https://github.com/mogeko/docker-vlmcsd
A rootless container running vlmcsd
https://github.com/mogeko/docker-vlmcsd
buildah containers distroless docker rootless
Last synced: 6 months ago
JSON representation
A rootless container running vlmcsd
- Host: GitHub
- URL: https://github.com/mogeko/docker-vlmcsd
- Owner: mogeko
- License: mit
- Created: 2019-05-08T10:22:25.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2025-03-20T01:17:36.000Z (7 months ago)
- Last Synced: 2025-03-20T02:27:10.319Z (7 months ago)
- Topics: buildah, containers, distroless, docker, rootless
- Language: C
- Homepage:
- Size: 1.49 MB
- Stars: 28
- Watchers: 2
- Forks: 5
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# docker-vlmcsd
[](https://github.com/mogeko/docker-vlmcsd/actions/workflows/build.yml)
[](https://github.com/users/mogeko/packages/container/package/vlmcsd)
[](https://github.com/users/mogeko/packages/container/package/vlmcsd)
A rootless container running [vlmcsd](https://mogeko.github.io/docker-vlmcsd/vlmcsd.8.pdf).
**Since March 2023, vlmcsd images has been upgraded to a `rootless` container, it based on ["Distroless" image](https://github.com/GoogleContainerTools/distroless) and uses [Buildah](https://buildah.io) as a container compilation engine.** [Why do we use them?](#about-distroless-images-and-buildah).
## Usage
Pull this image:
```shell
docker pull ghcr.io/mogeko/vlmcsd:latest
```
Run with docker cli:
```shell
docker run -d --name vlmcsd -p 1688:1688 --restart unless-stopped ghcr.io/mogeko/vlmcsd:latest
```
Run with [docker-compose](https://docs.docker.com/compose):
```yml
---
version: 2.1
services:
vlmcsd:
image: ghcr.io/mogeko/vlmcsd:latest
container_name: vlmcsd
ports:
- 1688:1688
restart: unless-stopped
```
## Parameter
Container images are configured using parameters passed at runtime (such as those above). These parameters are separated by a colon and indicate `:` respectively. For example, `-p 8080:80` would expose port `80` from inside the container to be accessible from the host's IP on port `8080` outside the container.
| Parameter | Function |
| --------- | ------------------- |
| `-p 1688` | tcp connection port |
## About "Distroless" images and Buildah
["Distroless" container image](https://github.com/GoogleContainerTools/distroless) is an application-centered [OCI container image](https://opencontainers.org) launched by Google for the [Kubernetes](https://kubernetes.io) project. It contain **only** your application and its runtime dependencies. They do NOT contain **package managers**, **shells** or any other **programs** you would expect to find in a standard Linux distribution (Your application will be the only **executable program** in the entire container image).
Compared with the traditional complete [Debian](https://hub.docker.com/_/debian) container image, Distroless has an unparalleled size advantage, its [minimum](https://github.com/GoogleContainerTools/distroless/blob/main/base/README.md) is only 2MB, less than 2% of the Debian (124MB). Compared with [Alpine Linux](https://hub.docker.com/_/alpine), it has a **smaller attack surface** and better **compatibility** (based on Debian and [`glibc`](https://www.gnu.org/software/libc)).
| Image | Size | rootless? | shell? | package-manager? | other programs? | C library |
| ---------- | ------ | --------- | ------ | ---------------- | ------------------ | --------- |
| distroless | 12.6MB | support | :x: | :x: | :x: | `glibc` |
| debian | 118MB | support? | `bash` | `apt-get` | :white_check_mark: | `glibc` |
| alpine | 7.51MB | support? | `bash` | `apk` | :white_check_mark: | `musl` |
As for [Buildah](https://buildah.io). It is a container mirror compilation engine launched by Red Hat. Its biggest selling point is that it allows you to **create a container images in a completely unprivileged environment, that is _"rootless"_**. With the help of Buildah, we were able to **put the entire life cycle of the container's compilation and operation in the user namespace**. So as to protect our digital security.
## Upstream source code
## License
The code in this project is released under the [MIT License](./LICENSE).