Run core with Docker

Prerequisites#

• Docker Engine 23 or later.

Open a shell#

./run.sh

Arguments replace the shell, so you can run one command:

./run.sh curl -fsS https://example.com -o /dev/null -w '%{http_code}\n'

Build your own image#

Put an app.sh next to Dockerfile.example, then:

docker build -f Dockerfile.example -t my-app .
docker run --rm my-app

core has no sudo and no setuid binaries. To install packages, switch to USER root in your Dockerfile, install them, then switch back with USER 65532:65532.

Variables#

Workspace#

run.sh mounts the current directory at /workspace and starts there. The container runs as nonroot (UID and GID 65532), so that UID must be able to read the directory, and write to it if your command writes.

Files#

• run.sh opens a shell or runs one command.
• Dockerfile.example builds a minimal image from core.

# docker build -f Dockerfile.example -t my-app .
FROM ghcr.io/hambn/core:wolfi
COPY --chown=65532:65532 app.sh /home/nonroot/app.sh
CMD ["bash", "/home/nonroot/app.sh"]

#!/usr/bin/env bash
# Open a core shell, or run one command, with the current directory at /workspace.
set -euo pipefail

image=${CORE_IMAGE:-ghcr.io/hambn/core:wolfi}
docker run -it --rm \
    -v "$PWD:/workspace" \
    -w /workspace \
    "$image" "$@"