Base
Hardened build
minimal ports, security patches applied at build time
Clair on Ubuntu 24.04 LTS
Azure
Security
Clair, an open source container image vulnerability scanner, indexing image layers and reporting known CVEs through a simple HTTP API.
Overview
Clair is an open source static analysis service for container images. It pulls the layers of an OCI or Docker image, indexes the operating system and language packages inside them, matches those packages against a continuously updated set of vulnerability databases, and reports the known CVEs that affect the image. It runs as an HTTP API service with no web interface, so it slots into registries, CI pipelines and security tooling that submit images for scanning and read back a vulnerability report. This appliance runs Clair in a single node combo configuration, with the indexer, matcher and notifier all in one process backed by a bundled database on the same machine.
Why the cloudimg image
cloudimg delivers Clair fully patched and preconfigured with its PostgreSQL back end bundled on the same instance, so it indexes and scans images the moment it boots, with the companion clairctl command line client installed for one line scans. The image is secure by default: no known credential ships, a unique database password is generated on each instance's first boot and written to a root only file, and the scanning API is not exposed to the network by default so you open and protect it on your own terms. Every deployment carries a paired deployment guide and 24/7 support.
Common uses
- Scan container images for known CVEs before they reach production
- Add automated image vulnerability scanning to a CI or registry workflow
- Run a private, self hosted image scanner inside your own cloud account
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.