Backdocker.io/nginxinc/nginx-unprivileged
docker.io

docker.io/nginxinc/nginx-unprivileged:1.28-alpine

Unprivileged NGINX Dockerfiles

Size
21.96 MB
Local pulls
6
Upstream pulls
1,254,066,597
Synced at
2026-08-04 14:10:57

China image

registry.cn-global.starbucket.com.cn/starbucket/docker.io/nginxinc/nginx-unprivileged:1.28-alpine

Source image

docker.io/nginxinc/nginx-unprivileged:1.28-alpine

Image info

Image ID
sha256:e00b7e2763a0dfec9ec6d99253612510c253df47d7218cdd35c4e465b4e9ad1f
Image tag
1.28-alpine
Image size
21.96 MB
Platform
linux/arm64
Registry
docker.io
CMD
nginx -g daemon off;
Entrypoint
/docker-entrypoint.sh
Working dir
/
User
101
StopSignal
SIGQUIT
Created
2026-02-23T01:49:05.240249247Z

Exposed ports 1

  • 8080/tcp

Environment 6

PATH/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
NGINX_VERSION1.28.2
PKG_RELEASE1
DYNPKG_RELEASE1
NJS_VERSION0.9.5
NJS_RELEASE1

Labels 9

maintainerNGINX Docker Maintainers <docker-maint@nginx.com>
org.opencontainers.image.urlhttps://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.titledocker-nginx-unprivileged
org.opencontainers.image.sourcehttps://github.com/nginx/docker-nginx-unprivileged
org.opencontainers.image.created2026-02-23T01:48:31.459Z
org.opencontainers.image.version1.28.2-alpine
org.opencontainers.image.licensesApache-2.0
org.opencontainers.image.revision61141700fbe3bb03ee7379fd0a5cba5c9c5fc885
org.opencontainers.image.descriptionUnprivileged NGINX Dockerfiles

Pull commands

Docker
docker pull registry.cn-global.starbucket.com.cn/starbucket/docker.io/nginxinc/nginx-unprivileged:1.28-alpine
docker tag registry.cn-global.starbucket.com.cn/starbucket/docker.io/nginxinc/nginx-unprivileged:1.28-alpine docker.io/nginxinc/nginx-unprivileged:1.28-alpine
Containerd
ctr images pull registry.cn-global.starbucket.com.cn/starbucket/docker.io/nginxinc/nginx-unprivileged:1.28-alpine
ctr images tag registry.cn-global.starbucket.com.cn/starbucket/docker.io/nginxinc/nginx-unprivileged:1.28-alpine docker.io/nginxinc/nginx-unprivileged:1.28-alpine
YAML quick replace
sed -i 's#docker.io/nginxinc/nginx-unprivileged:1.28-alpine#registry.cn-global.starbucket.com.cn/starbucket/docker.io/nginxinc/nginx-unprivileged:1.28-alpine#' deployment.yaml
Global registry mirror
Docker

Write Docker daemon.json so registry-mirrors points to this site, then restart Docker

sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<'EOF'
{
  "registry-mirrors": ["https://registry.cn-global.starbucket.com.cn"]
}
EOF
sudo systemctl daemon-reload
sudo systemctl restart docker
Containerd

Write containerd certs.d hosts.toml so docker.io pulls via this site, then restart containerd

sudo mkdir -p /etc/containerd/certs.d/docker.io
sudo tee /etc/containerd/certs.d/docker.io/hosts.toml <<'EOF'
server = "https://docker.io"

[host."https://registry.cn-global.starbucket.com.cn"]
  capabilities = ["pull", "resolve"]
EOF
sudo mkdir -p /etc/containerd
if [ ! -f /etc/containerd/config.toml ]; then
  sudo containerd config default | sudo tee /etc/containerd/config.toml >/dev/null
fi
sudo sed -i 's#config_path = ""#config_path = "/etc/containerd/certs.d"#' /etc/containerd/config.toml
sudo systemctl restart containerd

Build history 27

2026-02-23 01:49:05empty layer
USER 101
2026-02-23 01:49:05
RUN |2 UID=101 GID=101 /bin/sh -c set -x     && apkArch="$(cat /etc/apk/arch)"     && nginxPackages="         nginx=${NGINX_VERSION}-r${PKG_RELEASE}         nginx-module-xslt=${NGINX_VERSION}-r${DYNPKG_RELEASE}         nginx-module-geoip=${NGINX_VERSION}-r${DYNPKG_RELEASE}         nginx-module-image-filter=${NGINX_VERSION}-r${DYNPKG_RELEASE}         nginx-module-njs=${NGINX_VERSION}.${NJS_VERSION}-r${NJS_RELEASE}     "     && apk add --no-cache --virtual .checksum-deps         openssl     && case "$apkArch" in         x86_64|aarch64)             apk add -X "https://nginx.org/packages/alpine/v$(egrep -o '^[0-9]+\.[0-9]+' /etc/alpine-release)/main" --no-cache $nginxPackages             ;;         *)             set -x             && tempDir="$(mktemp -d)"             && chown nobody:nobody $tempDir             && apk add --no-cache --virtual .build-deps                 gcc                 libc-dev                 make                 openssl-dev                 pcre2-dev                 zlib-dev                 linux-headers                 libxslt-dev                 gd-dev                 geoip-dev                 libedit-dev                 bash                 alpine-sdk                 findutils                 curl             && su nobody -s /bin/sh -c "                 export HOME=${tempDir}                 && cd ${tempDir}                 && curl -f -L -O https://github.com/nginx/pkg-oss/archive/${NGINX_VERSION}-${PKG_RELEASE}.tar.gz                 && PKGOSSCHECKSUM=\"ef4545c05b1632a056482e3dbb47bb5d7393238318db3491e8bb308218cdb5f32dbb2ac73509097ac2426fd73270bc97836843a8b1846a396fd94e60826f7e3f *${NGINX_VERSION}-${PKG_RELEASE}.tar.gz\"                 && if [ \"\$(openssl sha512 -r ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz)\" = \"\$PKGOSSCHECKSUM\" ]; then                     echo \"pkg-oss tarball checksum verification succeeded!\";                 else                     echo \"pkg-oss tarball checksum verification failed!\";                     exit 1;                 fi                 && tar xzvf ${NGINX_VERSION}-${PKG_RELEASE}.tar.gz                 && cd pkg-oss-${NGINX_VERSION}-${PKG_RELEASE}                 && cd alpine                 && make module-geoip module-image-filter module-njs module-xslt                 && apk index --allow-untrusted -o ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz ${tempDir}/packages/alpine/${apkArch}/*.apk                 && abuild-sign -k ${tempDir}/.abuild/abuild-key.rsa ${tempDir}/packages/alpine/${apkArch}/APKINDEX.tar.gz                 "             && cp ${tempDir}/.abuild/abuild-key.rsa.pub /etc/apk/keys/             && apk del --no-network .build-deps             && apk add -X ${tempDir}/packages/alpine/ --no-cache $nginxPackages             ;;     esac     && apk del --no-network .checksum-deps     && if [ -n "$tempDir" ]; then rm -rf "$tempDir"; fi     && if [ -f "/etc/apk/keys/abuild-key.rsa.pub" ]; then rm -f /etc/apk/keys/abuild-key.rsa.pub; fi     && apk add --no-cache curl ca-certificates # buildkit
2026-02-23 01:49:05empty layer
USER root
2026-02-23 01:49:05empty layer
ARG GID=101
2026-02-23 01:49:05empty layer
ARG UID=101
2026-02-23 01:49:05empty layer
ENV NJS_RELEASE=1
2026-02-23 01:49:05empty layer
ENV NJS_VERSION=0.9.5
2026-02-23 00:06:42empty layer
CMD ["nginx" "-g" "daemon off;"]