DHI Build

Docker Hardened Image

Buildkit frontend for building Docker Hardened Images

docker

Docker Official Image

Docker in Docker! (commonly known as "dind")

kubectl

Docker Hardened Image

Kubernetes provides a command line tool for communicating with a Kubernetes cluster's control plane, using the Kubernetes API.

PHP

Docker Hardened Image

A popular general-purpose scripting language that is especially suited to web development.

Grafana

Docker Hardened Image

Query, visualize, alert on, and explore your metrics, logs, and traces wherever they are stored.

bash

Docker Official Image

Bash is the GNU Project's Bourne Again SHell

Alpine Base

Docker Hardened Image

A secure, ultra-minimal Alpine Linux base image with essential system utilities for building lightweight containerized applications.

Temporal Admin Tools

Docker Hardened Image

Administrative CLI tools for Temporal workflow engine, including tctl, temporal CLI, and database management utilities.

Composer

Docker Hardened Image

A dependency manager for PHP

ExternalDNS

Docker Hardened Image

ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.

BusyBox

Docker Hardened Image

The Swiss Army Knife of Embedded Linux

OpenSCAP

Docker Hardened Image

The OpenSCAP program is a command line tool that allows users to load, scan, validate, edit, and export SCAP documents.

Debian Base

Docker Hardened Image

A secure, minimal Debian base image with essential system utilities for building and running containerized applications.

Pyroscope

Docker Hardened Image

Grafana Pyroscope is an open source software project for aggregating continuous profiling data.

AWS CLI

Docker Hardened Image

The AWS Command Line Interface (AWS CLI) is a unified tool to manage your AWS services.

Bash

Docker Hardened Image

An interactive command interpreter and command programming language developed for UNIX-like operating systems.

buildpack-deps

Docker Official Image

A collection of common build dependencies used for installing various modules, e.g., gems.

Keycloak

Docker Hardened Image

Keycloak is a high performance Java-based identity and access management solution. It lets developers add an authentication layer to their applications with minimum effort.

composer

Docker Official Image

Composer is a dependency manager written in and for PHP.

Crossplane

Docker Hardened Image

Crossplane is an open source Kubernetes add-on that enables platform teams to assemble infrastructure from multiple vendors.

curl

Docker Hardened Image

command line tool and library for transferring data with URLs

Cosign

Docker Hardened Image

Cosign supports container signing, verification, and storage in an OCI registry. Written in Go, it aims to make signatures invisible infrastructure.

Grafana Loki

Docker Hardened Image

Loki - Cloud Native Log Aggregation by Grafana

cert-manager-startupapicheck

Docker Hardened Image

A small cert-manager CLI utility that verifies the cert-manager API and components have started correctly. Primarily used as a Kubernetes Job during installation or upgrades to validate cert-manager readiness.

Jenkins

Docker Hardened Image

Jenkins is an open-source automation server that enables developers to build, test, and deploy their software efficiently. It supports continuous integration and continuous deployment (CI/CD) workflows with extensive plugin ecosystem and distributed build capabilities.

OpenTelemetry Collector

Docker Hardened Image

OpenTelemetry Collector is a vendor-agnostic telemetry pipeline that receives, processes, and exports traces, metrics and logs. It is used as a standalone gateway or as an agent to centralize telemetry collection and forward data to backends such as Prometheus, Tempo, Jaeger, or commercial APMs.

Docker Sandboxes Agent Templates

Docker Hardened Image

Docker Sandboxes Agent Templates (SBX) images for AI coding agents

Helm

Docker Hardened Image

Helm is the package manager for Kubernetes that helps you manage Kubernetes applications.

Docker dind

Docker Hardened Image

Docker-in-Docker (dind) runs a full Docker Engine inside a container so you can build and run containers within a container, for CI pipelines and nested workloads.

Static

Docker Hardened Image

A very minimal image that is most useful in the context of running binary executables, such as those built from Rust and Golang.