Secure by Design, Built for Speed, Hardened Container Images on a minimal base CleanStart OS.
50K+
Verified KONG Container Image
A hardened, minimal KONG container image built from source with verifiable software provenance and an SBOM, designed for secure production deployments.
For additional versions including FIPS support, explore CleanStart Images — secure, hardened container images
Download the container image from the registry
docker pull cleanstart/kong:latest
docker pull cleanstart/kong:latest-dev
Run the container with basic configuration
docker run --name kong \
-e KONG_DATABASE=off \
-e KONG_PROXY_ACCESS_LOG=/dev/stdout \
-e KONG_ADMIN_ACCESS_LOG=/dev/stdout \
-e KONG_PROXY_ERROR_LOG=/dev/stderr \
-e KONG_ADMIN_ERROR_LOG=/dev/stderr \
-e KONG_ADMIN_LISTEN=0.0.0.0:8001 \
-p 8000:8000 -p 8443:8443 -p 8001:8001 \
cleanstart/kong:latest
Deploy with production security settings
docker run -d --name kong-prod \
--security-opt=no-new-privileges \
--restart unless-stopped \
-e KONG_DATABASE=off \
-e KONG_PROXY_ACCESS_LOG=/dev/stdout \
-e KONG_ADMIN_ACCESS_LOG=/dev/stdout \
-e KONG_PROXY_ERROR_LOG=/dev/stderr \
-e KONG_ADMIN_ERROR_LOG=/dev/stderr \
-e KONG_ADMIN_LISTEN=0.0.0.0:8001 \
-p 8000:8000 -p 8443:8443 \
cleanstart/kong:latest
Create kong.yml file
mkdir -p ~/kong-config
cat > ~/kong-config/kong.yml <<'EOF'
_format_version: "3.0"
services:
- name: example-service
url: http://httpbin.org
routes:
- name: example-route
paths:
- /example
EOF
Volume Mount Mount local directory for persistent data
docker run --name kong-config \
-e KONG_DATABASE=off \
-e KONG_DECLARATIVE_CONFIG=/kong/declarative/kong.yml \
-e KONG_ADMIN_LISTEN=0.0.0.0:8001 \
-v ~/kong-config:/kong/declarative \
-p 8010:8000 -p 8011:8001 \
cleanstart/kong:latest
Port Forwarding Run with custom port mappings
docker run --name kong-ports \
-e KONG_DATABASE=off \
-e KONG_ADMIN_LISTEN=0.0.0.0:8001 \
-p 9000:8000 -p 9001:8001 \
cleanstart/kong:latest
Why Use CleanStart Images
Content type
Image
Digest
sha256:7fe0f135d…
Size
87.9 MB
Last updated
about 4 hours ago
docker pull cleanstart/kong