Build your own distroless images with this mini file system and some binaries
What can I do with this? This image and its different layers can be used to build a distroless boiler plate for your application. Simply add the base layer and any additional layers (tags) with the stuff you need to run your application. All binaries are statically compiled and do not depend on any OS libraries or clib. The base layer contains Root CA certificates as well as time zone data and the user configuration for root and docker. Additional layers (tags) with statically compiled binaries are:
- 11notes/distroless:curl - curl
- 11notes/distroless:dnslookup - dnslookup
- 11notes/distroless:lego - lego
- 11notes/distroless:par2 - par2
- 11notes/distroless:unrar - unrar (freeware!)
- 11notes/distroless:file - file
- 11notes/distroless:strip - strip
- 11notes/distroless:upx - upx
- 11notes/distroless:pv - pv
- 11notes/distroless:dnspyre - dnspyre
- 11notes/distroless:localhealth - localhealth
- 11notes/distroless:jq - jq
- 11notes/distroless:tini - tini
- 11notes/distroless:tini-pm - tini-pm
- 11notes/distroless:cmd-socket - cmd-socket
- 11notes/distroless:localhealth - localhealth
- 11notes/distroless:qt - Qt (with GUI or withouth as -minimal)
There are also application services, that are distroless, but don’t serve well as a base layer or only for user who know how to handle them, these are:
- 11notes/socket-proxy - socket-proxy
- 11notes/node - node
- 11notes/adguard - adguard
- 11notes/adguard-sync - adguard-sync
- 11notes/nginx - nginx
- 11notes/traefik - traefik
- 11notes/hysteria - hysteria
- 11notes/chrony - chrony
- 11notes/netbird - netbird
- 11notes/pocket-id - pocket-id
- 11notes/unbound - unbound
- 11notes/caddy - caddy
- 11notes/qbittorrent - qbittorrent
- 11notes/tinyauth - tinyauth
- 11notes/redis - redis
- 11notes/whodb - whodb
- 11notes/syncthing - syncthing
- 11notes/express - express
- 11notes/prometheus - prometheus
# this will create a distroless image that just contains the curl binary
FROM 11notes/distroless:curl AS distroless-curl
FROM scratch
COPY --from=distroless-curl / /
USER docker
ENTRYPOINT ["/usr/local/bin/curl"]These are the main tags for the image. There is also a tag for each commit and its shorthand sha256 value.
docker pull 11notes/distroless:latest
docker pull ghcr.io/11notes/distroless:latest
docker pull quay.io/11notes/distroless:latest
This image is provided to you at your own risk. Always make backups before updating an image to a different version. Check the releases for breaking changes. If you have any problems with using this image simply raise an issue, thanks. If you have a question or inputs please create a new discussion instead of an issue. You can find all my other repositories on github.
created 12.10.2025, 09:28:35 (CET)