haproxy (container image)

Built-from-source container image of the HAProxy proxy and load balancer

Tags

Docker Hub

Available on Docker Hub as ricardbejarano/haproxy:

• 2.1.7-glibc, 2.1.7, glibc, master, latest (Dockerfile.glibc) (about 12.5MB)
• 2.1.7-musl, musl (Dockerfile.musl) (about 19.9MB)

Quay

Available on Quay as:

• quay.io/ricardbejarano/haproxy, quay.io/ricardbejarano/haproxy-glibc, tags: 2.1.7, master, latest (Dockerfile.glibc) (about 12.5MB)
• quay.io/ricardbejarano/haproxy-musl, tags: 2.1.7, master, latest (Dockerfile.musl) (about 19.9MB)

Features

• Super tiny (see Tags)
• Compiled from source (with binary exploit mitigations) during build time
• Built FROM scratch, with zero bloat (see Filesystem)
• Reduced attack surface (no shell, no UNIX tools, no package manager...)
• Runs as unprivileged (non-root) user

Configuration

Volumes

• Mount your configuration at /haproxy.cfg.

Building

• To build the glibc-based image: $ docker build -t haproxy:glibc -f Dockerfile.glibc .
• To build the musl-based image: $ docker build -t haproxy:musl -f Dockerfile.musl .

Filesystem

glibc

Based on the glibc implementation of libc. Dynamically linked.

/
├── etc/
│   ├── group
│   ├── passwd
│   └── ssl/
│       └── certs/
│           └── ca-certificates.crt
├── haproxy
├── lib/
│   └── x86_64-linux-gnu/
│       ├── libc.so.6
│       ├── libcrypt.so.1
│       ├── libcrypto.so.1.1
│       ├── libdl.so.2
│       ├── libm.so.6
│       ├── libnss_dns.so.2
│       ├── libnss_files.so.2
│       ├── libpcre.so.1
│       ├── libpcreposix.so.0
│       ├── libpthread.so.0
│       ├── libresolv.so.2
│       ├── librt.so.1
│       ├── libssl.so.1.1
│       └── libz.so.1
└── lib64/
    └── ld-linux-x86-64.so.2

musl

Based on the musl implementation of libc. Dynamically linked.

/
├── etc/
│   ├── group
│   ├── passwd
│   └── ssl/
│       └── certs/
│           └── ca-certificates.crt
├── haproxy
└── lib/
    └── ld-musl-x86_64.so.1

License

See LICENSE.