https://github.com/ironpeakservices/iron-argo

Secure base image for running cloudflared/argo.
https://github.com/ironpeakservices/iron-argo

argo cloudflare cloudflared docker

Last synced: 3 months ago
JSON representation

Secure base image for running cloudflared/argo.

• Host: GitHub
• URL: https://github.com/ironpeakservices/iron-argo
• Owner: ironpeakservices
• License: apache-2.0
• Created: 2019-08-08T06:03:46.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2023-01-24T04:00:53.000Z (about 2 years ago)
• Last Synced: 2024-05-02T05:09:44.619Z (9 months ago)
• Topics: argo, cloudflare, cloudflared, docker
• Language: Dockerfile
• Homepage: https://github.com/ironPeakServices/iron-argo
• Size: 226 KB
• Stars: 5
• Watchers: 1
• Forks: 0
• Open Issues: 11
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# iron-argo

Secure base image for running Argo tunnel service to connect to Cloudflare servers.

`docker pull ghrcr.io/ironpeakservices/iron-argo:1.0.0`

## How is this different?

We build from the official cloudflared source code, but additionally:

- an empty scratch container (no shell, unprivileged user, ...) for a tiny attack vector

- hardened Docker Compose file

- docker security scanning

- scratch base image instead of distroless, meaning glibc from latest Go

## Example

See the `argo.compose` file.

## Update policy

Updates to the official cloudflared repository are automatically created as a pull request and trigger linting & a docker build.

When those checks complete without errors, a merge into master will trigger a deploy with the same version to packages.

A GitHub release will also be created to notify the GitHub subscribers.