Add README, DOCKERHUB overview, and prerelease -test tag support
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
@@ -0,0 +1,161 @@
|
||||
# .NET Docker Images
|
||||
|
||||
<a href="https://git.openharbor.io/svrnty/docker-dotnet" target="_blank"><img src="https://img.shields.io/badge/Git-Repository-orange?logo=gitea" alt="Git Repository"></a>
|
||||
<a href="https://hub.docker.com/r/svrnty/dotnet" target="_blank"><img src="https://img.shields.io/badge/Docker%20Hub-svrnty%2Fdotnet-blue?logo=docker" alt="Docker Hub"></a>
|
||||
<a href="https://hub.docker.com/r/svrnty/dotnet" target="_blank"><img src="https://img.shields.io/docker/pulls/svrnty/dotnet?logo=docker" alt="Docker Pulls"></a>
|
||||
<a href="https://dotnet.microsoft.com" target="_blank"><img src="https://img.shields.io/badge/.NET-10%20|%209%20|%208-512BD4?logo=dotnet" alt=".NET"></a>
|
||||
<a href="https://wolfi.dev" target="_blank"><img src="https://img.shields.io/badge/Base-Wolfi-purple?logo=linux" alt="Wolfi"></a>
|
||||
|
||||
Minimal .NET Docker images for production and CI/CD. Built on [Wolfi](https://wolfi.dev), a security-focused Linux distribution designed for containers. All supported (non-EOL) .NET versions are rebuilt automatically.
|
||||
|
||||
## Images
|
||||
|
||||
| Variant | Use Case | .NET 10 (LTS) | .NET 9 (STS) | .NET 8 | Arch |
|
||||
|---------|----------|----------------|---------------|--------|------|
|
||||
| <a href="https://hub.docker.com/r/svrnty/dotnet/tags?name=runtime-" target="_blank"><img src="https://img.shields.io/badge/dotnet-runtime-blue?logo=docker" alt="runtime"></a> | Production web apps | `runtime-10` `runtime-lts` | `runtime-9` `runtime-sts` | `runtime-8` | <img src="https://img.shields.io/badge/amd64-E65100" alt="amd64"> <img src="https://img.shields.io/badge/arm64-2e7d32" alt="arm64"> |
|
||||
| <a href="https://hub.docker.com/r/svrnty/dotnet/tags?name=runtime-invariant-" target="_blank"><img src="https://img.shields.io/badge/dotnet-runtime--invariant-blue?logo=docker" alt="runtime-invariant"></a> | Minimal production (UTC-only) | `runtime-invariant-10` `runtime-invariant-lts` | `runtime-invariant-9` `runtime-invariant-sts` | `runtime-invariant-8` | <img src="https://img.shields.io/badge/amd64-E65100" alt="amd64"> <img src="https://img.shields.io/badge/arm64-2e7d32" alt="arm64"> |
|
||||
| <a href="https://hub.docker.com/r/svrnty/dotnet/tags?name=sdk-" target="_blank"><img src="https://img.shields.io/badge/dotnet-sdk-blue?logo=docker" alt="sdk"></a> | Building .NET apps | `sdk-10` `sdk-lts` | `sdk-9` `sdk-sts` | `sdk-8` | <img src="https://img.shields.io/badge/amd64-E65100" alt="amd64"> <img src="https://img.shields.io/badge/arm64-2e7d32" alt="arm64"> |
|
||||
|
||||
## Variants
|
||||
|
||||
| Variant | Includes | Shell | ICU/Globalization | User |
|
||||
|---------|----------|-------|-------------------|------|
|
||||
| **runtime** | ASP.NET Core runtime | No | Yes | 65532 (nonroot) |
|
||||
| **runtime-invariant** | ASP.NET Core runtime | No | No (invariant mode) | 65532 (nonroot) |
|
||||
| **sdk** | .NET SDK + bash, git, curl | Yes (bash) | Yes | root |
|
||||
|
||||
- **runtime** - Full globalization support (ICU + tzdata). Use this for apps that need locale-aware formatting, time zones, or culture-specific behavior.
|
||||
- **runtime-invariant** - No ICU or tzdata. Smallest image size. Use this for APIs that only need UTC and ordinal string comparison.
|
||||
- **sdk** - Everything needed to build .NET apps. Runs as root so `dotnet restore` can write to global caches.
|
||||
|
||||
## Why Wolfi?
|
||||
|
||||
[Wolfi](https://wolfi.dev) is a lightweight Linux distribution built specifically for containers. It provides:
|
||||
|
||||
- **Minimal footprint** - Only essential packages, nothing extra
|
||||
- **Daily security updates** - Patches applied quickly
|
||||
- **Designed for containers** - No legacy cruft from traditional distros
|
||||
|
||||
## Features
|
||||
|
||||
- **Lightweight** - Optimized for fast CI/CD pulls
|
||||
- **Secure** - Built on Wolfi with continuous vulnerability scanning
|
||||
- **Multi-arch** - Supports both `linux/amd64` and `linux/arm64`
|
||||
- **Non-root** - Runtime images run as unprivileged user (UID 65532)
|
||||
- **Supply chain security** - SBOM and SLSA provenance attestations included
|
||||
- **EOL-aware** - Versions are automatically dropped when they reach end-of-life
|
||||
|
||||
## Dockerfile Examples
|
||||
|
||||
### Web API (recommended)
|
||||
|
||||
```dockerfile
|
||||
ARG BUILDPLATFORM
|
||||
FROM --platform=$BUILDPLATFORM svrnty/dotnet:sdk-10 AS build
|
||||
|
||||
WORKDIR /source
|
||||
COPY . .
|
||||
WORKDIR /source/MyApp.Api
|
||||
|
||||
ARG TARGETARCH
|
||||
RUN case "$TARGETARCH" in \
|
||||
amd64) ARCH=x64 ;; \
|
||||
arm64) ARCH=arm64 ;; \
|
||||
*) ARCH=$TARGETARCH ;; \
|
||||
esac && \
|
||||
dotnet publish -a $ARCH --self-contained false -o /app
|
||||
|
||||
FROM svrnty/dotnet:runtime-invariant-10 AS final
|
||||
WORKDIR /app
|
||||
COPY --from=build /app .
|
||||
USER 65532
|
||||
EXPOSE 8080
|
||||
ENTRYPOINT ["/usr/share/dotnet/dotnet", "MyApp.Api.dll"]
|
||||
```
|
||||
|
||||
### Web API with globalization (ICU)
|
||||
|
||||
```dockerfile
|
||||
ARG BUILDPLATFORM
|
||||
FROM --platform=$BUILDPLATFORM svrnty/dotnet:sdk-lts AS build
|
||||
|
||||
WORKDIR /source
|
||||
COPY . .
|
||||
|
||||
ARG TARGETARCH
|
||||
RUN case "$TARGETARCH" in \
|
||||
amd64) ARCH=x64 ;; \
|
||||
arm64) ARCH=arm64 ;; \
|
||||
*) ARCH=$TARGETARCH ;; \
|
||||
esac && \
|
||||
dotnet publish MyApp.sln -a $ARCH --self-contained false -o /app
|
||||
|
||||
FROM svrnty/dotnet:runtime-lts AS final
|
||||
WORKDIR /app
|
||||
COPY --from=build /app .
|
||||
USER 65532
|
||||
EXPOSE 8080
|
||||
ENTRYPOINT ["/usr/share/dotnet/dotnet", "MyApp.dll"]
|
||||
```
|
||||
|
||||
### Worker service
|
||||
|
||||
```dockerfile
|
||||
ARG BUILDPLATFORM
|
||||
FROM --platform=$BUILDPLATFORM svrnty/dotnet:sdk-10 AS build
|
||||
|
||||
WORKDIR /source
|
||||
COPY . .
|
||||
|
||||
ARG TARGETARCH
|
||||
RUN case "$TARGETARCH" in \
|
||||
amd64) ARCH=x64 ;; \
|
||||
arm64) ARCH=arm64 ;; \
|
||||
*) ARCH=$TARGETARCH ;; \
|
||||
esac && \
|
||||
dotnet publish MyWorker -a $ARCH --self-contained false -o /app
|
||||
|
||||
FROM svrnty/dotnet:runtime-invariant-10 AS final
|
||||
WORKDIR /app
|
||||
COPY --from=build /app .
|
||||
USER 65532
|
||||
ENTRYPOINT ["/usr/share/dotnet/dotnet", "MyWorker.dll"]
|
||||
```
|
||||
|
||||
## CI/CD (Gitea/GitHub Actions)
|
||||
|
||||
```yaml
|
||||
jobs:
|
||||
build:
|
||||
runs-on: ubuntu-latest
|
||||
container:
|
||||
image: svrnty/dotnet:sdk-lts
|
||||
steps:
|
||||
- uses: actions/checkout@v4
|
||||
- run: dotnet restore
|
||||
- run: dotnet test --no-restore
|
||||
- run: dotnet publish -c Release -o /app
|
||||
```
|
||||
|
||||
## Tags
|
||||
|
||||
Each variant is tagged with:
|
||||
|
||||
- `<variant>-<major>` - Latest patch for a major version (e.g., `runtime-10`)
|
||||
- `<variant>-<version>` - Exact version pin (e.g., `runtime-10.0.2`, `sdk-10.0.102`)
|
||||
- `<variant>-lts` - Floating tag pointing to the highest active LTS (currently .NET 10)
|
||||
- `<variant>-sts` - Floating tag pointing to the highest active STS (currently .NET 9)
|
||||
|
||||
## Automatic Updates
|
||||
|
||||
Images are automatically rebuilt when:
|
||||
|
||||
- New .NET patch versions are released (daily check)
|
||||
- Base image security updates are available (weekly rebuild)
|
||||
- A .NET version reaches EOL, it is automatically excluded
|
||||
|
||||
Every build is scanned with Docker Scout and includes supply chain attestations (SBOM, SLSA provenance).
|
||||
|
||||
## License
|
||||
|
||||
MIT
|
||||
Reference in New Issue
Block a user