Alpine Docker Container Image

This is a basic alpine image used in Wodby's docker images

Use image revision tags such as wodby/alpine:3.24-rN to select a Wodby image revision. Major and minor tags use the repository release number, starting at r0. Full-version tags such as wodby/alpine:3.24.2-r0 start at r0 for each exact upstream version. Every published versioned revision tag has a matching annotated Git tag pointing to its release commit. Existing tags remain available after support for their major or minor version ends. See release tags for available revisions and the image revision policy for upgrade guidance. Previously published image tags remain available.

About images:

• All images are based on Alpine Linux
• Base image: alpine

• GitHub actions builds

• Docker Hub

Supported tags and respective Dockerfile links:

• 3.24, 3, latest (Dockerfile)
• 3.23 (Dockerfile)
• 3.22 (Dockerfile)
• 3.21 (Dockerfile)
• 3.24-dev, 3-dev, dev (Dockerfile)

All images built for linux/amd64 and linux/arm64

This image contains the following helper scripts:

• compare_semver - compares two semantic versions
• exec_init_scripts - execute all .sh scripts from /docker-entrypoint-init.d/. Useful to have in every docker image
• gen_ssh_keys - generates SSH keys
• gen_ssl_certs - generate SSL certificates
• get_archive - copies (or downloads) and unpacks an archive
• gpg_verify - verify GPG signature from a list of key servers
• gpg_decrypt - decrypt an artifact that contains GPG signature
• wait_for - executes a command with for N times with N timeout until it return 0

See test.sh for examples.

Build with the Makefile to use the base image digests in base-images.mk. Local builds and CI resolve the same version and variant to the same multi-platform image. A version without a pin fails before the build starts.

When adding a supported base version or variant, add its image index digest to base-images.mk. For a custom build, override BASE_IMAGE with a complete repository:tag@sha256:... reference.

The supported images are rebuilt and tested daily to pick up Alpine package fixes. When package upgrades resolve known CVEs since the last image revision, a new revision is released with the affected packages, versions and CVEs in its Git tag notes. Digest changes alone do not create a revision. Revision builds verify that the advertised fixes are present before publishing.