Sign inSign up

eilandert/valkey

By eilandert

•Updated about 18 hours ago

latest Valkey on Ubuntu/Debian, daily rebuilds

Image
Databases & storage
0

10K+

eilandert/valkey repository overview

⁠Valkey — hardened Redis-compatible in-memory data store (Debian)

eilandert/valkey is a small, security-hardened Docker image of Valkey, the BSD-licensed, Linux-Foundation-backed fork of Redis. It is built from the same Debian package published on deb.myguard.nl⁠, so the binary you run in a container is identical to what you'd get from apt install valkey on a box pointed at the repo.

Valkey is a drop-in replacement for Redis 7.2: same RESP protocol, same client libraries, same redis-cli muscle memory — used as an object cache, session store, queue backend or rate-limiter.

⁠Why run Valkey in Docker

  • Isolation & reproducibility. One pinned image, identical on every host — no "works on my server" drift between dev, staging and production.
  • A smaller, auditable base. This image ships only what Valkey needs, not a full distro of background services.
  • Hardening by default. Designed to run read-only, non-root, capability-dropped. The full reasoning is in Docker Hardening for Self-Hosters⁠.

⁠Hardened docker-compose.yml

services:
  valkey:
    image: eilandert/valkey:latest
    restart: unless-stopped
    command: ["valkey-server", "--save", "60", "1000", "--appendonly", "no"]
    read_only: true
    user: "999:999"                 # non-root valkey user
    cap_drop: [ALL]
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /run
    volumes:
      - valkey-data:/var/lib/valkey  # persistence (RDB/AOF)
    ports:
      - "127.0.0.1:6379:6379"        # bind to loopback, never 0.0.0.0
    healthcheck:
      test: ["CMD", "valkey-cli", "ping"]
      interval: 10s
      timeout: 3s
      retries: 3

volumes:
  valkey-data:

Production note: keep 6379 on 127.0.0.1 or an internal Docker network and set --requirepass. Never expose an unauthenticated data store to the internet.

⁠Tags

latest tracks the current Debian stable build. Pull the exact one you tested and pin it in production.

Tag summary

Content type

Image

Digest

sha256:b75a84054…

Size

53.3 MB

Last updated

about 18 hours ago

docker pull eilandert/valkey:ubuntu