Skip to content

Regular rebuilds of Timescaledb containers, gosu removed, unprivileged

License

Notifications You must be signed in to change notification settings

Polarix-Containers/timescaledb

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Postgres

Build, scan & push Build, scan & push Build, scan & push

Features & usage

  • Built on the TimescaleDB Alpine-based image, to be used as a drop-in replacement.
  • Unprivileged image: you should check your volumes' permissions (eg /var/lib/postgresql/data), default UID/GID is 200017.
  • Removes unnecessary gosu SUID binary.

Sample Docker Compose config

  timescaledb:
    container_name: timescaledb
    image: ghcr.io/polarix-containers/timescaledb:17
    restart: unless-stopped
    volumes:
      - ./timescaledb:/var/lib/postgres/data:Z
    environment:
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
    healthcheck:
      test: ["CMD", "pg_isready", "-U", "postgres_user"]
      interval: 15s
      timeout: 5s
    user: "200017:200017"
    read_only: true
    tmpfs:
      - /var/run/postgres:size=50M,mode=0770,uid=200017,gid=200017,noexec,nosuid,nodev
    security_opt:
      - "no-new-privileges=true"
    cap_drop:
      - ALL

Note: replace postgres_user with your actual postgres username.

Licensing

  • The code in this repository is licensed under the Apache license. 😇
  • The image is built on docker.io/timescale/timescaledb, which is under the Apache license. Copyright to the base image belongs to Docker PostgreSQL Authors.
  • Any image built by Polarix Containers is provided under the combination of license terms resulting from the use of individual packages.

About

Regular rebuilds of Timescaledb containers, gosu removed, unprivileged

Resources

License

Code of conduct

Security policy

Stars

Watchers

Forks

Packages

 
 
 

Contributors 2

  •  
  •