55 lines
2.4 KiB
Markdown
55 lines
2.4 KiB
Markdown
|
# MariaDB
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
Drop-in replacement for the [official image](https://hub.docker.com/_/mariadb).
|
||
|
|
|
||
|
|
### Alpine
|
||
|
|
- Unprivileged image: you should check your volumes' permissions (eg `/var/lib/mysql`), default UID/GID is 200011.
|
||
|
|
- Built on top of Alpine, with MariaDB provided by Alpine repositories.
|
||
|
|
- Alpine tends to be behind upstream MariaDB and stick to LTS branches, so you will not get the latest version of MariaDB with this image.
|
||
|
|
- Generally more up-to-date packages in the OS than Red Hat UBI.
|
||
|
|
- Low number of vulnerabilities.
|
||
|
|
- Galera is only supported on `x86_64` builds.
|
||
|
|
- **Tag**: `alpine`. Should Alpine start getting the latest MariaDB versions, it will get the `latest` tag.
|
||
|
|
|
||
|
|
### UBI
|
||
|
|
- Unprivileged image: you should check your volumes' permissions (eg `/var/lib/mysql`), default UID/GID is 200011.
|
||
|
|
- Built on the upstream MariaDB UBI image.
|
||
|
|
- Removes unnecessary gosu SUID binary.
|
||
|
|
- Uses FUTURE crypto policy.
|
||
|
|
- Has a lot of outdated packages with *maybe* some downstream patching.
|
||
|
|
- Generates a lot of vulnerbility scanner noise - hard to tell what is a false positive and what is not.
|
||
|
|
- Source: https://git.conorz.at/titanz-containers/mariadb-ubi
|
||
|
|
|
||
|
|
### Sample Docker Compose config
|
||
|
|
|
||
|
|
```
|
||
|
|
mariadb:
|
||
|
|
container_name: mariadb
|
||
|
|
restart: unless-stopped
|
||
|
|
image: git.conorz.at/titanz-containers/mariadb:11.4-alpine
|
||
|
|
volumes:
|
||
|
|
- "./mariadb:/var/lib/mysql:Z"
|
||
|
|
environment:
|
||
|
|
- MARIADB_ROOT_PASSWORD=${MARIADB_ROOT_PASSWORD}
|
||
|
|
- MARIADB_DATABASE=${MARIADB_DATABASE}
|
||
|
|
- MARIADB_USER=${MARIADB_USER}
|
||
|
|
- MARIADB_PASSWORD=${MARIADB_PASSWORD}
|
||
|
|
user: "200011:200011"
|
||
|
|
read_only: true
|
||
|
|
tmpfs:
|
||
|
|
- /var/tmp:mode=0770,uid=200011,gid=200011,noexec,nosuid,nodev
|
||
|
|
- /run/mariadb:size=50M,mode=0770,uid=200011,gid=200011,noexec,nosuid,nodev
|
||
|
|
security_opt:
|
||
|
|
- "no-new-privileges=true"
|
||
|
|
cap_drop:
|
||
|
|
- ALL
|
||
|
|
```
|
||
|
|
|
||
|
|
### Licensing
|
||
|
|
- Licensed under GPL 2 to comply with licensing by MariaDB.
|
||
|
|
- Any image built by titanz containers is provided under the combination of license terms resulting from the use of individual packages.
|