Mathias Beaulieu-Duncan b7b87035d9 Add EOL column to images table

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-02-03 15:27:12 -05:00

4.0 KiB

Raw Blame History

.NET Docker Images

Minimal .NET Docker images for production and CI/CD. Built on Wolfi, a security-focused Linux distribution designed for containers. All supported (non-EOL) .NET versions are rebuilt automatically.

Images

Version	`runtime`	`runtime-invariant`	`sdk`	Arch	EOL
.NET 10 (LTS)	`runtime-10` `runtime-lts`	`runtime-invariant-10` `runtime-invariant-lts`	`sdk-10` `sdk-lts`	amd64 arm64	2028-11-14
.NET 9 (STS)	`runtime-9` `runtime-sts`	`runtime-invariant-9` `runtime-invariant-sts`	`sdk-9` `sdk-sts`	amd64 arm64	2026-05-12
.NET 8	`runtime-8`	`runtime-invariant-8`	`sdk-8`	amd64 arm64	2026-11-10

Variants

runtime - ASP.NET Core runtime with ICU/globalization support
runtime-invariant - ASP.NET Core runtime without ICU (smallest, invariant mode)
sdk - .NET SDK with bash, git, curl for building apps

Why Wolfi?

Wolfi is a lightweight Linux distribution built specifically for containers. It provides:

Minimal footprint - Only essential packages, nothing extra
Daily security updates - Patches applied quickly
Designed for containers - No legacy cruft from traditional distros

Features

Lightweight - Optimized for fast CI/CD pulls
Secure - Built on Wolfi with continuous vulnerability scanning
Multi-arch - Supports both linux/amd64 and linux/arm64
Non-root - Runtime images run as unprivileged user (UID 65532)
Supply chain security - SBOM and SLSA provenance attestations included
EOL-aware - Versions are automatically dropped when they reach end-of-life

Dockerfile Examples

Web API

ARG BUILDPLATFORM
FROM --platform=$BUILDPLATFORM svrnty/dotnet:sdk-10 AS build

WORKDIR /source
COPY . .
WORKDIR /source/MyApp.Api

ARG TARGETARCH
RUN case "$TARGETARCH" in \
      amd64) ARCH=x64 ;; \
      arm64) ARCH=arm64 ;; \
      *) ARCH=$TARGETARCH ;; \
    esac && \
    dotnet publish -a $ARCH --self-contained false -o /app

FROM svrnty/dotnet:runtime-invariant-10 AS final
WORKDIR /app
COPY --from=build /app .
USER 65532
EXPOSE 8080
ENTRYPOINT ["/usr/share/dotnet/dotnet", "MyApp.Api.dll"]

Worker service

ARG BUILDPLATFORM
FROM --platform=$BUILDPLATFORM svrnty/dotnet:sdk-lts AS build

WORKDIR /source
COPY . .

ARG TARGETARCH
RUN case "$TARGETARCH" in \
      amd64) ARCH=x64 ;; \
      arm64) ARCH=arm64 ;; \
      *) ARCH=$TARGETARCH ;; \
    esac && \
    dotnet publish MyWorker -a $ARCH --self-contained false -o /app

FROM svrnty/dotnet:runtime-invariant-lts AS final
WORKDIR /app
COPY --from=build /app .
USER 65532
ENTRYPOINT ["/usr/share/dotnet/dotnet", "MyWorker.dll"]

CI/CD (Gitea/GitHub Actions)

jobs:
  build:
    runs-on: ubuntu-latest
    container:
      image: svrnty/dotnet:sdk-lts
    steps:
      - uses: actions/checkout@v4
      - run: dotnet restore
      - run: dotnet test --no-restore
      - run: dotnet publish -c Release -o /app

Automatic Updates

Images are automatically rebuilt when:

New .NET patch versions are released (daily check)
Base image security updates are available (weekly rebuild)
A .NET version reaches EOL, it is automatically excluded

Every build is scanned and includes supply chain attestations (SBOM, SLSA provenance).

License

MIT

4.0 KiB Raw Blame History