Namespace
appsmith
Image / Tagappsmith-ee:9bda227d982edb4ee3eb0d30594249460253d9f4
Content Digestsha256:99b7b722b93bdb93fcb325a4e3f743d5d9191dd2ebce168e99ac41713a4848a6
Details
2026-08-10 15:08:42 UTC
1.9 GB
Labels
-
com.centurylinklabs.watchtower.lifecycle.pre-check/watchtower-hooks/pre-check.sh
-
com.centurylinklabs.watchtower.lifecycle.pre-update/watchtower-hooks/pre-update.sh
-
maintainertech@appsmith.com
-
org.opencontainers.image.version24.04
Environment
APPSMITH_AIRGAP_ENABLEDfalse
APPSMITH_BETTERBUGS_API_KEY APPSMITH_CLOUD_SERVICES_BASE_URL APPSMITH_PYLON_APP_ID APPSMITH_SEGMENT_CE_KEYAGuvNK0MfQgtxwBMCia7fRNxTjfoBRec
KEYGEN_LICENSE_VERIFICATION_KEY LANGC.UTF-8
LC_ALLC.UTF-8
NSS_WRAPPER_GROUP/tmp/appsmith/group
NSS_WRAPPER_PASSWD/tmp/appsmith/passwd
NSS_WRAPPER_SYMLINK/usr/local/lib/libnss_wrapper.so
PATH/opt/bin:/opt/java/bin:/opt/node/bin:/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
TMP/tmp/appsmith
WWW_PATH/tmp/appsmith/www
Layers
[#000] sha256:966c395d29cb24a3faf7e04f32878fe5778819d4132daee4f47e2aaf7b9af924 - 1.46% (28.4 MB)
[#001] sha256:c2a0d64e616f90f5ed098ee00c87b6427d3e7612d73c7c83deba18a100ffac2e - 0.0% (124 Bytes)
[#002] sha256:901aac5e496fc29be42fc2f8b1503942e781f24dd19d49fcdc15954a0446eb26 - 17.23% (336 MB)
[#003] sha256:d558c004af12c1556a7c95ad236c83e9cd3baf69f04fbeef0c68d9887d6082bb - 0.36% (6.99 MB)
[#004] sha256:6f2699eea2b874e037dd4251e5a0fad4c9d815d05867acd78ce72adb35a80c6a - 0.14% (2.77 MB)
[#005] sha256:b57a9aeba1eb4a17aa1589135a2acad1cc5e54c9a135f29cb39b8d2fdb05cac0 - 3.71% (72.3 MB)
[#006] sha256:51a62ebcff0b920dd8a66b2b44e387ff91af9ed151dd5e8a8cf487d8dcf1d136 - 7.19% (140 MB)
[#007] sha256:c9e93cc3cad2e86784227888d50dc17f4600024146e58a4ece7cf55e0a83c43e - 3.03% (59 MB)
[#008] sha256:13cad1c43b122dd5ed767626579abc28dca9e6942a5ba26b42133bd850917181 - 0.0% (122 Bytes)
[#009] sha256:64d7b422d59e665671df3bc1b2629a09bb2660932db874bf1011e0da7e26b362 - 0.87% (17 MB)
[#010] sha256:d0769f8b5be288daf0a9da7638ad1d63d45a0c62a00c0aef77f0112010cc0c9a - 8.71% (170 MB)
[#011] sha256:38d6eaf11363b008a4b091e7d68e9603ff486a26060e0b912c52bcdae310728a - 0.0% (123 Bytes)
[#012] sha256:bc70a92289de910b29b3fc7b34c0d9732a7b3a94d74352cce80d92bfe3a4b649 - 1.06% (20.6 MB)
[#013] sha256:64cdac86e6560a4246dc78502582964a7daaca7014e87b0e1220178feb96c96c - 0.59% (11.4 MB)
[#014] sha256:d3a627bb057dc051650ec9ef9defea4b3210c8d3ea04f095767a1c937b852f93 - 0.0% (7.72 KB)
[#015] sha256:b055da8e074cc513131c1a3f3cafdc117efa4adc761c2536de1df30b834a2595 - 1.9% (36.9 MB)
[#016] sha256:39eaff4200fa2771da1de2c43204d49adbe776e6eb17aee6df79cafdbba8287a - 0.0% (206 Bytes)
[#017] sha256:6511fbdf145c0fa1fbcf8fe0ddd31cbf4018081cc56400a6b23f59f00d359334 - 34.99% (681 MB)
[#018] sha256:bd9ddc54bea929a22b334e73e026d4136e5b73f5cc29942896c72e4ece69b13d - 0.0% (34 Bytes)
[#019] sha256:8a7efe258e0d781238a9616b56b3d5536ff36bf0b4f9b9a8c32d07532b2e273f - 7.97% (155 MB)
[#020] sha256:4a658fb53f7ca70cfd795887450b84929e8075580c197d2871f6681f8e6f56a3 - 1.03% (20.1 MB)
[#021] sha256:bd9ddc54bea929a22b334e73e026d4136e5b73f5cc29942896c72e4ece69b13d - 0.0% (34 Bytes)
[#022] sha256:92b520bf8521cc19d30e8070ff1ff03e984628539976b67587ab5bb9261f90f5 - 9.77% (190 MB)
History
/bin/sh -c #(nop) ARG RELEASE
2026-07-31 20:37:20 UTC/bin/sh -c #(nop) ARG LAUNCHPAD_BUILD_ARCH
2026-07-31 20:37:20 UTC/bin/sh -c #(nop) LABEL org.opencontainers.image.version=24.04
2026-07-31 20:37:22 UTC/bin/sh -c #(nop) ADD file:d938ff3d4eee15d8600de84bf85eac6ecd0f20bc92dfe305dafbff0bdc974c0f in /
2026-07-31 20:37:23 UTC/bin/sh -c #(nop) CMD ["/bin/bash"]
2026-08-07 10:32:15 UTC (buildkit.dockerfile.v0)LABEL maintainer=tech@appsmith.com
2026-08-07 10:32:15 UTC (buildkit.dockerfile.v0)WORKDIR /opt/appsmith
2026-08-07 10:32:15 UTC (buildkit.dockerfile.v0)ENV LANG=C.UTF-8
2026-08-07 10:32:15 UTC (buildkit.dockerfile.v0)ENV LC_ALL=C.UTF-8
2026-08-07 10:33:08 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && apt-get update && apt-get upgrade --yes && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes supervisor curl nfs-common gnupg gettext ca-certificates libnss-wrapper software-properties-common git && add-apt-repository -y ppa:git-core/ppa && curl -fsSL https://www.mongodb.org/static/pgp/server-7.0.asc | gpg --dearmor -o /usr/share/keyrings/mongodb-server-7.0.gpg && echo "deb [ arch=amd64,arm64 signed-by=/usr/share/keyrings/mongodb-server-7.0.gpg ] https://repo.mongodb.org/apt/ubuntu jammy/mongodb-org/7.0 multiverse" | tee /etc/apt/sources.list.d/mongodb-org-7.0.list && echo "deb http://apt.postgresql.org/pub/repos/apt $(grep CODENAME /etc/lsb-release | cut -d= -f2)-pgdg main" | tee /etc/apt/sources.list.d/pgdg.list && curl --silent --show-error --location https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - && apt update && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes mongodb-org-server mongodb-org-mongos mongodb-mongosh postgresql-14 git tar zstd openssh-client && apt-get clean && rm -rf /root/.cache /root/.npm /usr/local/share/doc /usr/share/doc /usr/share/man /var/lib/apt/lists/* /tmp/* # buildkit
2026-08-07 10:33:08 UTC (buildkit.dockerfile.v0)COPY /usr/local/bin/redis-server /usr/local/bin/redis-server # buildkit
2026-08-07 10:33:09 UTC (buildkit.dockerfile.v0)COPY /usr/local/bin/redis-cli /usr/local/bin/redis-cli # buildkit
2026-08-07 10:33:09 UTC (buildkit.dockerfile.v0)COPY /tmp/mongo-tools/bin/ /usr/bin/ # buildkit
2026-08-07 10:33:09 UTC (buildkit.dockerfile.v0)ENV PATH=/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-08-07 10:33:11 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && mkdir -p /opt/java && arch="$(uname -m | sed 's/x86_64/x64/; s/aarch64/aarch64/')" && curl --location "https://api.adoptium.net/v3/binary/latest/25/ga/linux/${arch}/jdk/hotspot/normal/eclipse" | tar -xz -C /opt/java --strip-components 1 # buildkit
2026-08-07 10:33:15 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eo xtrace mkdir -p /opt/node arch="$(uname -m | sed 's/x86_64/x64/; s/aarch64/arm64/')" curl -LOsS "https://nodejs.org/dist/latest-v24.x/SHASUMS256.txt" filename="$(awk '/linux-'"$arch"'.tar.gz/ {print $2}' SHASUMS256.txt)" curl -LOsS "https://nodejs.org/dist/latest-v24.x/$filename" grep "$filename" SHASUMS256.txt | sha256sum -c - tar -xzf "$filename" -C /opt/node --strip-components 1 rm "$filename" SHASUMS256.txt # Node 24.x bundles npm 11.16/11.17, whose bundled tar (<=7.5.16) is vulnerable # to CVE-2026-59873 (node-tar gzip-bomb DoS). npm 11.18.0 is the first release # bundling the patched tar 7.5.19; pin it since no Node 24.x ships a fixed npm yet. export PATH="/opt/node/bin:$PATH" npm install -g npm@11.18.0 npm cache clean --force # buildkit
2026-08-07 10:33:15 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/caddy # buildkit
2026-08-07 10:33:15 UTC (buildkit.dockerfile.v0)COPY /usr/bin/caddy /opt/caddy/caddy # buildkit
2026-08-07 10:33:17 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/keycloak/data && curl --location https://github.com/keycloak/keycloak/releases/download/26.6.2/keycloak-26.6.2.tar.gz | tar -xz -C /opt/keycloak --strip-components 1 && mkdir -p /opt/keycloak/data/tmp # buildkit
2026-08-07 10:33:17 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && mkdir -p /opt/temporal # buildkit
2026-08-07 10:33:17 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/bin/temporal-server /opt/temporal/ # buildkit
2026-08-07 10:33:17 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/bin/temporal-sql-tool /opt/temporal/ # buildkit
2026-08-07 10:33:17 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/temporal-1.22.7/schema/postgresql/v12 /opt/temporal/temporal-1.22.7/schema/postgresql/v12 # buildkit
2026-08-07 10:33:18 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/newrelic && curl -o /opt/newrelic/newrelic.jar https://download.newrelic.com/newrelic/java-agent/newrelic-agent/current/newrelic-agent.jar # buildkit
2026-08-07 10:33:18 UTC (buildkit.dockerfile.v0)VOLUME [/appsmith-stacks]
2026-08-07 10:33:18 UTC (buildkit.dockerfile.v0)ENV TMP=/tmp/appsmith
2026-08-07 10:33:18 UTC (buildkit.dockerfile.v0)ENV WWW_PATH=/tmp/appsmith/www
2026-08-07 10:33:18 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_SYMLINK=/usr/local/lib/libnss_wrapper.so
2026-08-07 10:33:18 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c NSS_WRAPPER_LIB=$(find /usr/lib -name libnss_wrapper.so -type f 2>/dev/null | head -n1) && ln -sf "$NSS_WRAPPER_LIB" $NSS_WRAPPER_SYMLINK # buildkit
2026-08-07 10:33:18 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_PASSWD=/tmp/appsmith/passwd
2026-08-07 10:33:18 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_GROUP=/tmp/appsmith/group
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ARG APPSMITH_CLOUD_SERVICES_BASE_URL
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ENV APPSMITH_CLOUD_SERVICES_BASE_URL=
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ARG APPSMITH_SEGMENT_CE_KEY
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ARG APPSMITH_AIRGAP_ENABLED=false
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ARG KEYGEN_LICENSE_VERIFICATION_KEY
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ARG APPSMITH_CLIENT_BUILD_PATH=./app/client/build
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ENV APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ENV APPSMITH_AIRGAP_ENABLED=false
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ENV KEYGEN_LICENSE_VERIFICATION_KEY=
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ARG APPSMITH_BETTERBUGS_API_KEY
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ENV APPSMITH_BETTERBUGS_API_KEY=
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ARG APPSMITH_PYLON_APP_ID
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ENV APPSMITH_PYLON_APP_ID=
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)COPY deploy/docker/fs / # buildkit
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL= APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY= APPSMITH_PYLON_APP_ID= /bin/sh -c if ! [ -f info.json ]; then echo "Missing info.json" >&2 exit 1 fi if ! [ -f server/mongo/server.jar ]; then echo "Missing MongoDB server.jar file. Are you using the build script?" >&2 exit 1 fi # buildkit
2026-08-10 15:08:30 UTC (buildkit.dockerfile.v0)COPY ./app/client/build editor/ # buildkit
2026-08-10 15:08:30 UTC (buildkit.dockerfile.v0)COPY ./app/client/packages/rts/dist rts/ # buildkit
2026-08-10 15:08:30 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL= APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY= APPSMITH_PYLON_APP_ID= /bin/sh -c mkdir --mode 775 "/dev/shm/git-storage" # buildkit
2026-08-10 15:08:30 UTC (buildkit.dockerfile.v0)ENV PATH=/opt/bin:/opt/java/bin:/opt/node/bin:/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-08-10 15:08:42 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL= APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY= APPSMITH_PYLON_APP_ID= /bin/sh -c set -o errexit cd ./rts # NODE_DISABLE_COMPILE_CACHE=1 prevents npm/node from populating a v8 # bytecode cache under $TMP (/tmp/appsmith) as root during the build, # which would otherwise leave the directory un-writable for the # non-root runtime user when the entrypoint tries to mkdir inside it. # The cache only benefits npm's own code, not RTS, so disabling at # build time costs nothing. NODE_DISABLE_COMPILE_CACHE=1 npm install --only=prod cd - # Make all `*.sh` files executable, excluding `node_modules`. find . \( -name node_modules -prune \) -o \( -type f -name '*.sh' \) -exec chmod +x '{}' + # Ensure all custom command-scripts have executable permission chmod +x /opt/bin/* /watchtower-hooks/*.sh # Disable setuid/setgid bits for the files inside container. find / \( -path /proc -prune \) -o \( \( -perm -2000 -o -perm -4000 \) -exec chmod -s '{}' + \) || true mkdir -p /.mongodb/mongosh /appsmith-stacks chmod ugo+w /etc /appsmith-stacks chmod -R ugo+w /var/run /.mongodb /etc/ssl /usr/local/share ln --verbose --force --symbolic --no-target-directory /appsmith-stacks/data/keycloak /opt/keycloak/data/h2 # Keycloak writes builds to the quarkus directory in some situations and needs to be able to do so when not root chmod -R ugo+w /opt/keycloak/lib/quarkus # Keycloak 24+ writes a truststore to /opt/keycloak/data/ at startup chmod ugo+w /opt/keycloak/data # Keycloak's GzipResourceEncodingProvider caches compressed theme resources here chmod -R ugo+w /opt/keycloak/data/tmp # buildkit
2026-08-10 15:08:42 UTC (buildkit.dockerfile.v0)LABEL com.centurylinklabs.watchtower.lifecycle.pre-check=/watchtower-hooks/pre-check.sh
2026-08-10 15:08:42 UTC (buildkit.dockerfile.v0)LABEL com.centurylinklabs.watchtower.lifecycle.pre-update=/watchtower-hooks/pre-update.sh
2026-08-10 15:08:42 UTC (buildkit.dockerfile.v0)EXPOSE map[80/tcp:{}]
2026-08-10 15:08:42 UTC (buildkit.dockerfile.v0)EXPOSE map[443/tcp:{}]
2026-08-10 15:08:42 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["/opt/appsmith/entrypoint.sh"]
2026-08-10 15:08:42 UTC (buildkit.dockerfile.v0)HEALTHCHECK &{["CMD-SHELL" "\"/opt/appsmith/healthcheck.sh\""] "15s" "15s" "45s" "0s" '\x00'}
2026-08-10 15:08:42 UTC (buildkit.dockerfile.v0)CMD ["/usr/bin/supervisord" "-n"]
Details
2026-08-10 15:08:46 UTC
1.88 GB
Labels
-
com.centurylinklabs.watchtower.lifecycle.pre-check/watchtower-hooks/pre-check.sh
-
com.centurylinklabs.watchtower.lifecycle.pre-update/watchtower-hooks/pre-update.sh
-
maintainertech@appsmith.com
-
org.opencontainers.image.version24.04
Environment
APPSMITH_AIRGAP_ENABLEDfalse
APPSMITH_BETTERBUGS_API_KEY APPSMITH_CLOUD_SERVICES_BASE_URL APPSMITH_PYLON_APP_ID APPSMITH_SEGMENT_CE_KEYAGuvNK0MfQgtxwBMCia7fRNxTjfoBRec
KEYGEN_LICENSE_VERIFICATION_KEY LANGC.UTF-8
LC_ALLC.UTF-8
NSS_WRAPPER_GROUP/tmp/appsmith/group
NSS_WRAPPER_PASSWD/tmp/appsmith/passwd
NSS_WRAPPER_SYMLINK/usr/local/lib/libnss_wrapper.so
PATH/opt/bin:/opt/java/bin:/opt/node/bin:/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
TMP/tmp/appsmith
WWW_PATH/tmp/appsmith/www
Layers
[#000] sha256:d23996caa910b8e5029375ee7c7ec02ef8bae3d85194897323e7145071299ac9 - 1.43% (27.5 MB)
[#001] sha256:89cfd71a20f16485d449f520812c3b8e423845cba51e6d44cfbf98aac117eb86 - 0.0% (123 Bytes)
[#002] sha256:4a762220cbc57ee0193d1775f86b3d4cab24c7be16d7920750365c98525c34d1 - 16.85% (324 MB)
[#003] sha256:fb024a1f7248ed910ba291035790140ee4e88fb0197b19baddba5ef49d220616 - 0.37% (7.03 MB)
[#004] sha256:eb50f8fd5f0864e0d5186b1205b6cf19451870008c2e08453914b2a6025d8cec - 0.15% (2.82 MB)
[#005] sha256:d32e4fd3dbc7442a5de3899998bf1c89ce2a18f4d9fef7f7ba3ab4ef5820dcfc - 3.44% (66.2 MB)
[#006] sha256:98d75aa60b305f6d34c1a850b13f106088eecd571ac61dd416eabf5bad7a78a7 - 7.21% (139 MB)
[#007] sha256:794b7d53cb120535f1c258f3a9715f8b73ed8f686b2c2e79f960d4320ce62117 - 3.06% (58.8 MB)
[#008] sha256:1acb7fb6902a2157aa202211d2c3ebb2a4e934c36c8a8c0a9650cd101b2ca9df - 0.0% (122 Bytes)
[#009] sha256:05213b53a126c0a3c816a5a1008692880e637618ff94584305c56d6da2ddf42a - 0.8% (15.4 MB)
[#010] sha256:0458f677649c40b58bfdc89c03a95042a47598781a3ba340daa5fef194dab12a - 8.81% (170 MB)
[#011] sha256:154a73238f44310c04feb0f601e5d8aaef5d388fa6fc18f5575d89dead51f4c9 - 0.0% (125 Bytes)
[#012] sha256:937507e5871745644d30a9c0b1304a92ebc77f8d2035100b27123ad6a4bfa7da - 0.96% (18.4 MB)
[#013] sha256:ef207b9b8b75555a14529ded258959be64eb7b61749e2d99812159bbf45c7af5 - 0.53% (10.1 MB)
[#014] sha256:b294b978e380bf30047ac35196fc749273f4ab3d05665ed1af3303a755f02e94 - 0.0% (7.72 KB)
[#015] sha256:512f67ad45b431bb05dc05041a5c8d4fb6eeb1291a661749c1b0b3648eb6b668 - 1.92% (36.9 MB)
[#016] sha256:5eacc7a3960db76e2d629a8c85846b92d96680edd3312642cc7efcc1a14015cd - 0.0% (206 Bytes)
[#017] sha256:6511fbdf145c0fa1fbcf8fe0ddd31cbf4018081cc56400a6b23f59f00d359334 - 35.41% (681 MB)
[#018] sha256:bd9ddc54bea929a22b334e73e026d4136e5b73f5cc29942896c72e4ece69b13d - 0.0% (34 Bytes)
[#019] sha256:8a7efe258e0d781238a9616b56b3d5536ff36bf0b4f9b9a8c32d07532b2e273f - 8.06% (155 MB)
[#020] sha256:4a658fb53f7ca70cfd795887450b84929e8075580c197d2871f6681f8e6f56a3 - 1.04% (20.1 MB)
[#021] sha256:bd9ddc54bea929a22b334e73e026d4136e5b73f5cc29942896c72e4ece69b13d - 0.0% (34 Bytes)
[#022] sha256:37b0ca7c810421ce77961d015bd01021c5a933bc147aed8b0d172bc58b68b838 - 9.97% (192 MB)
History
/bin/sh -c #(nop) ARG RELEASE
2026-07-31 20:45:33 UTC/bin/sh -c #(nop) ARG LAUNCHPAD_BUILD_ARCH
2026-07-31 20:45:33 UTC/bin/sh -c #(nop) LABEL org.opencontainers.image.version=24.04
2026-07-31 20:45:37 UTC/bin/sh -c #(nop) ADD file:695c79b2217675519eeed9028b8e5d7ae9915817a49f5bf34e80ad57197f07f6 in /
2026-07-31 20:45:37 UTC/bin/sh -c #(nop) CMD ["/bin/bash"]
2026-08-07 10:32:16 UTC (buildkit.dockerfile.v0)LABEL maintainer=tech@appsmith.com
2026-08-07 10:32:16 UTC (buildkit.dockerfile.v0)WORKDIR /opt/appsmith
2026-08-07 10:32:16 UTC (buildkit.dockerfile.v0)ENV LANG=C.UTF-8
2026-08-07 10:32:16 UTC (buildkit.dockerfile.v0)ENV LC_ALL=C.UTF-8
2026-08-07 10:33:16 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && apt-get update && apt-get upgrade --yes && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes supervisor curl nfs-common gnupg gettext ca-certificates libnss-wrapper software-properties-common git && add-apt-repository -y ppa:git-core/ppa && curl -fsSL https://www.mongodb.org/static/pgp/server-7.0.asc | gpg --dearmor -o /usr/share/keyrings/mongodb-server-7.0.gpg && echo "deb [ arch=amd64,arm64 signed-by=/usr/share/keyrings/mongodb-server-7.0.gpg ] https://repo.mongodb.org/apt/ubuntu jammy/mongodb-org/7.0 multiverse" | tee /etc/apt/sources.list.d/mongodb-org-7.0.list && echo "deb http://apt.postgresql.org/pub/repos/apt $(grep CODENAME /etc/lsb-release | cut -d= -f2)-pgdg main" | tee /etc/apt/sources.list.d/pgdg.list && curl --silent --show-error --location https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - && apt update && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes mongodb-org-server mongodb-org-mongos mongodb-mongosh postgresql-14 git tar zstd openssh-client && apt-get clean && rm -rf /root/.cache /root/.npm /usr/local/share/doc /usr/share/doc /usr/share/man /var/lib/apt/lists/* /tmp/* # buildkit
2026-08-07 10:33:17 UTC (buildkit.dockerfile.v0)COPY /usr/local/bin/redis-server /usr/local/bin/redis-server # buildkit
2026-08-07 10:33:17 UTC (buildkit.dockerfile.v0)COPY /usr/local/bin/redis-cli /usr/local/bin/redis-cli # buildkit
2026-08-07 10:33:17 UTC (buildkit.dockerfile.v0)COPY /tmp/mongo-tools/bin/ /usr/bin/ # buildkit
2026-08-07 10:33:17 UTC (buildkit.dockerfile.v0)ENV PATH=/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-08-07 10:33:20 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && mkdir -p /opt/java && arch="$(uname -m | sed 's/x86_64/x64/; s/aarch64/aarch64/')" && curl --location "https://api.adoptium.net/v3/binary/latest/25/ga/linux/${arch}/jdk/hotspot/normal/eclipse" | tar -xz -C /opt/java --strip-components 1 # buildkit
2026-08-07 10:33:25 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eo xtrace mkdir -p /opt/node arch="$(uname -m | sed 's/x86_64/x64/; s/aarch64/arm64/')" curl -LOsS "https://nodejs.org/dist/latest-v24.x/SHASUMS256.txt" filename="$(awk '/linux-'"$arch"'.tar.gz/ {print $2}' SHASUMS256.txt)" curl -LOsS "https://nodejs.org/dist/latest-v24.x/$filename" grep "$filename" SHASUMS256.txt | sha256sum -c - tar -xzf "$filename" -C /opt/node --strip-components 1 rm "$filename" SHASUMS256.txt # Node 24.x bundles npm 11.16/11.17, whose bundled tar (<=7.5.16) is vulnerable # to CVE-2026-59873 (node-tar gzip-bomb DoS). npm 11.18.0 is the first release # bundling the patched tar 7.5.19; pin it since no Node 24.x ships a fixed npm yet. export PATH="/opt/node/bin:$PATH" npm install -g npm@11.18.0 npm cache clean --force # buildkit
2026-08-07 10:33:26 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/caddy # buildkit
2026-08-07 10:33:26 UTC (buildkit.dockerfile.v0)COPY /usr/bin/caddy /opt/caddy/caddy # buildkit
2026-08-07 10:33:28 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/keycloak/data && curl --location https://github.com/keycloak/keycloak/releases/download/26.6.2/keycloak-26.6.2.tar.gz | tar -xz -C /opt/keycloak --strip-components 1 && mkdir -p /opt/keycloak/data/tmp # buildkit
2026-08-07 10:33:28 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && mkdir -p /opt/temporal # buildkit
2026-08-07 10:33:28 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/bin/temporal-server /opt/temporal/ # buildkit
2026-08-07 10:33:28 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/bin/temporal-sql-tool /opt/temporal/ # buildkit
2026-08-07 10:33:28 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/temporal-1.22.7/schema/postgresql/v12 /opt/temporal/temporal-1.22.7/schema/postgresql/v12 # buildkit
2026-08-07 10:33:29 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/newrelic && curl -o /opt/newrelic/newrelic.jar https://download.newrelic.com/newrelic/java-agent/newrelic-agent/current/newrelic-agent.jar # buildkit
2026-08-07 10:33:29 UTC (buildkit.dockerfile.v0)VOLUME [/appsmith-stacks]
2026-08-07 10:33:29 UTC (buildkit.dockerfile.v0)ENV TMP=/tmp/appsmith
2026-08-07 10:33:29 UTC (buildkit.dockerfile.v0)ENV WWW_PATH=/tmp/appsmith/www
2026-08-07 10:33:29 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_SYMLINK=/usr/local/lib/libnss_wrapper.so
2026-08-07 10:33:29 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c NSS_WRAPPER_LIB=$(find /usr/lib -name libnss_wrapper.so -type f 2>/dev/null | head -n1) && ln -sf "$NSS_WRAPPER_LIB" $NSS_WRAPPER_SYMLINK # buildkit
2026-08-07 10:33:29 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_PASSWD=/tmp/appsmith/passwd
2026-08-07 10:33:29 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_GROUP=/tmp/appsmith/group
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ARG APPSMITH_CLOUD_SERVICES_BASE_URL
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ENV APPSMITH_CLOUD_SERVICES_BASE_URL=
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ARG APPSMITH_SEGMENT_CE_KEY
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ARG APPSMITH_AIRGAP_ENABLED=false
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ARG KEYGEN_LICENSE_VERIFICATION_KEY
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ARG APPSMITH_CLIENT_BUILD_PATH=./app/client/build
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ENV APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ENV APPSMITH_AIRGAP_ENABLED=false
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ENV KEYGEN_LICENSE_VERIFICATION_KEY=
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ARG APPSMITH_BETTERBUGS_API_KEY
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ENV APPSMITH_BETTERBUGS_API_KEY=
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ARG APPSMITH_PYLON_APP_ID
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)ENV APPSMITH_PYLON_APP_ID=
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)COPY deploy/docker/fs / # buildkit
2026-08-10 15:08:29 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL= APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY= APPSMITH_PYLON_APP_ID= /bin/sh -c if ! [ -f info.json ]; then echo "Missing info.json" >&2 exit 1 fi if ! [ -f server/mongo/server.jar ]; then echo "Missing MongoDB server.jar file. Are you using the build script?" >&2 exit 1 fi # buildkit
2026-08-10 15:08:30 UTC (buildkit.dockerfile.v0)COPY ./app/client/build editor/ # buildkit
2026-08-10 15:08:30 UTC (buildkit.dockerfile.v0)COPY ./app/client/packages/rts/dist rts/ # buildkit
2026-08-10 15:08:30 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL= APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY= APPSMITH_PYLON_APP_ID= /bin/sh -c mkdir --mode 775 "/dev/shm/git-storage" # buildkit
2026-08-10 15:08:30 UTC (buildkit.dockerfile.v0)ENV PATH=/opt/bin:/opt/java/bin:/opt/node/bin:/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-08-10 15:08:46 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL= APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY= APPSMITH_PYLON_APP_ID= /bin/sh -c set -o errexit cd ./rts # NODE_DISABLE_COMPILE_CACHE=1 prevents npm/node from populating a v8 # bytecode cache under $TMP (/tmp/appsmith) as root during the build, # which would otherwise leave the directory un-writable for the # non-root runtime user when the entrypoint tries to mkdir inside it. # The cache only benefits npm's own code, not RTS, so disabling at # build time costs nothing. NODE_DISABLE_COMPILE_CACHE=1 npm install --only=prod cd - # Make all `*.sh` files executable, excluding `node_modules`. find . \( -name node_modules -prune \) -o \( -type f -name '*.sh' \) -exec chmod +x '{}' + # Ensure all custom command-scripts have executable permission chmod +x /opt/bin/* /watchtower-hooks/*.sh # Disable setuid/setgid bits for the files inside container. find / \( -path /proc -prune \) -o \( \( -perm -2000 -o -perm -4000 \) -exec chmod -s '{}' + \) || true mkdir -p /.mongodb/mongosh /appsmith-stacks chmod ugo+w /etc /appsmith-stacks chmod -R ugo+w /var/run /.mongodb /etc/ssl /usr/local/share ln --verbose --force --symbolic --no-target-directory /appsmith-stacks/data/keycloak /opt/keycloak/data/h2 # Keycloak writes builds to the quarkus directory in some situations and needs to be able to do so when not root chmod -R ugo+w /opt/keycloak/lib/quarkus # Keycloak 24+ writes a truststore to /opt/keycloak/data/ at startup chmod ugo+w /opt/keycloak/data # Keycloak's GzipResourceEncodingProvider caches compressed theme resources here chmod -R ugo+w /opt/keycloak/data/tmp # buildkit
2026-08-10 15:08:46 UTC (buildkit.dockerfile.v0)LABEL com.centurylinklabs.watchtower.lifecycle.pre-check=/watchtower-hooks/pre-check.sh
2026-08-10 15:08:46 UTC (buildkit.dockerfile.v0)LABEL com.centurylinklabs.watchtower.lifecycle.pre-update=/watchtower-hooks/pre-update.sh
2026-08-10 15:08:46 UTC (buildkit.dockerfile.v0)EXPOSE map[80/tcp:{}]
2026-08-10 15:08:46 UTC (buildkit.dockerfile.v0)EXPOSE map[443/tcp:{}]
2026-08-10 15:08:46 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["/opt/appsmith/entrypoint.sh"]
2026-08-10 15:08:46 UTC (buildkit.dockerfile.v0)HEALTHCHECK &{["CMD-SHELL" "\"/opt/appsmith/healthcheck.sh\""] "15s" "15s" "45s" "0s" '\x00'}
2026-08-10 15:08:46 UTC (buildkit.dockerfile.v0)CMD ["/usr/bin/supervisord" "-n"]
Delete Tag
Please be careful as this will not just delete the reference but also the actual content!
For example when you have latest and v1.2.3 both pointing to the same image
the deletion of latest will also permanently remove v1.2.3.