cleanstart/jre repository overview

Verified JRE Container Image

A hardened, minimal JRE container image built from source with verifiable software provenance and an SBOM, designed for secure production deployments.

For additional versions including FIPS support, explore CleanStart Images — secure, hardened container images⁠

⁠Pull commands

docker pull cleanstart/jre:latest
docker pull cleanstart/jre:latest-dev

⁠Quick Start

⁠Basic Production Deployment

Standard production deployment with recommended settings

  docker run -d \
  --name jre-app \
  -p 8080:8080 \
  -v /path/to/app.jar:/app/application.jar \
  cleanstart/jre:latest \
  -jar /app/application.jar

⁠Development/Testing

Development setup with debugging capabilities

docker run -it --privileged --entrypoint /bin/sh cleanstart/jre:latest-dev
docker run -d --name jre-dev -p 8080:8080 -p 5005:5005 -e JAVA_TOOL_OPTIONS='-agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5005' cleanstart/jre:latest-dev

Why Use CleanStart Images⁠

• Verified — Built from source with verifiable software provenance
• Hardened — Minimal software footprint designed for secure deployment
• Transparent — SBOM available for visibility into image contents
• Production-ready — Built for modern container environments