haproxy (container image)
Built-from-source container image of the HAProxy proxy and load balancer
Tags
Docker Hub
Available on Docker Hub as ricardbejarano/haproxy
:
2.1.7-glibc
,2.1.7
,glibc
,master
,latest
(Dockerfile.glibc) (about12.5MB
)2.1.7-musl
,musl
(Dockerfile.musl) (about19.9MB
)
Quay
Available on Quay as:
quay.io/ricardbejarano/haproxy
,quay.io/ricardbejarano/haproxy-glibc
, tags:2.1.7
,master
,latest
(Dockerfile.glibc) (about12.5MB
)quay.io/ricardbejarano/haproxy-musl
, tags:2.1.7
,master
,latest
(Dockerfile.musl) (about19.9MB
)
Features
- Super tiny (see Tags)
- Compiled from source (with binary exploit mitigations) during build time
- Built
FROM scratch
, with zero bloat (see Filesystem) - Reduced attack surface (no shell, no UNIX tools, no package manager...)
- Runs as unprivileged (non-
root
) user
Configuration
Volumes
- Mount your configuration at
/haproxy.cfg
.
Building
- To build the
glibc
-based image:$ docker build -t haproxy:glibc -f Dockerfile.glibc .
- To build the
musl
-based image:$ docker build -t haproxy:musl -f Dockerfile.musl .
Filesystem
glibc
Based on the glibc implementation of libc
. Dynamically linked.
/
โโโ etc/
โ โโโ group
โ โโโ passwd
โ โโโ ssl/
โ โโโ certs/
โ โโโ ca-certificates.crt
โโโ haproxy
โโโ lib/
โ โโโ x86_64-linux-gnu/
โ โโโ libc.so.6
โ โโโ libcrypt.so.1
โ โโโ libcrypto.so.1.1
โ โโโ libdl.so.2
โ โโโ libm.so.6
โ โโโ libnss_dns.so.2
โ โโโ libnss_files.so.2
โ โโโ libpcre.so.1
โ โโโ libpcreposix.so.0
โ โโโ libpthread.so.0
โ โโโ libresolv.so.2
โ โโโ librt.so.1
โ โโโ libssl.so.1.1
โ โโโ libz.so.1
โโโ lib64/
โโโ ld-linux-x86-64.so.2
musl
Based on the musl implementation of libc
. Dynamically linked.
/
โโโ etc/
โ โโโ group
โ โโโ passwd
โ โโโ ssl/
โ โโโ certs/
โ โโโ ca-certificates.crt
โโโ haproxy
โโโ lib/
โโโ ld-musl-x86_64.so.1
License
See LICENSE.