Build your own Docker images

Kong is distributed as prebuilt apk, deb and rpm packages, in addition to official Docker images hosted on DockerHub

Kong builds and verifies Debian and RHEL images for use in production. Alpine images are provided for development purposes only as they contain development tooling such as git for plugin development purposes.

Our Debian and RHEL images are built with minimal dependencies (as of Kong Gateway 3.0) and run through automated security scanners before being published. Any vulnerabilities detected in supported images will be addressed in the next available patch release.

If you would like to build your own images to further customise the base image and any dependencies, follow the instructions below:

  1. Download the docker-entrypoint.sh script from docker-kong and make it executable with chmod +x docker-entrypoint.sh

  2. Download the .deb, .rpm or .apk (amd64, arm64) as required

  3. Create a Dockerfile with the following contents:

    Debian

    Ubuntu

    RHEL

    Alpine

    2.  FROM debian:bullseye-slim
    4.  COPY kong.deb /tmp/kong.deb
    6.  RUN set -ex; \
    7.      apt-get update \
    8.      && apt-get install --yes /tmp/kong.deb \
    9.      && rm -rf /var/lib/apt/lists/* \
    10.      && rm -rf /tmp/kong.deb \
    11.      && chown kong:0 /usr/local/bin/kong \
    12.      && chown -R kong:0 /usr/local/kong \
    13.      && ln -s /usr/local/openresty/bin/resty /usr/local/bin/resty \
    14.      && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/luajit \
    15.      && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/lua \
    16.      && ln -s /usr/local/openresty/nginx/sbin/nginx /usr/local/bin/nginx \
    17.      && kong version
    19.  COPY docker-entrypoint.sh /docker-entrypoint.sh
    21.  USER kong
    23.  ENTRYPOINT ["/docker-entrypoint.sh"]
    25.  EXPOSE 8000 8443 8001 8444 8002 8445 8003 8446 8004 8447
    27.  STOPSIGNAL SIGQUIT
    29.  HEALTHCHECK --interval=10s --timeout=10s --retries=10 CMD kong health
    31.  CMD ["kong", "docker-start"]
    2.  FROM ubuntu:20.04
    4.  COPY kong.deb /tmp/kong.deb
    6.  RUN set -ex; \
    7.      apt-get update \
    8.      && apt-get install --yes /tmp/kong.deb \
    9.      && rm -rf /var/lib/apt/lists/* \
    10.      && rm -rf /tmp/kong.deb \
    11.      && chown kong:0 /usr/local/bin/kong \
    12.      && chown -R kong:0 /usr/local/kong \
    13.      && ln -s /usr/local/openresty/bin/resty /usr/local/bin/resty \
    14.      && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/luajit \
    15.      && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/lua \
    16.      && ln -s /usr/local/openresty/nginx/sbin/nginx /usr/local/bin/nginx \
    17.      && kong version
    19.  COPY docker-entrypoint.sh /docker-entrypoint.sh
    21.  USER kong
    23.  ENTRYPOINT ["/docker-entrypoint.sh"]
    25.  EXPOSE 8000 8443 8001 8444 8002 8445 8003 8446 8004 8447
    27.  STOPSIGNAL SIGQUIT
    29.  HEALTHCHECK --interval=10s --timeout=10s --retries=10 CMD kong health
    31.  CMD ["kong", "docker-start"]
    2.  FROM registry.access.redhat.com/ubi8/ubi:8.1
    4.  COPY kong.rpm /tmp/kong.rpm
    6.  RUN set -ex; \
    7.      yum install -y /tmp/kong.rpm \
    8.      && rm /tmp/kong.rpm \
    9.      && chown kong:0 /usr/local/bin/kong \
    10.      && chown -R kong:0 /usr/local/kong \
    11.      && ln -s /usr/local/openresty/bin/resty /usr/local/bin/resty \
    12.      && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/luajit \
    13.      && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/lua \
    14.      && ln -s /usr/local/openresty/nginx/sbin/nginx /usr/local/bin/nginx \
    15.      && kong version
    17.  COPY docker-entrypoint.sh /docker-entrypoint.sh
    19.  USER kong
    21.  ENTRYPOINT ["/docker-entrypoint.sh"]
    23.  EXPOSE 8000 8443 8001 8444 8002 8445 8003 8446 8004 8447
    25.  STOPSIGNAL SIGQUIT
    27.  HEALTHCHECK --interval=10s --timeout=10s --retries=10 CMD kong health
    29.  CMD ["kong", "docker-start"]
    2.  FROM alpine:latest
    4.  COPY kong.apk.tar.gz /tmp/kong.apk.tar.gz
    6.  RUN set -ex; \
    7.      apk add bash curl ca-certificates; \
    8.      arch="$(apk --print-arch)"; \
    9.      case "${arch}" in \
    10.        x86_64) export ARCH='amd64'; KONG_SHA256=$KONG_AMD64_SHA ;; \
    11.        aarch64) export ARCH='arm64'; KONG_SHA256=$KONG_ARM64_SHA ;; \
    12.      esac; \
    13.      apk add --no-cache --virtual .build-deps tar gzip \
    14.      && tar -C / -xzf /tmp/kong.apk.tar.gz \
    15.      && apk add --no-cache libstdc++ libgcc openssl pcre perl tzdata libcap zlib zlib-dev bash \
    16.      && adduser -S kong \
    17.      && addgroup -S kong \
    18.      && mkdir -p "/usr/local/kong" \
    19.      && chown -R kong:0 /usr/local/kong \
    20.      && chown kong:0 /usr/local/bin/kong \
    21.      && chmod -R g=u /usr/local/kong \
    22.      && rm -rf /tmp/kong.tar.gz \
    23.      && ln -s /usr/local/openresty/bin/resty /usr/local/bin/resty \
    24.      && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/luajit \
    25.      && ln -s /usr/local/openresty/luajit/bin/luajit /usr/local/bin/lua \
    26.      && ln -s /usr/local/openresty/nginx/sbin/nginx /usr/local/bin/nginx \
    27.      && apk del .build-deps \
    28.      && kong version
    30.  COPY docker-entrypoint.sh /docker-entrypoint.sh
    32.  USER kong
    34.  ENTRYPOINT ["/docker-entrypoint.sh"]
    36.  EXPOSE 8000 8443 8001 8444 8002 8445 8003 8446 8004 8447
    38.  STOPSIGNAL SIGQUIT
    40.  HEALTHCHECK --interval=10s --timeout=10s --retries=10 CMD kong health
    42.  CMD ["kong", "docker-start"]

  4. Build your image with docker build --no-cache -t kong-your-tag .

  5. Test that the image built correctly with docker run -it kong-your-tag kong version

  6. To run Kong Gateway and process traffic, follow the Docker install instructions, replacing the image name with your custom name