svrnty/docker-flutter-sdk
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 21 Wiki Activity
16 Commits 1 Branch 21 Tags 140 KiB
Dockerfile 100%
09c23f66ff
Go to file
Mathias Beaulieu-Duncan 09c23f66ff Add README with usage examples and size comparison 
Document the Flutter SDK Docker images with:
- Image variants and sizes
- Comparison showing 75% smaller than alternatives
- CI/CD examples for GitHub, GitLab, and Gitea
- Security features (zero CVEs, SBOM, provenance)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-03 03:32:22 -05:00
.gitea/workflows Update Android SDK to latest versions and add version check workflow 2026-02-03 00:47:15 -05:00
.gitignore Initial minimal Flutter SDK image for web/WASM CI builds 2026-02-02 00:39:04 -05:00
Dockerfile Use git clone for Flutter SDK to support arm64 2026-02-03 02:06:52 -05:00
Dockerfile.android Upgrade commons-lang3 to fix CVE-2025-48924 2026-02-03 02:45:13 -05:00
Dockerfile.linux Remove rav1e to eliminate paste crate CVE in Linux image 2026-02-03 03:01:29 -05:00
PLAN.md Add plan for custom minimal Flutter SDK distribution using apko/melange 2026-02-02 01:14:31 -05:00
README.md Add README with usage examples and size comparison 2026-02-03 03:32:22 -05:00

README.md

Flutter SDK Docker Images

Minimal, secure Flutter SDK images for CI/CD pipelines. Built on Wolfi for a smaller footprint and zero CVEs.

Images

Variant Use Case Size
svrnty/flutter-sdk:web-latest Web/WASM builds ~800 MB
svrnty/flutter-sdk:android-latest Android APK/AAB builds ~1.7 GB
svrnty/flutter-sdk:linux-latest Linux desktop builds ~1.3 GB

Size Comparison

Image Size
svrnty/flutter-sdk:android 1.7 GB
cirrusci/flutter:stable 4.5 GB
ghcr.io/cirruslabs/flutter:stable 6.8 GB

Up to 75% smaller than alternatives.

Features

  • Zero CVEs - No critical, high, or medium vulnerabilities
  • Multi-arch - Supports both linux/amd64 and linux/arm64
  • Non-root - Runs as unprivileged user (UID 65532)
  • Minimal - Only includes dependencies needed for each platform
  • SBOM & Provenance - Full supply chain attestations included

Usage

Web

docker run --rm -v $(pwd):/app -w /app svrnty/flutter-sdk:web-latest \
  flutter build web

Android

docker run --rm -v $(pwd):/app -w /app svrnty/flutter-sdk:android-latest \
  flutter build apk

Linux Desktop

docker run --rm -v $(pwd):/app -w /app svrnty/flutter-sdk:linux-latest \
  flutter build linux

CI/CD Examples

GitHub Actions

jobs:
  build:
    runs-on: ubuntu-latest
    container:
      image: svrnty/flutter-sdk:android-latest
    steps:
      - uses: actions/checkout@v4
      - run: flutter build apk --release

GitLab CI

build:
  image: svrnty/flutter-sdk:android-latest
  script:
    - flutter build apk --release

Gitea Actions

jobs:
  build:
    runs-on: ubuntu-latest
    container:
      image: svrnty/flutter-sdk:android-latest
    steps:
      - uses: actions/checkout@v3
      - run: flutter build apk --release

Tags

  • <variant>-latest - Latest stable Flutter release
  • <variant>-<version> - Specific Flutter version (e.g., android-3.38.9)
  • <variant>-dev - Pre-release testing

Security

All images are:

  • Scanned with Docker Scout on every release
  • Built with SBOM and SLSA provenance attestations
  • Based on Wolfi (minimal attack surface)
  • Automatically updated when new Flutter versions are released

License

MIT