Tag

vfl-admin:e3b5e57b83d2d11274b668fd89aace8e6da40828
Content Digest: sha256:f265a5ac37c6f2754d3dacfe52c4c4a0cd630dbf7af2c71f583b458fe6486f11
Manifests
Details
Content Digest

sha256:1a1760f7a0a2502931c6208f018b895a6434afde478eead6edacf703a30adc91

Created

2026-10-09 07:21:31 UTC

Size

22.4 MB


Labels
  • maintainer
    NGINX Docker Maintainers <docker-maint@nginx.com>
  • org.opencontainers.image.created
    2026-05-11T02:30:43.384Z
  • org.opencontainers.image.description
    Unprivileged NGINX Dockerfiles
  • org.opencontainers.image.licenses
    Apache-2.0
  • org.opencontainers.image.revision
    c4edb2fc1a693a7bdae4ab2bbc1c7fe63622290f
  • org.opencontainers.image.source
    https://github.com/nginx/docker-nginx-unprivileged
  • org.opencontainers.image.title
    docker-nginx-unprivileged
  • org.opencontainers.image.url
    https://github.com/nginx/docker-nginx-unprivileged
  • org.opencontainers.image.version
    1.29.8-alpine

Environment
DYNPKG_RELEASE

1

NGINX_VERSION

1.29.8

NJS_RELEASE

1

NJS_VERSION

0.9.6

PATH

/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

PKG_RELEASE

1


Layers

[#000] sha256:6a0ac1617861a677b045b7ff88545213ec31c0ff08763195a70a4a5adda577bb - 16.49% (3.69 MB)

[#001] sha256:a59fda7b685c4ebb8ce32a651bb8a658cf3deef70ab1a1c48949f4044e7adb6f - 7.98% (1.78 MB)

[#002] sha256:21179318df10e9e55989e27603c211d6175028e90b7a88f09f7b8cd005c15884 - 0.01% (2.73 KB)

[#003] sha256:d27683448c0c6746887b39bb7c17ee483c3aee1f2d742396f83931a26293ecee - 0.0% (625 Bytes)

[#004] sha256:d9bbd50eb93d816d954d71d20a0f4321392d6d1094ebd07373c898d4c96bddd9 - 0.0% (955 Bytes)

[#005] sha256:a6149ef9330e099be60f1c5c087197a29f8e549c796f2c4e830e5821b4a7219c - 0.0% (403 Bytes)

[#006] sha256:7afb425babf4f65da5fbc6dec68235c24bdff24b6d97625387ef5a2df5361e7d - 0.01% (1.17 KB)

[#007] sha256:7d12c185557730cd127ae6641f2a971889c80ef273fc98c76812eaf288dc8559 - 0.01% (1.36 KB)

[#008] sha256:80e1316c58deb5457520401af597207c6e9f1b306a83822d8911f5435f7e8181 - 73.96% (16.5 MB)

[#009] sha256:0f39a174a5d2a2286e1d0ad256ebaffb683b38c79dc3060363f3927e080878a1 - 0.0% (954 Bytes)

[#010] sha256:534d8628cc62b9c68c5d20e02071577f735cdd34f3fe58726c4ce00ae3290283 - 0.0% (808 Bytes)

[#011] sha256:15ef005dafbaea670b41de792342ab85a9cb854c2f12bd848df9ea2160d17533 - 0.0% (401 Bytes)

[#012] sha256:4dc075d8beacae1199fbe5eedb5f302bc0f8e801bf6a955841d064844d82204a - 1.53% (350 KB)


History
2026-04-15 20:01:40 UTC (buildkit.dockerfile.v0)

ADD alpine-minirootfs-3.23.4-x86_64.tar.gz / # buildkit

2026-04-15 20:01:40 UTC (buildkit.dockerfile.v0)

CMD ["/bin/sh"]

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

LABEL maintainer=NGINX Docker Maintainers <docker-maint@nginx.com>

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

ENV NGINX_VERSION=1.29.8

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

ENV PKG_RELEASE=1

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

ENV DYNPKG_RELEASE=1

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && addgroup -g $GID -S nginx || true && adduser -S -D -H -u $UID -h /var/cache/nginx -s /sbin/nologin -G nginx -g nginx nginx || true && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) set -x && KEY_SHA512="e09fa32f0a0eab2b879ccbbc4d0e4fb9751486eedda75e35fac65802cc9faa266425edf83e261137a2f4d16281ce2c1a5f4502930fe75154723da014214f0655" && wget -O /tmp/nginx_signing.rsa.pub https://nginx.org/keys/nginx_signing.rsa.pub && if echo "$KEY_SHA512 */tmp/nginx_signing.rsa.pub" | sha512sum -c -; then echo "key verification succeeded!"; mv /tmp/nginx_signing.rsa.pub /etc/apk/keys/; else echo "key verification failed!"; exit 1; fi && apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"7074c3ba1ece708140afd0220b16df77651fbb56cc012e901bc1c4a80531872b7a58ad97a28357646575ce625e94a0540796c045f95d33e40e6d3874ce7b3d79 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make base && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache gettext-envsubst && apk add --no-cache tzdata && ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log && mkdir /docker-entrypoint.d # buildkit

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c sed -i 's,listen 80;,listen 8080;,' /etc/nginx/conf.d/default.conf && sed -i '/user nginx;/d' /etc/nginx/nginx.conf && sed -i 's,\(/var\)\{0\,1\}/run/nginx.pid,/tmp/nginx.pid,' /etc/nginx/nginx.conf && sed -i "/^http {/a \ proxy_temp_path /tmp/proxy_temp;\n client_body_temp_path /tmp/client_temp;\n fastcgi_temp_path /tmp/fastcgi_temp;\n uwsgi_temp_path /tmp/uwsgi_temp;\n scgi_temp_path /tmp/scgi_temp;\n" /etc/nginx/nginx.conf && chown -R $UID:0 /var/cache/nginx && chmod -R g+w /var/cache/nginx && chown -R $UID:0 /etc/nginx && chmod -R g+w /etc/nginx # buildkit

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

COPY docker-entrypoint.sh / # buildkit

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

COPY 10-listen-on-ipv6-by-default.sh /docker-entrypoint.d # buildkit

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

COPY 15-local-resolvers.envsh /docker-entrypoint.d # buildkit

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

COPY 20-envsubst-on-templates.sh /docker-entrypoint.d # buildkit

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

COPY 30-tune-worker-processes.sh /docker-entrypoint.d # buildkit

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

ENTRYPOINT ["/docker-entrypoint.sh"]

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

EXPOSE [8080/tcp]

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

STOPSIGNAL SIGQUIT

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

USER 101

2026-05-11 00:52:15 UTC (buildkit.dockerfile.v0)

CMD ["nginx" "-g" "daemon off;"]

2026-05-11 02:30:52 UTC (buildkit.dockerfile.v0)

ENV NJS_VERSION=0.9.6

2026-05-11 02:30:52 UTC (buildkit.dockerfile.v0)

ENV NJS_RELEASE=1

2026-05-11 02:30:52 UTC (buildkit.dockerfile.v0)

ARG UID=101

2026-05-11 02:30:52 UTC (buildkit.dockerfile.v0)

ARG GID=101

2026-05-11 02:30:52 UTC (buildkit.dockerfile.v0)

USER root

2026-05-11 02:30:52 UTC (buildkit.dockerfile.v0)

RUN |2 UID=101 GID=101 /bin/sh -c set -x && apkArch="$(cat /etc/apk/arch)" && nginxPackages=" nginx=${NGINX_VERSION}-r${PKG_RELEASE} nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE} nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE} " && apk add --no-cache --virtual .checksum-deps openssl && case "$apkArch" in x86_64|aarch64) apk add -X "https://nginx.org/packages/mainline/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages ;; *) set -x && tempDir="$(mktemp -d)" && chown nobody:nobody $tempDir && apk add --no-cache --virtual .build-deps gcc libc-dev make openssl-dev pcre2-dev zlib-dev linux-headers libxslt-dev gd-dev geoip-dev libedit-dev bash alpine-sdk findutils curl && su nobody -s /bin/sh -c " export HOME=${tempDir} && cd ${tempDir} && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && PKGOSSCHECKSUM=\"7074c3ba1ece708140afd0220b16df77651fbb56cc012e901bc1c4a80531872b7a58ad97a28357646575ce625e94a0540796c045f95d33e40e6d3874ce7b3d79 *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\" && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then echo \"pkg-oss tarball checksum verification succeeded!\"; else echo \"pkg-oss tarball checksum verification failed!\"; exit 1; fi && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE} && cd alpine && make module-geoip module-image-filter module-njs module-xslt && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz " && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/ && apk del --no-network .build-deps && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages ;; esac && apk del --no-network .checksum-deps && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi && apk add --no-cache curl ca-certificates # buildkit

2026-05-11 02:30:52 UTC (buildkit.dockerfile.v0)

USER 101

2026-10-09 07:20:12 UTC (buildkit.dockerfile.v0)

COPY deploy/admin-nginx.conf /etc/nginx/conf.d/default.conf # buildkit

2026-10-09 07:20:13 UTC (buildkit.dockerfile.v0)

COPY deploy/admin-security-headers.conf /etc/nginx/vfl/admin-security-headers.conf # buildkit

2026-10-09 07:20:13 UTC (buildkit.dockerfile.v0)

COPY deploy/proxy-headers.conf /etc/nginx/vfl/proxy-headers.conf # buildkit

2026-10-09 07:21:31 UTC (buildkit.dockerfile.v0)

COPY /src/dist/apps/admin/browser/ /usr/share/nginx/html/ # buildkit

2026-10-09 07:21:31 UTC (buildkit.dockerfile.v0)

EXPOSE [8080/tcp]

2026-10-09 07:21:31 UTC (buildkit.dockerfile.v0)

HEALTHCHECK {Test:[CMD-SHELL wget -q -O /dev/null http://127.0.0.1:8080/ || exit 1] Interval:30s Timeout:5s StartPeriod:0s StartInterval:0s Retries:3}

Danger Zone
Delete Tag

Please be careful as this will not just delete the reference but also the actual content!

For example when you have latest and v1.2.3 both pointing to the same image
the deletion of latest will also permanently remove v1.2.3.