:01 UTC (buildkit.dockerfile.v0)

CMD ["nginx" "-g" "daemon off;"]

2026-03-30 04:27:30 UTC (buildkit.dockerfile.v0)

ENV NJS_VERSION=0.9.5

2026-03-30 04:27:30 UTC (buildkit.dockerfile.v0)

ENV NJS_RELEASE=1

2026-03-30 04:27:30 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 04:27:30 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 04:27:30 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 04:27:30 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers libxslt-dev gd-dev geoip-dev libedit-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-geoip module-image-filter module-njs module-xslt && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache curl ca-certificates # buildkit

2026-03-30 04:27:30 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 04:48:01 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 04:48:01 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 04:48:01 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 04:48:01 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-perl=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers perl-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-perl && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi # buildkit

2026-03-30 04:48:01 UTC (buildkit.dockerfile.v0)

USER 101

Details

Created

2026-03-30 04:35:30 UTC

Size

31.7 MB

Content Digest

Labels

maintainer

NGINX Docker Maintainers <docker-maint@nginx.com>
org.opencontainers.image.created

2026-03-30T04:35:08.535Z
org.opencontainers.image.description

Unprivileged NGINX Dockerfiles
org.opencontainers.image.licenses

Apache-2.0
org.opencontainers.image.revision

61141700fbe3bb03ee7379fd0a5cba5c9c5fc885
org.opencontainers.image.source

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.title

docker-nginx-unprivileged
org.opencontainers.image.url

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.version

1.29.5-alpine-perl

Environment

DYNPKG_RELEASE

1

NGINX_VERSION

1.29.5

NJS_RELEASE

1

NJS_VERSION

0.9.5

PATH

/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

PKG_RELEASE

1

Layers

[#000] sha256:d8ad8cd72600f46cc068e16c39046ebc76526e41051f43a8c249884b200936c0 - 12.61% (4 MB)

[#001] sha256:8ae0b1dd629a17a205f4c44d2d3fc7ea9f62b5fbf4aa2bf42cca9234f2bf6aed - 5.63% (1.79 MB)

[#002] sha256:a78d05bb4e55fb8c790a88dfc7bec39e9c67ed6af7798bfb8e07a3bfcf11d427 - 0.01% (2.73 KB)

[#003] sha256:d65594a401a339f244761d5439dca24d14979a72787e43b4a073c7fdad6ed618 - 0.0% (628 Bytes)

[#004] sha256:666e4aaff048dfef6114748fb08289d6afe39bf8680376b0dba2079400d5e3c0 - 0.0% (956 Bytes)

[#005] sha256:d641b004f1614f22b3ec107344b7a8e283a4c78c845696223b6f83a9ae12618c - 0.0% (404 Bytes)

[#006] sha256:019c3737bd5d4aacb52a950f867949686aba9ffdd7372320fc267f6c1f95f352 - 0.0% (1.18 KB)

[#007] sha256:190f38e7ca6499e4c63784c788958cac64e6931f29e971bfaf4bb34ee547a0ba - 0.0% (1.37 KB)

[#008] sha256:de13c3bd3498d1d2c023acb1ac6fafe2a2c0a5d61cf2146891f50b0b2e241788 - 50.97% (16.2 MB)

[#009] sha256:14808832b49f5b17164d2f661e0c8f015da8cde5af08d06c0a4b93d7a7791140 - 30.77% (9.76 MB)

History

2026-01-28 01:18:09 UTC (buildkit.dockerfile.v0)

ADD alpine-minirootfs-3.23.3-aarch64.tar.gz / # buildkit

2026-01-28 01:18:09 UTC (buildkit.dockerfile.v0)

CMD ["/bin/sh"]

2026-03-30 00:40:04 UTC (buildkit.dockerfile.v0)

LABEL maintainer=NGINX Docker Maintainers <docker-maint@nginx.com>

2026-03-30 00:40:04 UTC (buildkit.dockerfile.v0)

ENV NGINX_VERSION=1.29.5

2026-03-30 00:40:04 UTC (buildkit.dockerfile.v0)

ENV PKG_RELEASE=1

2026-03-30 00:40:04 UTC (buildkit.dockerfile.v0)

ENV DYNPKG_RELEASE=1

2026-03-30 00:40:04 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 00:40:04 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 00:40:04 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && addgroup -g $GID -S nginx || true && adduser -S -D -H -u $UID -h /var/cache/nginx -s /sbin/nologin -G nginx -g nginx nginx || true && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) set -x && KEY_SHA512="e09fa32f0a0eab2b879ccbbc4d0e4fb9751486eedda75e35fac65802cc9faa266425edf83e261137a2f4d16281ce2c1a5f4502930fe75154723da014214f0655" && wget -O /tmp/nginx_signing.rsa.pub https://nginx.org/keys/nginx_signing.rsa.pub && if echo "$KEY_SHA512 */tmp/nginx_signing.rsa.pub" | sha512sum -c -; then echo "key verification succeeded!"; mv /tmp/nginx_signing.rsa.pub /etc/apk/keys/; else echo "key verification failed!"; exit 1; fi && apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make base && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache gettext-envsubst && apk add --no-cache tzdata && ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log && mkdir /docker-entrypoint.d # buildkit

2026-03-30 00:40:05 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c sed -i 's,listen 80;,listen 8080;,' /etc/nginx/conf.d/default.conf && sed -i '/user nginx;/d' /etc/nginx/nginx.conf && sed -i 's,\(/var\)\{0\,1\}/run/nginx.pid,/tmp/nginx.pid,' /etc/nginx/nginx.conf && sed -i "/^http {/a \ proxy_temp_path /tmp/proxy_temp;\n client_body_temp_path /tmp/client_temp;\n fastcgi_temp_path /tmp/fastcgi_temp;\n uwsgi_temp_path /tmp/uwsgi_temp;\n scgi_temp_path /tmp/scgi_temp;\n" /etc/nginx/nginx.conf && chown -R $UID:0 /var/cache/nginx && chmod -R g+w /var/cache/nginx && chown -R $UID:0 /etc/nginx && chmod -R g+w /etc/nginx # buildkit

2026-03-30 00:40:05 UTC (buildkit.dockerfile.v0)

COPY docker-entrypoint.sh / # buildkit

2026-03-30 00:40:05 UTC (buildkit.dockerfile.v0)

COPY 10-listen-on-ipv6-by-default.sh /docker-entrypoint.d # buildkit

2026-03-30 00:40:05 UTC (buildkit.dockerfile.v0)

COPY 15-local-resolvers.envsh /docker-entrypoint.d # buildkit

2026-03-30 00:40:05 UTC (buildkit.dockerfile.v0)

COPY 20-envsubst-on-templates.sh /docker-entrypoint.d # buildkit

2026-03-30 00:40:05 UTC (buildkit.dockerfile.v0)

COPY 30-tune-worker-processes.sh /docker-entrypoint.d # buildkit

2026-03-30 00:40:05 UTC (buildkit.dockerfile.v0)

ENTRYPOINT ["/docker-entrypoint.sh"]

2026-03-30 00:40:05 UTC (buildkit.dockerfile.v0)

EXPOSE [8080/tcp]

2026-03-30 00:40:05 UTC (buildkit.dockerfile.v0)

STOPSIGNAL SIGQUIT

2026-03-30 00:40:05 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 00:40:05 UTC (buildkit.dockerfile.v0)

CMD ["nginx" "-g" "daemon off;"]

2026-03-30 02:22:53 UTC (buildkit.dockerfile.v0)

ENV NJS_VERSION=0.9.5

2026-03-30 02:22:53 UTC (buildkit.dockerfile.v0)

ENV NJS_RELEASE=1

2026-03-30 02:22:53 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 02:22:53 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 02:22:53 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 02:22:53 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers libxslt-dev gd-dev geoip-dev libedit-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-geoip module-image-filter module-njs module-xslt && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache curl ca-certificates # buildkit

2026-03-30 02:22:53 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 04:35:30 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 04:35:30 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 04:35:30 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 04:35:30 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-perl=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers perl-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-perl && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi # buildkit

2026-03-30 04:35:30 UTC (buildkit.dockerfile.v0)

USER 101

Details

Created

2026-03-30 04:48:15 UTC

Size

32.4 MB

Content Digest

Labels

maintainer

NGINX Docker Maintainers <docker-maint@nginx.com>
org.opencontainers.image.created

2026-03-30T04:35:08.535Z
org.opencontainers.image.description

Unprivileged NGINX Dockerfiles
org.opencontainers.image.licenses

Apache-2.0
org.opencontainers.image.revision

61141700fbe3bb03ee7379fd0a5cba5c9c5fc885
org.opencontainers.image.source

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.title

docker-nginx-unprivileged
org.opencontainers.image.url

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.version

1.29.5-alpine-perl

Environment

DYNPKG_RELEASE

1

NGINX_VERSION

1.29.5

NJS_RELEASE

1

NJS_VERSION

0.9.5

PATH

/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

PKG_RELEASE

1

Layers

[#000] sha256:532f7d227cfd697fe6a6f7bfe8c0cc7baa9d99d3d41d50d9b6394fdb6322f4aa - 11.28% (3.65 MB)

[#001] sha256:ca9806c76fba37abe6fa24445e15d09cad9c9d66d0e8f1718d486896f6fa3ea6 - 5.91% (1.91 MB)

[#002] sha256:077923957f9e18e83143e116cf79977050d1e51c1703922dbd4737f450b50844 - 0.01% (2.74 KB)

[#003] sha256:d65594a401a339f244761d5439dca24d14979a72787e43b4a073c7fdad6ed618 - 0.0% (628 Bytes)

[#004] sha256:933f92857a0a8fa473cb32928ec4197fca0868a7be1452b79b01cadb44b1e1bd - 0.0% (959 Bytes)

[#005] sha256:e9a930b390165f28181e2ee617f993fbab23acd5e13fe159cb7da8912bbd09cf - 0.0% (407 Bytes)

[#006] sha256:be23e64e7ca8be095d5a4adfa035b40a8c120827baa34f74a8bbd3d74f757e0b - 0.0% (1.18 KB)

[#007] sha256:24a7bbeb13c9cf17c0c29d1482a42fe7acadee4850d5a68d23f9a57a44630bc2 - 0.0% (1.37 KB)

[#008] sha256:d7495535432bef5cf0df20a92b2e1dba5b0c24c0a8b89a72e11be457a27cf868 - 51.82% (16.8 MB)

[#009] sha256:69cd3ab76dc481b9df280f17415c7b6f893fe36dd9ed8a03d895264b5360a316 - 30.96% (10 MB)

History

2026-01-28 01:17:01 UTC (buildkit.dockerfile.v0)

ADD alpine-minirootfs-3.23.3-ppc64le.tar.gz / # buildkit

2026-01-28 01:17:01 UTC (buildkit.dockerfile.v0)

CMD ["/bin/sh"]

2026-03-30 02:10:35 UTC (buildkit.dockerfile.v0)

LABEL maintainer=NGINX Docker Maintainers <docker-maint@nginx.com>

2026-03-30 02:10:35 UTC (buildkit.dockerfile.v0)

ENV NGINX_VERSION=1.29.5

2026-03-30 02:10:35 UTC (buildkit.dockerfile.v0)

ENV PKG_RELEASE=1

2026-03-30 02:10:35 UTC (buildkit.dockerfile.v0)

ENV DYNPKG_RELEASE=1

2026-03-30 02:10:35 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 02:10:35 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 02:10:35 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && addgroup -g $GID -S nginx || true && adduser -S -D -H -u $UID -h /var/cache/nginx -s /sbin/nologin -G nginx -g nginx nginx || true && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) set -x && KEY_SHA512="e09fa32f0a0eab2b879ccbbc4d0e4fb9751486eedda75e35fac65802cc9faa266425edf83e261137a2f4d16281ce2c1a5f4502930fe75154723da014214f0655" && wget -O /tmp/nginx_signing.rsa.pub https://nginx.org/keys/nginx_signing.rsa.pub && if echo "$KEY_SHA512 */tmp/nginx_signing.rsa.pub" | sha512sum -c -; then echo "key verification succeeded!"; mv /tmp/nginx_signing.rsa.pub /etc/apk/keys/; else echo "key verification failed!"; exit 1; fi && apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make base && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache gettext-envsubst && apk add --no-cache tzdata && ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log && mkdir /docker-entrypoint.d # buildkit

2026-03-30 02:10:36 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c sed -i 's,listen 80;,listen 8080;,' /etc/nginx/conf.d/default.conf && sed -i '/user nginx;/d' /etc/nginx/nginx.conf && sed -i 's,\(/var\)\{0\,1\}/run/nginx.pid,/tmp/nginx.pid,' /etc/nginx/nginx.conf && sed -i "/^http {/a \ proxy_temp_path /tmp/proxy_temp;\n client_body_temp_path /tmp/client_temp;\n fastcgi_temp_path /tmp/fastcgi_temp;\n uwsgi_temp_path /tmp/uwsgi_temp;\n scgi_temp_path /tmp/scgi_temp;\n" /etc/nginx/nginx.conf && chown -R $UID:0 /var/cache/nginx && chmod -R g+w /var/cache/nginx && chown -R $UID:0 /etc/nginx && chmod -R g+w /etc/nginx # buildkit

2026-03-30 02:10:36 UTC (buildkit.dockerfile.v0)

COPY docker-entrypoint.sh / # buildkit

2026-03-30 02:10:36 UTC (buildkit.dockerfile.v0)

COPY 10-listen-on-ipv6-by-default.sh /docker-entrypoint.d # buildkit

2026-03-30 02:10:36 UTC (buildkit.dockerfile.v0)

COPY 15-local-resolvers.envsh /docker-entrypoint.d # buildkit

2026-03-30 02:10:36 UTC (buildkit.dockerfile.v0)

COPY 20-envsubst-on-templates.sh /docker-entrypoint.d # buildkit

2026-03-30 02:10:36 UTC (buildkit.dockerfile.v0)

COPY 30-tune-worker-processes.sh /docker-entrypoint.d # buildkit

2026-03-30 02:10:36 UTC (buildkit.dockerfile.v0)

ENTRYPOINT ["/docker-entrypoint.sh"]

2026-03-30 02:10:36 UTC (buildkit.dockerfile.v0)

EXPOSE [8080/tcp]

2026-03-30 02:10:36 UTC (buildkit.dockerfile.v0)

STOPSIGNAL SIGQUIT

2026-03-30 02:10:36 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 02:10:36 UTC (buildkit.dockerfile.v0)

CMD ["nginx" "-g" "daemon off;"]

2026-03-30 04:22:19 UTC (buildkit.dockerfile.v0)

ENV NJS_VERSION=0.9.5

2026-03-30 04:22:19 UTC (buildkit.dockerfile.v0)

ENV NJS_RELEASE=1

2026-03-30 04:22:19 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 04:22:19 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 04:22:19 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 04:22:19 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers libxslt-dev gd-dev geoip-dev libedit-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-geoip module-image-filter module-njs module-xslt && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache curl ca-certificates # buildkit

2026-03-30 04:22:19 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 04:48:15 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 04:48:15 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 04:48:15 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 04:48:15 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-perl=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers perl-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-perl && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi # buildkit

2026-03-30 04:48:15 UTC (buildkit.dockerfile.v0)

USER 101

Details

Created

2026-03-30 04:48:31 UTC

Size

29.1 MB

Content Digest

Labels

maintainer

NGINX Docker Maintainers <docker-maint@nginx.com>
org.opencontainers.image.created

2026-03-30T04:35:08.535Z
org.opencontainers.image.description

Unprivileged NGINX Dockerfiles
org.opencontainers.image.licenses

Apache-2.0
org.opencontainers.image.revision

61141700fbe3bb03ee7379fd0a5cba5c9c5fc885
org.opencontainers.image.source

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.title

docker-nginx-unprivileged
org.opencontainers.image.url

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.version

1.29.5-alpine-perl

Environment

DYNPKG_RELEASE

1

NGINX_VERSION

1.29.5

NJS_RELEASE

1

NJS_VERSION

0.9.5

PATH

/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

PKG_RELEASE

1

Layers

[#000] sha256:9da5d16b2a566416844fd0c62fa81165037aa0b7f154a5c1f58f06412739471c - 11.75% (3.42 MB)

[#001] sha256:ff830c8403ec51612ed912babeb8cf5c683aef2b2939040a5a06cc1506cecfe6 - 6.39% (1.86 MB)

[#002] sha256:b8730b3ab6d94cdfacf8a24d4a9b7f5ce407bfb1cecf10bbab22e6ae2f837cf5 - 0.01% (2.73 KB)

[#003] sha256:d65594a401a339f244761d5439dca24d14979a72787e43b4a073c7fdad6ed618 - 0.0% (628 Bytes)

[#004] sha256:114219d671c07a77bb56a736fb87c800d31b70435ed24e37f1212e9809521d47 - 0.0% (959 Bytes)

[#005] sha256:aeb8b34454c824f86dc52a4b35113c0d5b7065dd67407e7f84f0ddad9819e8cd - 0.0% (407 Bytes)

[#006] sha256:241459a6de37b511882be52dcba9b74d9aee82e23f8fa64af9c9ab3a05b28d7f - 0.0% (1.18 KB)

[#007] sha256:dcbf5bb7eeb1bd75a365b149d4a5133ef6b2684f2146e67fde896ad01ac3cec5 - 0.0% (1.37 KB)

[#008] sha256:80f6a899bcbce8e2ac5a589c5986a50eae1ce63875a2755354642757e18c5443 - 49.94% (14.5 MB)

[#009] sha256:a0397157ec066602f4c0d0b9befce02a36de5cf75d81817fbbbfece3f49ada26 - 31.89% (9.28 MB)

History

2026-01-28 03:47:28 UTC (buildkit.dockerfile.v0)

ADD alpine-minirootfs-3.23.3-riscv64.tar.gz / # buildkit

2026-01-28 03:47:28 UTC (buildkit.dockerfile.v0)

CMD ["/bin/sh"]

2026-03-30 02:18:10 UTC (buildkit.dockerfile.v0)

LABEL maintainer=NGINX Docker Maintainers <docker-maint@nginx.com>

2026-03-30 02:18:10 UTC (buildkit.dockerfile.v0)

ENV NGINX_VERSION=1.29.5

2026-03-30 02:18:10 UTC (buildkit.dockerfile.v0)

ENV PKG_RELEASE=1

2026-03-30 02:18:10 UTC (buildkit.dockerfile.v0)

ENV DYNPKG_RELEASE=1

2026-03-30 02:18:10 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 02:18:10 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 02:18:10 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && addgroup -g $GID -S nginx || true && adduser -S -D -H -u $UID -h /var/cache/nginx -s /sbin/nologin -G nginx -g nginx nginx || true && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) set -x && KEY_SHA512="e09fa32f0a0eab2b879ccbbc4d0e4fb9751486eedda75e35fac65802cc9faa266425edf83e261137a2f4d16281ce2c1a5f4502930fe75154723da014214f0655" && wget -O /tmp/nginx_signing.rsa.pub https://nginx.org/keys/nginx_signing.rsa.pub && if echo "$KEY_SHA512 */tmp/nginx_signing.rsa.pub" | sha512sum -c -; then echo "key verification succeeded!"; mv /tmp/nginx_signing.rsa.pub /etc/apk/keys/; else echo "key verification failed!"; exit 1; fi && apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make base && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache gettext-envsubst && apk add --no-cache tzdata && ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log && mkdir /docker-entrypoint.d # buildkit

2026-03-30 02:18:11 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c sed -i 's,listen 80;,listen 8080;,' /etc/nginx/conf.d/default.conf && sed -i '/user nginx;/d' /etc/nginx/nginx.conf && sed -i 's,\(/var\)\{0\,1\}/run/nginx.pid,/tmp/nginx.pid,' /etc/nginx/nginx.conf && sed -i "/^http {/a \ proxy_temp_path /tmp/proxy_temp;\n client_body_temp_path /tmp/client_temp;\n fastcgi_temp_path /tmp/fastcgi_temp;\n uwsgi_temp_path /tmp/uwsgi_temp;\n scgi_temp_path /tmp/scgi_temp;\n" /etc/nginx/nginx.conf && chown -R $UID:0 /var/cache/nginx && chmod -R g+w /var/cache/nginx && chown -R $UID:0 /etc/nginx && chmod -R g+w /etc/nginx # buildkit

2026-03-30 02:18:11 UTC (buildkit.dockerfile.v0)

COPY docker-entrypoint.sh / # buildkit

2026-03-30 02:18:11 UTC (buildkit.dockerfile.v0)

COPY 10-listen-on-ipv6-by-default.sh /docker-entrypoint.d # buildkit

2026-03-30 02:18:11 UTC (buildkit.dockerfile.v0)

COPY 15-local-resolvers.envsh /docker-entrypoint.d # buildkit

2026-03-30 02:18:11 UTC (buildkit.dockerfile.v0)

COPY 20-envsubst-on-templates.sh /docker-entrypoint.d # buildkit

2026-03-30 02:18:11 UTC (buildkit.dockerfile.v0)

COPY 30-tune-worker-processes.sh /docker-entrypoint.d # buildkit

2026-03-30 02:18:11 UTC (buildkit.dockerfile.v0)

ENTRYPOINT ["/docker-entrypoint.sh"]

2026-03-30 02:18:11 UTC (buildkit.dockerfile.v0)

EXPOSE [8080/tcp]

2026-03-30 02:18:11 UTC (buildkit.dockerfile.v0)

STOPSIGNAL SIGQUIT

2026-03-30 02:18:11 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 02:18:11 UTC (buildkit.dockerfile.v0)

CMD ["nginx" "-g" "daemon off;"]

2026-03-30 04:31:03 UTC (buildkit.dockerfile.v0)

ENV NJS_VERSION=0.9.5

2026-03-30 04:31:03 UTC (buildkit.dockerfile.v0)

ENV NJS_RELEASE=1

2026-03-30 04:31:03 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 04:31:03 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 04:31:03 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 04:31:03 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers libxslt-dev gd-dev geoip-dev libedit-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-geoip module-image-filter module-njs module-xslt && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache curl ca-certificates # buildkit

2026-03-30 04:31:03 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 04:48:31 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 04:48:31 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 04:48:31 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 04:48:31 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-perl=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers perl-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-perl && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi # buildkit

2026-03-30 04:48:31 UTC (buildkit.dockerfile.v0)

USER 101

Details

Created

2026-03-30 04:47:44 UTC

Size

32.5 MB

Content Digest

Labels

maintainer

NGINX Docker Maintainers <docker-maint@nginx.com>
org.opencontainers.image.created

2026-03-30T04:35:08.535Z
org.opencontainers.image.description

Unprivileged NGINX Dockerfiles
org.opencontainers.image.licenses

Apache-2.0
org.opencontainers.image.revision

61141700fbe3bb03ee7379fd0a5cba5c9c5fc885
org.opencontainers.image.source

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.title

docker-nginx-unprivileged
org.opencontainers.image.url

https://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.version

1.29.5-alpine-perl

Environment

DYNPKG_RELEASE

1

NGINX_VERSION

1.29.5

NJS_RELEASE

1

NJS_VERSION

0.9.5

PATH

/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

PKG_RELEASE

1

Layers

[#000] sha256:623c99520afcb8c68e21bd22d3bc252ae348c276fb9c45a79aeccb4caf2b8d9f - 10.95% (3.55 MB)

[#001] sha256:7b2a65c0865351f459a5b3ca8f468bafb8ba6744c18f2a8c090f1e66020293e2 - 5.97% (1.94 MB)

[#002] sha256:fccde2c0573ced248501e1fa266d23c169015cad8781168d7325d840aa1bf6cf - 0.01% (2.73 KB)

[#003] sha256:d65594a401a339f244761d5439dca24d14979a72787e43b4a073c7fdad6ed618 - 0.0% (628 Bytes)

[#004] sha256:36d27d1ea1764429c4c606729179490927fdec48fce6d9cf18dc174882fac459 - 0.0% (959 Bytes)

[#005] sha256:d0a912e01aaaa76c7c004801c50d08172f2026c9cfca34ac3ed6735c8d04bf03 - 0.0% (407 Bytes)

[#006] sha256:1c107f9d55ef7c8b4747fedbcc224839908214362f20a9ab092588c839005c83 - 0.0% (1.18 KB)

[#007] sha256:e4c1f03e3bca5bfe936bd07696c8be4b4a847fcaadbdfb2b9c01f05ea314a81b - 0.0% (1.37 KB)

[#008] sha256:845c7849ef06dbbbde3f612a95b252f6e598232f5d2ad22a7f805ccb88c77758 - 51.22% (16.6 MB)

[#009] sha256:e7dad46057248249c6f239b9703516caa9c7d08e79857558006a94dd8edb232c - 31.85% (10.3 MB)

History

2026-01-28 01:17:06 UTC (buildkit.dockerfile.v0)

ADD alpine-minirootfs-3.23.3-s390x.tar.gz / # buildkit

2026-01-28 01:17:06 UTC (buildkit.dockerfile.v0)

CMD ["/bin/sh"]

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

LABEL maintainer=NGINX Docker Maintainers <docker-maint@nginx.com>

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

ENV NGINX_VERSION=1.29.5

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

ENV PKG_RELEASE=1

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

ENV DYNPKG_RELEASE=1

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && addgroup -g $GID -S nginx || true && adduser -S -D -H -u $UID -h /var/cache/nginx -s /sbin/nologin -G nginx -g nginx nginx || true && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) set -x && KEY_SHA512="e09fa32f0a0eab2b879ccbbc4d0e4fb9751486eedda75e35fac65802cc9faa266425edf83e261137a2f4d16281ce2c1a5f4502930fe75154723da014214f0655" && wget -O /tmp/nginx_signing.rsa.pub https://nginx.org/keys/nginx_signing.rsa.pub && if echo "$KEY_SHA512 */tmp/nginx_signing.rsa.pub" | sha512sum -c -; then echo "key verification succeeded!"; mv /tmp/nginx_signing.rsa.pub /etc/apk/keys/; else echo "key verification failed!"; exit 1; fi && apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make base && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache gettext-envsubst && apk add --no-cache tzdata && ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log && mkdir /docker-entrypoint.d # buildkit

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c sed -i 's,listen 80;,listen 8080;,' /etc/nginx/conf.d/default.conf && sed -i '/user nginx;/d' /etc/nginx/nginx.conf && sed -i 's,\(/var\)\{0\,1\}/run/nginx.pid,/tmp/nginx.pid,' /etc/nginx/nginx.conf && sed -i "/^http {/a \ proxy_temp_path /tmp/proxy_temp;\n client_body_temp_path /tmp/client_temp;\n fastcgi_temp_path /tmp/fastcgi_temp;\n uwsgi_temp_path /tmp/uwsgi_temp;\n scgi_temp_path /tmp/scgi_temp;\n" /etc/nginx/nginx.conf && chown -R $UID:0 /var/cache/nginx && chmod -R g+w /var/cache/nginx && chown -R $UID:0 /etc/nginx && chmod -R g+w /etc/nginx # buildkit

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

COPY docker-entrypoint.sh / # buildkit

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

COPY 10-listen-on-ipv6-by-default.sh /docker-entrypoint.d # buildkit

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

COPY 15-local-resolvers.envsh /docker-entrypoint.d # buildkit

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

COPY 20-envsubst-on-templates.sh /docker-entrypoint.d # buildkit

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

COPY 30-tune-worker-processes.sh /docker-entrypoint.d # buildkit

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

ENTRYPOINT ["/docker-entrypoint.sh"]

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

EXPOSE [8080/tcp]

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

STOPSIGNAL SIGQUIT

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 02:18:18 UTC (buildkit.dockerfile.v0)

CMD ["nginx" "-g" "daemon off;"]

2026-03-30 04:24:55 UTC (buildkit.dockerfile.v0)

ENV NJS_VERSION=0.9.5

2026-03-30 04:24:55 UTC (buildkit.dockerfile.v0)

ENV NJS_RELEASE=1

2026-03-30 04:24:55 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 04:24:55 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 04:24:55 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 04:24:55 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers libxslt-dev gd-dev geoip-dev libedit-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-geoip module-image-filter module-njs module-xslt && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache curl ca-certificates # buildkit

2026-03-30 04:24:55 UTC (buildkit.dockerfile.v0)

USER 101

2026-03-30 04:47:44 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-03-30 04:47:44 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-03-30 04:47:44 UTC (buildkit.dockerfile.v0)

USER root

2026-03-30 04:47:44 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-perl=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers perl-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"b8584eaa97130ba7743dfbb2a10f665d64cb54b864e2038d0fd298d24682fc05eb4472738430b15862dabc6f374917f1b9889117051a852d36d0a6c8bc898921 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-perl && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi # buildkit

2026-03-30 04:47:44 UTC (buildkit.dockerfile.v0)

USER 101

Danger Zone

Delete Tag

Please be careful as this will not just delete the reference but also the actual content!

For example when you have latest and v1.2.3 both pointing to the same image
the deletion of latest will also permanently remove v1.2.3.