itworx-mcp-hub/postgres (11707d6a6b5c69bb018bc7750a18bae69168a5b0-controller-build-54b650dc-152b-4d25-b9b9-f00df7dfb721)

Published 2026-10-15 23:19:15 +00:00 by Jens

Pull the image from the command line:

docker pull gitea.nuklearrabbit.com/jens/itworx-mcp-hub/postgres:11707d6a6b5c69bb018bc7750a18bae69168a5b0-controller-build-54b650dc-152b-4d25-b9b9-f00df7dfb721

Digest

sha256:d5f02c0461f8ea2dd043aec72b138c724decaeb02917dc77748a2ffb9b676e44

For more information on the Container registry, see the documentation.

Image Layers

ADD alpine-minirootfs-3.24.2-x86_64.tar.gz / # buildkit

CMD ["/bin/sh"]

RUN /bin/sh -c set -eux; addgroup -g 70 -S postgres; adduser -u 70 -S -D -G postgres -H -h /var/lib/postgresql -s /bin/sh postgres; install --verbose --directory --owner postgres --group postgres --mode 1777 /var/lib/postgresql # buildkit

ENV GOSU_VERSION=1.19

RUN /bin/sh -c set -eux; apk add --no-cache --virtual .gosu-deps ca-certificates dpkg gnupg ; dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')"; wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch"; wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch.asc"; export GNUPGHOME="$(mktemp -d)"; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; gpgconf --kill all; rm -rf "$GNUPGHOME" /usr/local/bin/gosu.asc; apk del --no-network .gosu-deps; chmod +x /usr/local/bin/gosu; gosu --version; gosu nobody true # buildkit

ENV LANG=en_US.utf8

RUN /bin/sh -c mkdir /docker-entrypoint-initdb.d # buildkit

ENV PG_MAJOR=18

ENV PG_VERSION=18.6

ENV PG_SHA256=555610c24d53e4316da5b7d3fc25c279d96856d5e0e23ee308c328c5fa881d9f

ENV DOCKER_PG_LLVM_DEPS=llvm21-dev clang21

RUN /bin/sh -c set -eux; wget -O postgresql.tar.bz2 "https://ftp.postgresql.org/pub/source/v$PG_VERSION/postgresql-$PG_VERSION.tar.bz2"; echo "$PG_SHA256 *postgresql.tar.bz2" | sha256sum -c -; mkdir -p /usr/src/postgresql; tar --extract --file postgresql.tar.bz2 --directory /usr/src/postgresql --strip-components 1 ; rm postgresql.tar.bz2; apk add --no-cache --virtual .build-deps $DOCKER_PG_LLVM_DEPS bison coreutils dpkg-dev dpkg flex g++ gcc krb5-dev libc-dev libedit-dev libxml2-dev libxslt-dev linux-headers make openldap-dev openssl-dev perl-dev perl-ipc-run perl-utils python3-dev tcl-dev util-linux-dev zlib-dev icu-dev lz4-dev zstd-dev curl-dev liburing-dev ; cd /usr/src/postgresql; awk '$1 == "#define" && $2 == "DEFAULT_PGSOCKET_DIR" && $3 == "\"/tmp\"" { $3 = "\"/var/run/postgresql\""; print; next } { print }' src/include/pg_config_manual.h > src/include/pg_config_manual.h.new; grep '/var/run/postgresql' src/include/pg_config_manual.h.new; mv src/include/pg_config_manual.h.new src/include/pg_config_manual.h; gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; export LLVM_CONFIG="/usr/lib/llvm21/bin/llvm-config"; export CLANG=clang-21; ./configure --enable-option-checking=fatal --build="$gnuArch" --enable-integer-datetimes --enable-tap-tests --disable-rpath --with-uuid=e2fs --with-pgport=5432 --with-system-tzdata=/usr/share/zoneinfo --prefix=/usr/local --with-includes=/usr/local/include --with-libraries=/usr/local/lib --with-gssapi --with-icu --with-ldap --with-libcurl --with-liburing --with-libxml --with-libxslt --with-llvm --with-lz4 --with-openssl --with-perl --with-python --with-tcl --with-zstd ; make -j "$(nproc)" world-bin; make install-world-bin; make -C contrib install; runDeps="$( scanelf --needed --nobanner --format '%n#p' --recursive /usr/local | tr ',' '\n' | sort -u | awk 'system("[ -e /usr/local/lib/" $1 " ]") == 0 { next } { print "so:" $1 }' | grep -v -e perl -e python -e tcl )"; apk add --no-cache --virtual .postgresql-rundeps $runDeps bash tzdata zstd icu-data-full $([ "$(apk --print-arch)" != 'ppc64le' ] && echo 'nss_wrapper') ; apk del --no-network .build-deps; cd /; rm -rf /usr/src/postgresql /usr/local/share/doc /usr/local/share/man ; postgres --version # buildkit

RUN /bin/sh -c set -eux; cp -v /usr/local/share/postgresql/postgresql.conf.sample /usr/local/share/postgresql/postgresql.conf.sample.orig; sed -ri "s!^#?(listen_addresses)\s*=\s*\S+.*!\1 = '*'!" /usr/local/share/postgresql/postgresql.conf.sample; grep -F "listen_addresses = '*'" /usr/local/share/postgresql/postgresql.conf.sample # buildkit

RUN /bin/sh -c install --verbose --directory --owner postgres --group postgres --mode 3777 /var/run/postgresql # buildkit

ENV PGDATA=/var/lib/postgresql/18/docker

VOLUME [/var/lib/postgresql]

COPY docker-entrypoint.sh docker-ensure-initdb.sh /usr/local/bin/ # buildkit

RUN /bin/sh -c ln -sT docker-ensure-initdb.sh /usr/local/bin/docker-enforce-initdb.sh # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

STOPSIGNAL SIGINT

EXPOSE map[5432/tcp:{}]

CMD ["postgres"]

RUN /bin/sh -c set -eu; test "$(id -u postgres)" = '70'; test "$(id -g postgres)" = '70'; if grep -Eq '^[^:]+:[^:]*:999:' /etc/passwd; then exit 1; fi; test "$(awk -F: '$3 == 999 {print}' /etc/group)" = 'ping:x:999:'; if grep -Eq '^[^:]+:[^:]*:998:' /etc/group; then exit 1; fi; if grep -Eq '^[^:]+:[^:]*:[^:]*:(998|999):' /etc/passwd; then exit 1; fi; root_group_files="$(find / -xdev $ -group 998 -o -group 999 $ -print)"; data_group_files="$(find /var/lib/postgresql -xdev $ -group 998 -o -group 999 $ -print)"; test -z "$root_group_files"; test -z "$data_group_files"; sed -i 's/^ping:x:999:$/ping:x:998:/' /etc/group; test "$(awk -F: '$3 == 998 {print}' /etc/group)" = 'ping:x:998:'; if grep -Eq '^[^:]+:[^:]*:999:' /etc/group; then exit 1; fi; sed -i 's/^postgres:x:70:70:/postgres:x:999:999:/' /etc/passwd; sed -i 's/^postgres:x:70:/postgres:x:999:/' /etc/group; test "$(id -u postgres)" = '999'; test "$(id -g postgres)" = '999'; chown -R 999:999 /var/lib/postgresql /var/run/postgresql # buildkit

LABEL org.itworx.gosu.go.version=go1.26.9 org.itworx.gosu.go.archive.sha256=42d158b4d8f7b61ac0a830567c940a86098fb7aac52e467a5ebec03ef5cc2f8d

COPY --chmod=0755 /out/bin/gosu /usr/local/bin/gosu # buildkit

COPY /out/licenses/ /usr/share/doc/gosu/licenses/ # buildkit

Key	Value
org.itworx.gosu.go.archive.sha256	42d158b4d8f7b61ac0a830567c940a86098fb7aac52e467a5ebec03ef5cc2f8d
org.itworx.gosu.go.version	go1.26.9
org.itworx.security-base.built-at	2026-10-15T23:16:45.981Z
org.itworx.security-base.parent	docker.io/library/postgres:18.6-alpine3.24@sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873
org.itworx.security-base.recipe-sha256	be7759688255d5283f440d57837f2c1f5c4886a8f0b4cdd146040adef69e8c4f
org.itworx.security-base.repository	jens/itworx_mcp_hub
org.itworx.security-base.revision	11707d6a6b5c69bb018bc7750a18bae69168a5b0
org.itworx.security-base.tree	2dd86ce7ae19fa63c0482c193649dde6aa8c97ad