nginx-ingress-controller (v1.13.4-hardened1)

2026-01-10T05:09:39Z

Pull the image from the command line:

docker pull code.spamasaurus.com/rancher/nginx-ingress-controller:v1.13.4-hardened1

Digest

sha256:93f76f5f373511652e065f02abb817666f88cfe691b3d281b71aed05e4534b50

For more information on the Container registry, see the documentation.

Image for containers based on SUSE Linux Enterprise Server 15 SP7.

KIWI 10.2.33

ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/luajit/bin:/usr/local/nginx/sbin:/usr/local/nginx/bin

ENV LUA_PATH=/usr/local/share/luajit-2.1.0-beta3/?.lua;/usr/local/share/lua/5.1/?.lua;/usr/local/lib/lua/?.lua;;

ENV LUA_CPATH=/usr/local/lib/lua/?/?.so;/usr/local/lib/lua/?.so;;

COPY /usr/local /usr/local # buildkit

COPY /usr/lib64/libopentelemetry* /usr/lib64/ # buildkit

COPY /opt /opt # buildkit

COPY /etc/nginx /etc/nginx # buildkit

RUN /bin/sh -c ln -s /usr/lib64/liblua5.3.so.5.3.0 /usr/local/lib/liblua-5.3.so # buildkit

RUN /bin/sh -c zypper addrepo -p 105 http://download.opensuse.org/distribution/leap/15.6/repo/oss/ download.opensuse.org-oss && zypper --gpg-auto-import-keys refresh # buildkit

RUN /bin/sh -c zypper install -y --allow-vendor-change liblmdb-0_9_30 libxml2-tools libmaxminddb0 libcap-progs crypto-policies-scripts libgrpc++1 libatomic1 grpc-devel wget which libyajl2 openssl-3 libpcre1 libicu73_2 liblua5_4-5 procps catatonit # buildkit

RUN /bin/sh -c zypper -n clean -a && rm -rf /tmp/* /var/tmp/* /usr/share/doc/packages && rpm -e libsolv-tools-base zypper libzypp libaugeas0 libfa1 container-suseconnect libyaml-cpp0_6 boost-license1_66_0 libboost_system1_66_0 libboost_thread1_66_0 # buildkit

RUN /bin/sh -c ldDirs=" /usr/local/lib /usr/local/lib64 "; for dir in ${ldDirs}; do echo "${dir}" >>/etc/ld.so.conf.d/local.conf; done # buildkit

RUN /bin/sh -c /sbin/ldconfig # buildkit

RUN /bin/sh -c ln -s /usr/local/nginx/sbin/nginx /sbin/nginx # buildkit

RUN /bin/sh -c groupadd -rg 101 www-data && useradd -u 101 -M -d /usr/local/nginx -s /sbin/nologin -G www-data -g www-data www-data # buildkit

RUN /bin/sh -c writeDirs=" /var/log/nginx /var/lib/nginx/body /var/lib/nginx/fastcgi /var/lib/nginx/proxy /var/lib/nginx/scgi /var/lib/nginx/uwsgi /var/log/audit "; for dir in ${writeDirs}; do mkdir -p ${dir}; chown -R www-data.www-data ${dir}; done # buildkit

EXPOSE [443/tcp 80/tcp]

CMD ["nginx" "-g" "daemon off;"]

ARG TARGETARCH=amd64

ARG VERSION=v1.13.4-hardened1

ARG COMMIT_SHA=git-d1b507de4

ARG BUILD_ID=UNSET

LABEL org.opencontainers.image.title=NGINX Ingress Controller for Kubernetes

LABEL org.opencontainers.image.documentation=https://kubernetes.github.io/ingress-nginx/

LABEL org.opencontainers.image.source=https://github.com/kubernetes/ingress-nginx

LABEL org.opencontainers.image.vendor=The Kubernetes Authors

LABEL org.opencontainers.image.licenses=Apache-2.0

LABEL org.opencontainers.image.version=v1.13.4-hardened1

LABEL org.opencontainers.image.revision=git-d1b507de4

LABEL build_id=UNSET

WORKDIR /etc/nginx

COPY --chown=www-data:www-data etc /etc # buildkit

COPY --chown=www-data:www-data bin/amd64/dbg / # buildkit

COPY --chown=www-data:www-data bin/amd64/nginx-ingress-controller / # buildkit

COPY --chown=www-data:www-data bin/amd64/wait-shutdown / # buildkit

RUN |4 TARGETARCH=amd64 VERSION=v1.13.4-hardened1 COMMIT_SHA=git-d1b507de4 BUILD_ID=UNSET /bin/sh -c bash -xeu -c ' writeDirs=( /etc/ingress-controller /etc/ingress-controller/ssl /etc/ingress-controller/auth /etc/ingress-controller/geoip /etc/ingress-controller/telemetry /var/log /var/log/nginx /tmp/nginx ); for dir in "${writeDirs[@]}"; do mkdir -p ${dir}; chown -R www-data:www-data ${dir}; done' && echo "/lib:/usr/lib:/usr/local/lib:/modules_mount/etc/nginx/modules/otel" > /etc/ld-musl-x86_64.path && echo "/lib:/usr/lib:/usr/local/lib:/modules_mount/etc/nginx/modules/otel" > /etc/ld-musl-aarch64.path # buildkit

RUN |4 TARGETARCH=amd64 VERSION=v1.13.4-hardened1 COMMIT_SHA=git-d1b507de4 BUILD_ID=UNSET /bin/sh -c setcap cap_net_bind_service=+ep /nginx-ingress-controller && setcap -v cap_net_bind_service=+ep /nginx-ingress-controller && setcap cap_net_bind_service=+ep /usr/local/nginx/sbin/nginx && setcap -v cap_net_bind_service=+ep /usr/local/nginx/sbin/nginx && setcap cap_net_bind_service=+ep /usr/bin/catatonit && setcap -v cap_net_bind_service=+ep /usr/bin/catatonit && ln -sf /usr/local/nginx/sbin/nginx /usr/bin/nginx # buildkit

USER www-data

RUN |4 TARGETARCH=amd64 VERSION=v1.13.4-hardened1 COMMIT_SHA=git-d1b507de4 BUILD_ID=UNSET /bin/sh -c ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log # buildkit

ENTRYPOINT ["/usr/bin/catatonit" "--"]

CMD ["/nginx-ingress-controller"]

Key	Value
build_id	UNSET
com.suse.bci.base.authors	https://github.com/SUSE/bci/discussions
com.suse.bci.base.created	2025-11-04T11:56:27.130555620Z
com.suse.bci.base.description	Image for containers based on SUSE Linux Enterprise Server 15 SP7.
com.suse.bci.base.disturl	obs://build.suse.de/SUSE:SLE-15-SP7:Update:CR/images/36d1b64836a25b46e4d88108157a6c3e-sles15-image
com.suse.bci.base.eula	sle-bci
com.suse.bci.base.lifecycle-url	https://www.suse.com/lifecycle#suse-linux-enterprise-server-15
com.suse.bci.base.name	15.7-5.11.7
com.suse.bci.base.reference	registry.suse.com/bci/bci-base:15.7-5.11.7
com.suse.bci.base.release-stage	released
com.suse.bci.base.source	https://sources.suse.com/SUSE:SLE-15-SP7:Update:CR/sles15-image/36d1b64836a25b46e4d88108157a6c3e/
com.suse.bci.base.supportlevel	l3
com.suse.bci.base.title	SLE BCI 15 SP7 Base
com.suse.bci.base.until	2031-07-31
com.suse.bci.base.url	https://www.suse.com/products/base-container-images/
com.suse.bci.base.vendor	SUSE LLC
com.suse.bci.base.version	15.7-5.11.7
com.suse.eula	sle-bci
com.suse.lifecycle-url	https://www.suse.com/lifecycle#suse-linux-enterprise-server-15
com.suse.release-stage	released
com.suse.supportlevel	l3
com.suse.supportlevel.until	2031-07-31
io.artifacthub.package.logo-url	https://opensource.suse.com/bci/SLE_BCI_logomark_green.svg
io.artifacthub.package.readme-url	https://sources.suse.com/SUSE:SLE-15-SP7:Update:CR/sles15-image/36d1b64836a25b46e4d88108157a6c3e/README.md
org.openbuildservice.disturl	obs://build.suse.de/SUSE:SLE-15-SP7:Update:CR/images/36d1b64836a25b46e4d88108157a6c3e-sles15-image
org.opencontainers.image.authors	https://github.com/SUSE/bci/discussions
org.opencontainers.image.created	2025-11-04T11:56:27.130555620Z
org.opencontainers.image.description	Image for containers based on SUSE Linux Enterprise Server 15 SP7.
org.opencontainers.image.documentation	https://kubernetes.github.io/ingress-nginx/
org.opencontainers.image.licenses	Apache-2.0
org.opencontainers.image.ref.name	15.7-5.11.7
org.opencontainers.image.revision	git-d1b507de4
org.opencontainers.image.source	https://github.com/kubernetes/ingress-nginx
org.opencontainers.image.title	NGINX Ingress Controller for Kubernetes
org.opencontainers.image.url	https://www.suse.com/products/base-container-images/
org.opencontainers.image.vendor	The Kubernetes Authors
org.opencontainers.image.version	v1.13.4-hardened1
org.opensuse.reference	registry.suse.com/bci/bci-base:15.7-5.11.7