nginx-ingress-controller (v1.14.5-hardened2)

2026-08-16T13:50:41Z

Pull the image from the command line:

docker pull gitea.yakenator.io/rancher/nginx-ingress-controller:v1.14.5-hardened2

Digest

sha256:6757f2751749b50f03a8fa791134e5b4e28bec16ad4b8df05b639f8788ab9156

For more information on the Container registry, see the documentation.

Image for containers based on SUSE Linux Enterprise Server 16.0.

KIWI 10.2.33

ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/luajit/bin:/usr/local/nginx/sbin:/usr/local/nginx/bin

ENV LUA_PATH=/usr/local/share/luajit-2.1.0-beta3/?.lua;/usr/local/share/lua/5.1/?.lua;/usr/local/lib/lua/?.lua;;

ENV LUA_CPATH=/usr/local/lib/lua/?/?.so;/usr/local/lib/lua/?.so;;

COPY /usr/local /usr/local # buildkit

COPY /usr/lib64/libopentelemetry* /usr/lib64/ # buildkit

COPY /usr/lib64/libbrotli* /usr/lib64/ # buildkit

COPY /opt /opt # buildkit

COPY /etc/nginx /etc/nginx # buildkit

RUN /bin/sh -c ln -s /usr/lib64/liblua5.3.so.5.3.0 /usr/local/lib/liblua-5.3.so # buildkit

RUN /bin/sh -c zypper addrepo -p 105 http://download.opensuse.org/distribution/leap/16.0/repo/oss/ download.opensuse.org-oss && zypper --gpg-auto-import-keys refresh # buildkit

RUN /bin/sh -c zypper install -y --allow-vendor-change liblmdb-0_9_30 libxml2-tools libmaxminddb0 libcap-progs crypto-policies-scripts libgrpc++1_59 libatomic1 grpc-devel wget which libyajl2 openssl-3 libpcre1 libicu77 util-linux liblua5_4-5 libxslt-tools procps catatonit # buildkit

RUN /bin/sh -c ldDirs=" /usr/local/lib /usr/local/lib64 "; for dir in ${ldDirs}; do echo "${dir}" >>/etc/ld.so.conf.d/local.conf; done # buildkit

RUN /bin/sh -c /sbin/ldconfig # buildkit

RUN /bin/sh -c ln -s /usr/local/nginx/sbin/nginx /sbin/nginx # buildkit

RUN /bin/sh -c groupadd -rg 101 www-data && useradd -u 101 -M -d /usr/local/nginx -s /sbin/nologin -G www-data -g www-data www-data # buildkit

RUN /bin/sh -c writeDirs=" /var/log/nginx /var/lib/nginx/body /var/lib/nginx/fastcgi /var/lib/nginx/proxy /var/lib/nginx/scgi /var/lib/nginx/uwsgi /var/log/audit "; for dir in ${writeDirs}; do mkdir -p ${dir}; chown -R www-data.www-data ${dir}; done # buildkit

EXPOSE [443/tcp 80/tcp]

CMD ["nginx" "-g" "daemon off;"]

ARG TARGETARCH=amd64

ARG VERSION=v1.14.5-hardened2

ARG COMMIT_SHA=git-1e49fee32

ARG BUILD_ID=UNSET

LABEL org.opencontainers.image.title=NGINX Ingress Controller for Kubernetes

LABEL org.opencontainers.image.documentation=https://kubernetes.github.io/ingress-nginx/

LABEL org.opencontainers.image.source=https://github.com/kubernetes/ingress-nginx

LABEL org.opencontainers.image.vendor=The Kubernetes Authors

LABEL org.opencontainers.image.licenses=Apache-2.0

LABEL org.opencontainers.image.version=v1.14.5-hardened2

LABEL org.opencontainers.image.revision=git-1e49fee32

LABEL build_id=UNSET

WORKDIR /etc/nginx

COPY --chown=www-data:www-data etc /etc # buildkit

COPY --chown=www-data:www-data bin/amd64/dbg / # buildkit

COPY --chown=www-data:www-data bin/amd64/nginx-ingress-controller / # buildkit

COPY --chown=www-data:www-data bin/amd64/wait-shutdown / # buildkit

RUN |4 TARGETARCH=amd64 VERSION=v1.14.5-hardened2 COMMIT_SHA=git-1e49fee32 BUILD_ID=UNSET /bin/sh -c bash -xeu -c ' writeDirs=( /etc/ingress-controller /etc/ingress-controller/ssl /etc/ingress-controller/auth /etc/ingress-controller/geoip /etc/ingress-controller/telemetry /var/log /var/log/nginx /tmp/nginx ); for dir in "${writeDirs[@]}"; do mkdir -p ${dir}; chown -R www-data:www-data ${dir}; done' && echo "/lib:/usr/lib:/usr/local/lib:/modules_mount/etc/nginx/modules/otel" > /etc/ld-musl-x86_64.path && echo "/lib:/usr/lib:/usr/local/lib:/modules_mount/etc/nginx/modules/otel" > /etc/ld-musl-aarch64.path # buildkit

RUN |4 TARGETARCH=amd64 VERSION=v1.14.5-hardened2 COMMIT_SHA=git-1e49fee32 BUILD_ID=UNSET /bin/sh -c setcap cap_net_bind_service=+ep /nginx-ingress-controller && setcap -v cap_net_bind_service=+ep /nginx-ingress-controller && setcap cap_net_bind_service=+ep /usr/local/nginx/sbin/nginx && setcap -v cap_net_bind_service=+ep /usr/local/nginx/sbin/nginx && setcap cap_net_bind_service=+ep /usr/bin/catatonit && setcap -v cap_net_bind_service=+ep /usr/bin/catatonit && ln -sf /usr/local/nginx/sbin/nginx /usr/bin/nginx # buildkit

USER www-data

RUN |4 TARGETARCH=amd64 VERSION=v1.14.5-hardened2 COMMIT_SHA=git-1e49fee32 BUILD_ID=UNSET /bin/sh -c ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log # buildkit

ENTRYPOINT ["/usr/bin/catatonit" "--"]

CMD ["/nginx-ingress-controller"]

Key	Value
build_id	UNSET
com.suse.bci.base.authors	https://github.com/SUSE/bci/discussions
com.suse.bci.base.created	2026-03-30T13:05:19.775791923Z
com.suse.bci.base.description	Image for containers based on SUSE Linux Enterprise Server 16.0.
com.suse.bci.base.disturl	obs://build.suse.de/SUSE:SLFO:Products:BCI:16.0/containerkiwi/35c94492b982eff620a8bd47f243470e-base-image
com.suse.bci.base.eula	sle-bci
com.suse.bci.base.lifecycle-url	https://www.suse.com/lifecycle#suse-linux-enterprise-server-16
com.suse.bci.base.name	16.0-19.4
com.suse.bci.base.reference	registry.suse.com/bci/bci-base:16.0-19.4
com.suse.bci.base.release-stage	released
com.suse.bci.base.source	https://sources.suse.com/SUSE:SLFO:Products:BCI:16.0/base-image/35c94492b982eff620a8bd47f243470e/
com.suse.bci.base.supportlevel	l3
com.suse.bci.base.title	SUSE Linux BCI 16.0 Base
com.suse.bci.base.until	2027-11-30
com.suse.bci.base.url	https://www.suse.com/products/base-container-images/
com.suse.bci.base.vendor	SUSE LLC
com.suse.bci.base.version	16.0-19.4
com.suse.eula	sle-bci
com.suse.lifecycle-url	https://www.suse.com/lifecycle#suse-linux-enterprise-server-16
com.suse.release-stage	released
com.suse.supportlevel	l3
com.suse.supportlevel.until	2027-11-30
io.artifacthub.package.logo-url	https://opensource.suse.com/bci/SLE_BCI_logomark_green.svg
io.artifacthub.package.readme-url	https://sources.suse.com/SUSE:SLFO:Products:BCI:16.0/base-image/35c94492b982eff620a8bd47f243470e/README.md
org.openbuildservice.disturl	obs://build.suse.de/SUSE:SLFO:Products:BCI:16.0/containerkiwi/35c94492b982eff620a8bd47f243470e-base-image
org.opencontainers.image.authors	https://github.com/SUSE/bci/discussions
org.opencontainers.image.created	2026-03-30T13:05:19.775791923Z
org.opencontainers.image.description	Image for containers based on SUSE Linux Enterprise Server 16.0.
org.opencontainers.image.documentation	https://kubernetes.github.io/ingress-nginx/
org.opencontainers.image.licenses	Apache-2.0
org.opencontainers.image.ref.name	16.0-19.4
org.opencontainers.image.revision	git-1e49fee32
org.opencontainers.image.source	https://github.com/kubernetes/ingress-nginx
org.opencontainers.image.title	NGINX Ingress Controller for Kubernetes
org.opencontainers.image.url	https://www.suse.com/products/base-container-images/
org.opencontainers.image.vendor	The Kubernetes Authors
org.opencontainers.image.version	v1.14.5-hardened2
org.opensuse.reference	registry.suse.com/bci/bci-base:16.0-19.4