Namespace
appsmith
Image / Tagappsmith-ee:e416b10ecb7308734ddca3b18eba2e98bb476767
Content Digestsha256:8aaee396fd380bb8c48320efddf8bcd9adf60989e045a135e46f6e3d83d684e6
Details
2026-09-15 09:03:50 UTC
1.89 GB
Labels
-
com.centurylinklabs.watchtower.lifecycle.pre-check/watchtower-hooks/pre-check.sh
-
com.centurylinklabs.watchtower.lifecycle.pre-update/watchtower-hooks/pre-update.sh
-
maintainertech@appsmith.com
-
org.opencontainers.image.version24.04
Environment
APPSMITH_AIRGAP_ENABLEDfalse
APPSMITH_BETTERBUGS_API_KEY APPSMITH_CLOUD_SERVICES_BASE_URL APPSMITH_PYLON_APP_ID APPSMITH_SEGMENT_CE_KEYAGuvNK0MfQgtxwBMCia7fRNxTjfoBRec
KEYGEN_LICENSE_VERIFICATION_KEY LANGC.UTF-8
LC_ALLC.UTF-8
NSS_WRAPPER_GROUP/tmp/appsmith/group
NSS_WRAPPER_PASSWD/tmp/appsmith/passwd
NSS_WRAPPER_SYMLINK/usr/local/lib/libnss_wrapper.so
PATH/opt/bin:/opt/java/bin:/opt/node/bin:/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
TMP/tmp/appsmith
WWW_PATH/tmp/appsmith/www
Layers
[#000] sha256:e51aee9c82ec5dd5ba2add49c45c6d85d460512757e2615b69bcdf9469c7cb58 - 1.46% (28.4 MB)
[#001] sha256:3784e0a3f8c4ec44f5402f3d09fd60099fbeab91156667efa61e06dd1d48d36b - 0.0% (123 Bytes)
[#002] sha256:26732c7b8eb348ceefa90f0569ce7fa6c4d75e08b686ff465c38e59a31e888a4 - 16.54% (321 MB)
[#003] sha256:c6228bb689beffb49be44c34e52c5484ba46f14cfe29068a4bfc1983c1b6c029 - 0.36% (6.99 MB)
[#004] sha256:363389d558b3f4ce78fce99c18ab720855641faae56e5580504500cf59142edb - 0.14% (2.77 MB)
[#005] sha256:fcfb681a49effbd43250e6ac9c9eec9b6990cb87ef18bf8c14c7f7f299112dca - 3.73% (72.3 MB)
[#006] sha256:58ee7a94600046e2747678fea0fdbb8c544a8cf52c01e07818558363e86c638d - 7.23% (140 MB)
[#007] sha256:a1c78a15ef21b90f99ecefecb0ea62b7886d73517814ed9ec63fec7f7172ca0a - 3.08% (59.7 MB)
[#008] sha256:57fdcda7112957926f0603cffea3bcbbb449dfcf58833b8ce7836d3377da939f - 0.0% (122 Bytes)
[#009] sha256:6256060b438865cbd787ff6fa254897178240f7d44184221e6caac7f5629cdc6 - 0.88% (17 MB)
[#010] sha256:c7b3db9d206af881648a117ec2dd1f597fc7b60dc17c41f5844011fa7f98be69 - 8.87% (172 MB)
[#011] sha256:58cfd253c1819eada284eafa298e57070360b0b597fc2caa2aab318957bf37c4 - 0.03% (545 KB)
[#012] sha256:a7c0ef3f34ecb4ac4ab8fc7a8b17b1627db4c332d80142454098f44cf0230034 - 0.0% (124 Bytes)
[#013] sha256:761d463dd42d3c517d3825fbb85b85aaed105ffafeaa08b166dbf3db216c7c66 - 1.06% (20.6 MB)
[#014] sha256:7f8d2c21f2ff2dba257345d96d1064cef6db4596cab723586d78d77ce5a4b622 - 0.59% (11.5 MB)
[#015] sha256:4e82f8687b4f32ee6c2de45337bd4956683a703a076864c3af64475d79c60f9c - 0.0% (7.72 KB)
[#016] sha256:0ebf1c22b07f1199940b03beef71bbef3e34f6646874e01f512d334410c6e5f7 - 1.9% (36.9 MB)
[#017] sha256:a3c6b0bc9ef9bc71096102122ea067b8b072be9371e9022052ea17db5c82ba6c - 0.0% (207 Bytes)
[#018] sha256:0f02533317b4f23a6936d6cb787f01d4e495b0683b4eea7739ca2e033c3d3e15 - 34.92% (677 MB)
[#019] sha256:bd9ddc54bea929a22b334e73e026d4136e5b73f5cc29942896c72e4ece69b13d - 0.0% (34 Bytes)
[#020] sha256:0b1cd98e39d3de76a805d619797a8bae2c7d531cbe87c282f497d43858ed7c04 - 8.08% (157 MB)
[#021] sha256:25050192330ba64c174e12af676aff610be0d28729e77f9f6461ef3af930259a - 1.03% (20.1 MB)
[#022] sha256:e5d4e66120d91fdf30d6d7998ddcac48c0ef6b658aa09bea5c6653760def82c9 - 0.12% (2.28 MB)
[#023] sha256:bd9ddc54bea929a22b334e73e026d4136e5b73f5cc29942896c72e4ece69b13d - 0.0% (34 Bytes)
[#024] sha256:7f1024fdc5d8715b84985b10da73cdb9f3128183cbac9a424fb96be15322e88e - 9.96% (193 MB)
History
/bin/sh -c #(nop) ARG RELEASE
2026-09-07 06:58:02 UTC/bin/sh -c #(nop) ARG LAUNCHPAD_BUILD_ARCH
2026-09-07 06:58:02 UTC/bin/sh -c #(nop) LABEL org.opencontainers.image.version=24.04
2026-09-07 06:58:04 UTC/bin/sh -c #(nop) ADD file:de4937ce3dfc7c89f05f1503c52434f0a631ac84995f0df65eed0754e5c97d48 in /
2026-09-07 06:58:04 UTC/bin/sh -c #(nop) CMD ["/bin/bash"]
2026-09-10 07:44:04 UTC (buildkit.dockerfile.v0)LABEL maintainer=tech@appsmith.com
2026-09-10 07:44:04 UTC (buildkit.dockerfile.v0)WORKDIR /opt/appsmith
2026-09-10 07:44:04 UTC (buildkit.dockerfile.v0)ENV LANG=C.UTF-8
2026-09-10 07:44:04 UTC (buildkit.dockerfile.v0)ENV LC_ALL=C.UTF-8
2026-09-11 08:50:07 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && apt-get update && apt-get upgrade --yes && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes supervisor curl nfs-common gnupg gettext ca-certificates libnss-wrapper software-properties-common git && add-apt-repository -y ppa:git-core/ppa && curl -fsSL https://www.mongodb.org/static/pgp/server-7.0.asc | gpg --dearmor -o /usr/share/keyrings/mongodb-server-7.0.gpg && echo "deb [ arch=amd64,arm64 signed-by=/usr/share/keyrings/mongodb-server-7.0.gpg ] https://repo.mongodb.org/apt/ubuntu jammy/mongodb-org/7.0 multiverse" | tee /etc/apt/sources.list.d/mongodb-org-7.0.list && echo "deb http://apt.postgresql.org/pub/repos/apt $(grep CODENAME /etc/lsb-release | cut -d= -f2)-pgdg main" | tee /etc/apt/sources.list.d/pgdg.list && curl --silent --show-error --location https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - && apt update && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes mongodb-org-server mongodb-org-mongos mongodb-mongosh postgresql-14 git tar zstd openssh-client && DEBIAN_FRONTEND=noninteractive apt-get purge --yes --auto-remove software-properties-common && apt-get clean && rm -rf /root/.cache /root/.npm /usr/local/share/doc /usr/share/doc /usr/share/man /var/lib/apt/lists/* /tmp/* # buildkit
2026-09-11 08:50:08 UTC (buildkit.dockerfile.v0)COPY /usr/local/bin/redis-server /usr/local/bin/redis-server # buildkit
2026-09-11 08:50:08 UTC (buildkit.dockerfile.v0)COPY /usr/local/bin/redis-cli /usr/local/bin/redis-cli # buildkit
2026-09-11 08:50:08 UTC (buildkit.dockerfile.v0)COPY /tmp/mongo-tools/bin/ /usr/bin/ # buildkit
2026-09-11 08:50:08 UTC (buildkit.dockerfile.v0)ENV PATH=/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-09-11 08:50:10 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && mkdir -p /opt/java && arch="$(uname -m | sed 's/x86_64/x64/; s/aarch64/aarch64/')" && curl --location "https://api.adoptium.net/v3/binary/latest/25/ga/linux/${arch}/jdk/hotspot/normal/eclipse" | tar -xz -C /opt/java --strip-components 1 # buildkit
2026-09-11 08:50:14 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eo xtrace mkdir -p /opt/node arch="$(uname -m | sed 's/x86_64/x64/; s/aarch64/arm64/')" curl -LOsS "https://nodejs.org/dist/latest-v24.x/SHASUMS256.txt" filename="$(awk '/linux-'"$arch"'.tar.gz/ {print $2}' SHASUMS256.txt)" curl -LOsS "https://nodejs.org/dist/latest-v24.x/$filename" grep "$filename" SHASUMS256.txt | sha256sum -c - tar -xzf "$filename" -C /opt/node --strip-components 1 rm "$filename" SHASUMS256.txt # Node 24.x bundles npm 11.16/11.17, whose bundled tar (<=7.5.16) is vulnerable # to CVE-2026-59873 (node-tar gzip-bomb DoS). npm 11.18.0 is the first release # bundling the patched tar 7.5.19; pin it since no Node 24.x ships a fixed npm yet. export PATH="/opt/node/bin:$PATH" npm install -g npm@11.18.0 # npm 11.18.0 / 11.19.0 still vendor brace-expansion 5.0.7 (CVE-2026-69152 / # CVE-2026-14257) and ip-address 10.2.0 (CVE-2026-69192). Unpack patched # tarballs over the nested copies; `npm install --prefix` on npm's own # package.json tries to resolve private @npmcli/* deps and 404s. npm_nm="$(npm root -g)/npm/node_modules" tmp="$(mktemp -d)" (cd "$tmp" && npm pack --silent brace-expansion@5.0.9 ip-address@10.3.1) rm -rf "$npm_nm/brace-expansion" "$npm_nm/ip-address" mkdir -p "$npm_nm/brace-expansion" "$npm_nm/ip-address" tar -xzf "$tmp"/brace-expansion-*.tgz -C "$npm_nm/brace-expansion" --strip-components 1 tar -xzf "$tmp"/ip-address-*.tgz -C "$npm_nm/ip-address" --strip-components 1 rm -rf "$tmp" npm cache clean --force # buildkit
2026-09-11 08:50:14 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/caddy # buildkit
2026-09-11 08:50:15 UTC (buildkit.dockerfile.v0)COPY /usr/bin/caddy /opt/caddy/caddy # buildkit
2026-09-11 08:50:16 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/keycloak/data && curl --location https://github.com/keycloak/keycloak/releases/download/26.7.3/keycloak-26.7.3.tar.gz | tar -xz -C /opt/keycloak --strip-components 1 && mkdir -p /opt/keycloak/data/tmp # buildkit
2026-09-11 08:50:16 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux && KC_NETTY_JAR=/opt/keycloak/lib/lib/main/io.netty.netty-handler-4.1.136.Final.jar && test -f "$KC_NETTY_JAR" && curl --fail --retry 3 --connect-timeout 15 --location --output "$KC_NETTY_JAR" https://repo.maven.apache.org/maven2/io/netty/netty-handler/4.1.137.Final/netty-handler-4.1.137.Final.jar && echo "d0e4c6ee4779f59f6ab2fb5d388e4f57147c82270164b37945764bb9bda96a44 $KC_NETTY_JAR" | sha256sum --check # buildkit
2026-09-11 08:50:17 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && mkdir -p /opt/temporal # buildkit
2026-09-11 08:50:17 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/bin/temporal-server /opt/temporal/ # buildkit
2026-09-11 08:50:17 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/bin/temporal-sql-tool /opt/temporal/ # buildkit
2026-09-11 08:50:17 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/temporal-1.22.7/schema/postgresql/v12 /opt/temporal/temporal-1.22.7/schema/postgresql/v12 # buildkit
2026-09-11 08:50:17 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/newrelic && curl -o /opt/newrelic/newrelic.jar https://download.newrelic.com/newrelic/java-agent/newrelic-agent/current/newrelic-agent.jar # buildkit
2026-09-11 08:50:17 UTC (buildkit.dockerfile.v0)VOLUME [/appsmith-stacks]
2026-09-11 08:50:17 UTC (buildkit.dockerfile.v0)ENV TMP=/tmp/appsmith
2026-09-11 08:50:17 UTC (buildkit.dockerfile.v0)ENV WWW_PATH=/tmp/appsmith/www
2026-09-11 08:50:17 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_SYMLINK=/usr/local/lib/libnss_wrapper.so
2026-09-11 08:50:17 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c NSS_WRAPPER_LIB=$(find /usr/lib -name libnss_wrapper.so -type f 2>/dev/null | head -n1) && ln -sf "$NSS_WRAPPER_LIB" $NSS_WRAPPER_SYMLINK # buildkit
2026-09-11 08:50:17 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_PASSWD=/tmp/appsmith/passwd
2026-09-11 08:50:17 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_GROUP=/tmp/appsmith/group
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ARG APPSMITH_CLOUD_SERVICES_BASE_URL
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ENV APPSMITH_CLOUD_SERVICES_BASE_URL=
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ARG APPSMITH_SEGMENT_CE_KEY
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ARG APPSMITH_AIRGAP_ENABLED=false
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ARG KEYGEN_LICENSE_VERIFICATION_KEY
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ARG APPSMITH_CLIENT_BUILD_PATH=./app/client/build
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ENV APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ENV APPSMITH_AIRGAP_ENABLED=false
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ENV KEYGEN_LICENSE_VERIFICATION_KEY=
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ARG APPSMITH_BETTERBUGS_API_KEY
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ENV APPSMITH_BETTERBUGS_API_KEY=
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ARG APPSMITH_PYLON_APP_ID
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ENV APPSMITH_PYLON_APP_ID=
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)COPY deploy/docker/fs / # buildkit
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL= APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY= APPSMITH_PYLON_APP_ID= /bin/sh -c if ! [ -f info.json ]; then echo "Missing info.json" >&2 exit 1 fi if ! [ -f server/mongo/server.jar ]; then echo "Missing MongoDB server.jar file. Are you using the build script?" >&2 exit 1 fi # buildkit
2026-09-15 09:03:37 UTC (buildkit.dockerfile.v0)COPY ./app/client/build editor/ # buildkit
2026-09-15 09:03:37 UTC (buildkit.dockerfile.v0)COPY ./app/client/packages/rts/dist rts/ # buildkit
2026-09-15 09:03:37 UTC (buildkit.dockerfile.v0)COPY ./app/client/packages/mcp/dist mcp/ # buildkit
2026-09-15 09:03:37 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL= APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY= APPSMITH_PYLON_APP_ID= /bin/sh -c mkdir --mode 775 "/dev/shm/git-storage" # buildkit
2026-09-15 09:03:37 UTC (buildkit.dockerfile.v0)ENV PATH=/opt/bin:/opt/java/bin:/opt/node/bin:/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-09-15 09:03:50 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL= APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY= APPSMITH_PYLON_APP_ID= /bin/sh -c set -o errexit cd ./rts # NODE_DISABLE_COMPILE_CACHE=1 prevents npm/node from populating a v8 # bytecode cache under $TMP (/tmp/appsmith) as root during the build, # which would otherwise leave the directory un-writable for the # non-root runtime user when the entrypoint tries to mkdir inside it. # The cache only benefits npm's own code, not RTS, so disabling at # build time costs nothing. NODE_DISABLE_COMPILE_CACHE=1 npm install --only=prod cd - # Make all `*.sh` files executable, excluding `node_modules`. find . \( -name node_modules -prune \) -o \( -type f -name '*.sh' \) -exec chmod +x '{}' + # Ensure all custom command-scripts have executable permission chmod +x /opt/bin/* /watchtower-hooks/*.sh # Disable setuid/setgid bits for the files inside container. find / \( -path /proc -prune \) -o \( \( -perm -2000 -o -perm -4000 \) -exec chmod -s '{}' + \) || true mkdir -p /.mongodb/mongosh /appsmith-stacks chmod ugo+w /etc /appsmith-stacks chmod -R ugo+w /var/run /.mongodb /etc/ssl /usr/local/share ln --verbose --force --symbolic --no-target-directory /appsmith-stacks/data/keycloak /opt/keycloak/data/h2 # Keycloak writes builds to the quarkus directory in some situations and needs to be able to do so when not root chmod -R ugo+w /opt/keycloak/lib/quarkus # Keycloak 24+ writes a truststore to /opt/keycloak/data/ at startup chmod ugo+w /opt/keycloak/data # Keycloak's GzipResourceEncodingProvider caches compressed theme resources here chmod -R ugo+w /opt/keycloak/data/tmp # buildkit
2026-09-15 09:03:50 UTC (buildkit.dockerfile.v0)LABEL com.centurylinklabs.watchtower.lifecycle.pre-check=/watchtower-hooks/pre-check.sh
2026-09-15 09:03:50 UTC (buildkit.dockerfile.v0)LABEL com.centurylinklabs.watchtower.lifecycle.pre-update=/watchtower-hooks/pre-update.sh
2026-09-15 09:03:50 UTC (buildkit.dockerfile.v0)EXPOSE map[80/tcp:{}]
2026-09-15 09:03:50 UTC (buildkit.dockerfile.v0)EXPOSE map[443/tcp:{}]
2026-09-15 09:03:50 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["/opt/appsmith/entrypoint.sh"]
2026-09-15 09:03:50 UTC (buildkit.dockerfile.v0)HEALTHCHECK &{["CMD-SHELL" "\"/opt/appsmith/healthcheck.sh\""] "15s" "15s" "45s" "0s" '\x00'}
2026-09-15 09:03:50 UTC (buildkit.dockerfile.v0)CMD ["/usr/bin/supervisord" "-n"]
Details
2026-09-15 09:03:54 UTC
1.87 GB
Labels
-
com.centurylinklabs.watchtower.lifecycle.pre-check/watchtower-hooks/pre-check.sh
-
com.centurylinklabs.watchtower.lifecycle.pre-update/watchtower-hooks/pre-update.sh
-
maintainertech@appsmith.com
-
org.opencontainers.image.version24.04
Environment
APPSMITH_AIRGAP_ENABLEDfalse
APPSMITH_BETTERBUGS_API_KEY APPSMITH_CLOUD_SERVICES_BASE_URL APPSMITH_PYLON_APP_ID APPSMITH_SEGMENT_CE_KEYAGuvNK0MfQgtxwBMCia7fRNxTjfoBRec
KEYGEN_LICENSE_VERIFICATION_KEY LANGC.UTF-8
LC_ALLC.UTF-8
NSS_WRAPPER_GROUP/tmp/appsmith/group
NSS_WRAPPER_PASSWD/tmp/appsmith/passwd
NSS_WRAPPER_SYMLINK/usr/local/lib/libnss_wrapper.so
PATH/opt/bin:/opt/java/bin:/opt/node/bin:/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
TMP/tmp/appsmith
WWW_PATH/tmp/appsmith/www
Layers
[#000] sha256:9332cde1e07015fd0f14e769fc74ea901a957e3f62a76de66638f99854867dd2 - 1.44% (27.6 MB)
[#001] sha256:3784e0a3f8c4ec44f5402f3d09fd60099fbeab91156667efa61e06dd1d48d36b - 0.0% (123 Bytes)
[#002] sha256:533e846ec48fe67a3c1134e24ea074e12d14cf71ed6dc7cd0ff0a57cd3eacfce - 16.32% (313 MB)
[#003] sha256:97f33f0a75bc44f6d581f13e55f729a4a4ca29094e0a68cae21c3adafc926aaf - 0.37% (7.03 MB)
[#004] sha256:d9b66dd12e3ddc085dc7b3350a7b8f21fa60e278efc4f500507cc91a8d578bcf - 0.15% (2.82 MB)
[#005] sha256:2a1e01a1154771ac21aebc7fb44848ef9d10c338194a5ffec5b95a6cc1879a2e - 3.45% (66.3 MB)
[#006] sha256:06cb20fa7425f3c0900e48f8ec359fc11f94a682681436bc8fe11a32ca37abb0 - 7.23% (139 MB)
[#007] sha256:551781d60c9089b444782ad40361389651c478acfbc8c79ea1d89bed12aa9849 - 3.1% (59.5 MB)
[#008] sha256:e1ae8e48aa964516d0f846652ad66a7199051a1fc297f142ddebc060a93e20a7 - 0.0% (121 Bytes)
[#009] sha256:a5ceff1c6b058477200d5b3eecb52834ddfb94c24a2c6437942bb0b67fd003f7 - 0.8% (15.4 MB)
[#010] sha256:6fa53558c6001482b1021b746babb211a01f5e5cc99e6ab7a005a2aeace34d76 - 8.96% (172 MB)
[#011] sha256:ae12e733d60357ea8f4cb5d4c42ce3a0e2e98dceaaf3e572f5231f6c90f36ba6 - 0.03% (545 KB)
[#012] sha256:681c41d95bb6a379aa7fcf8f7a4c07f9eb8b88c8ab099bac7299585e160db97b - 0.0% (125 Bytes)
[#013] sha256:b226edd7444ddf07f836cbdb7aead143bd58e00fe2260d38bd79c98cd1195966 - 0.96% (18.5 MB)
[#014] sha256:8f59989a8cff1132409b36a69eadfb8b44c3aa68482bdeb8e81a850665473fd4 - 0.53% (10.2 MB)
[#015] sha256:83135cee00f4bb85f8ef420565fb73f2976bc172c3a9fbc35986f6ac47c5275d - 0.0% (7.71 KB)
[#016] sha256:ea5a4a243165cd1e0e1271056554bd595ca095fd4f64c9a606cdbd188cf0f498 - 1.92% (36.9 MB)
[#017] sha256:67b3d459ecaad0c33274ea21261d257113d3ccc369b97c5244ece96e6d3bb85f - 0.0% (210 Bytes)
[#018] sha256:0f02533317b4f23a6936d6cb787f01d4e495b0683b4eea7739ca2e033c3d3e15 - 35.27% (677 MB)
[#019] sha256:bd9ddc54bea929a22b334e73e026d4136e5b73f5cc29942896c72e4ece69b13d - 0.0% (34 Bytes)
[#020] sha256:cc1671ac440d1dbd032d36f292b825bc58393fe7a5deca4d5620b1cccf36caec - 8.16% (157 MB)
[#021] sha256:25050192330ba64c174e12af676aff610be0d28729e77f9f6461ef3af930259a - 1.05% (20.1 MB)
[#022] sha256:e5d4e66120d91fdf30d6d7998ddcac48c0ef6b658aa09bea5c6653760def82c9 - 0.12% (2.28 MB)
[#023] sha256:bd9ddc54bea929a22b334e73e026d4136e5b73f5cc29942896c72e4ece69b13d - 0.0% (34 Bytes)
[#024] sha256:5cbf2d8963aff16a6d5912165080820177f760bd59bd70557e05c1cec2f3634f - 10.14% (195 MB)
History
/bin/sh -c #(nop) ARG RELEASE
2026-09-07 06:57:57 UTC/bin/sh -c #(nop) ARG LAUNCHPAD_BUILD_ARCH
2026-09-07 06:57:57 UTC/bin/sh -c #(nop) LABEL org.opencontainers.image.version=24.04
2026-09-07 06:58:01 UTC/bin/sh -c #(nop) ADD file:06e064cbfe0750594affea730437107320bdf1e36232c304b900eaa55f88a633 in /
2026-09-07 06:58:01 UTC/bin/sh -c #(nop) CMD ["/bin/bash"]
2026-09-10 07:44:04 UTC (buildkit.dockerfile.v0)LABEL maintainer=tech@appsmith.com
2026-09-10 07:44:04 UTC (buildkit.dockerfile.v0)WORKDIR /opt/appsmith
2026-09-10 07:44:04 UTC (buildkit.dockerfile.v0)ENV LANG=C.UTF-8
2026-09-10 07:44:04 UTC (buildkit.dockerfile.v0)ENV LC_ALL=C.UTF-8
2026-09-11 08:41:14 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && apt-get update && apt-get upgrade --yes && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes supervisor curl nfs-common gnupg gettext ca-certificates libnss-wrapper software-properties-common git && add-apt-repository -y ppa:git-core/ppa && curl -fsSL https://www.mongodb.org/static/pgp/server-7.0.asc | gpg --dearmor -o /usr/share/keyrings/mongodb-server-7.0.gpg && echo "deb [ arch=amd64,arm64 signed-by=/usr/share/keyrings/mongodb-server-7.0.gpg ] https://repo.mongodb.org/apt/ubuntu jammy/mongodb-org/7.0 multiverse" | tee /etc/apt/sources.list.d/mongodb-org-7.0.list && echo "deb http://apt.postgresql.org/pub/repos/apt $(grep CODENAME /etc/lsb-release | cut -d= -f2)-pgdg main" | tee /etc/apt/sources.list.d/pgdg.list && curl --silent --show-error --location https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - && apt update && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes mongodb-org-server mongodb-org-mongos mongodb-mongosh postgresql-14 git tar zstd openssh-client && DEBIAN_FRONTEND=noninteractive apt-get purge --yes --auto-remove software-properties-common && apt-get clean && rm -rf /root/.cache /root/.npm /usr/local/share/doc /usr/share/doc /usr/share/man /var/lib/apt/lists/* /tmp/* # buildkit
2026-09-11 08:41:14 UTC (buildkit.dockerfile.v0)COPY /usr/local/bin/redis-server /usr/local/bin/redis-server # buildkit
2026-09-11 08:41:14 UTC (buildkit.dockerfile.v0)COPY /usr/local/bin/redis-cli /usr/local/bin/redis-cli # buildkit
2026-09-11 08:41:15 UTC (buildkit.dockerfile.v0)COPY /tmp/mongo-tools/bin/ /usr/bin/ # buildkit
2026-09-11 08:41:15 UTC (buildkit.dockerfile.v0)ENV PATH=/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-09-11 08:41:17 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && mkdir -p /opt/java && arch="$(uname -m | sed 's/x86_64/x64/; s/aarch64/aarch64/')" && curl --location "https://api.adoptium.net/v3/binary/latest/25/ga/linux/${arch}/jdk/hotspot/normal/eclipse" | tar -xz -C /opt/java --strip-components 1 # buildkit
2026-09-11 08:41:23 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eo xtrace mkdir -p /opt/node arch="$(uname -m | sed 's/x86_64/x64/; s/aarch64/arm64/')" curl -LOsS "https://nodejs.org/dist/latest-v24.x/SHASUMS256.txt" filename="$(awk '/linux-'"$arch"'.tar.gz/ {print $2}' SHASUMS256.txt)" curl -LOsS "https://nodejs.org/dist/latest-v24.x/$filename" grep "$filename" SHASUMS256.txt | sha256sum -c - tar -xzf "$filename" -C /opt/node --strip-components 1 rm "$filename" SHASUMS256.txt # Node 24.x bundles npm 11.16/11.17, whose bundled tar (<=7.5.16) is vulnerable # to CVE-2026-59873 (node-tar gzip-bomb DoS). npm 11.18.0 is the first release # bundling the patched tar 7.5.19; pin it since no Node 24.x ships a fixed npm yet. export PATH="/opt/node/bin:$PATH" npm install -g npm@11.18.0 # npm 11.18.0 / 11.19.0 still vendor brace-expansion 5.0.7 (CVE-2026-69152 / # CVE-2026-14257) and ip-address 10.2.0 (CVE-2026-69192). Unpack patched # tarballs over the nested copies; `npm install --prefix` on npm's own # package.json tries to resolve private @npmcli/* deps and 404s. npm_nm="$(npm root -g)/npm/node_modules" tmp="$(mktemp -d)" (cd "$tmp" && npm pack --silent brace-expansion@5.0.9 ip-address@10.3.1) rm -rf "$npm_nm/brace-expansion" "$npm_nm/ip-address" mkdir -p "$npm_nm/brace-expansion" "$npm_nm/ip-address" tar -xzf "$tmp"/brace-expansion-*.tgz -C "$npm_nm/brace-expansion" --strip-components 1 tar -xzf "$tmp"/ip-address-*.tgz -C "$npm_nm/ip-address" --strip-components 1 rm -rf "$tmp" npm cache clean --force # buildkit
2026-09-11 08:41:23 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/caddy # buildkit
2026-09-11 08:41:23 UTC (buildkit.dockerfile.v0)COPY /usr/bin/caddy /opt/caddy/caddy # buildkit
2026-09-11 08:41:25 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/keycloak/data && curl --location https://github.com/keycloak/keycloak/releases/download/26.7.3/keycloak-26.7.3.tar.gz | tar -xz -C /opt/keycloak --strip-components 1 && mkdir -p /opt/keycloak/data/tmp # buildkit
2026-09-11 08:41:26 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux && KC_NETTY_JAR=/opt/keycloak/lib/lib/main/io.netty.netty-handler-4.1.136.Final.jar && test -f "$KC_NETTY_JAR" && curl --fail --retry 3 --connect-timeout 15 --location --output "$KC_NETTY_JAR" https://repo.maven.apache.org/maven2/io/netty/netty-handler/4.1.137.Final/netty-handler-4.1.137.Final.jar && echo "d0e4c6ee4779f59f6ab2fb5d388e4f57147c82270164b37945764bb9bda96a44 $KC_NETTY_JAR" | sha256sum --check # buildkit
2026-09-11 08:41:26 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && mkdir -p /opt/temporal # buildkit
2026-09-11 08:41:26 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/bin/temporal-server /opt/temporal/ # buildkit
2026-09-11 08:41:26 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/bin/temporal-sql-tool /opt/temporal/ # buildkit
2026-09-11 08:41:26 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/temporal-1.22.7/schema/postgresql/v12 /opt/temporal/temporal-1.22.7/schema/postgresql/v12 # buildkit
2026-09-11 08:41:27 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/newrelic && curl -o /opt/newrelic/newrelic.jar https://download.newrelic.com/newrelic/java-agent/newrelic-agent/current/newrelic-agent.jar # buildkit
2026-09-11 08:41:27 UTC (buildkit.dockerfile.v0)VOLUME [/appsmith-stacks]
2026-09-11 08:41:27 UTC (buildkit.dockerfile.v0)ENV TMP=/tmp/appsmith
2026-09-11 08:41:27 UTC (buildkit.dockerfile.v0)ENV WWW_PATH=/tmp/appsmith/www
2026-09-11 08:41:27 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_SYMLINK=/usr/local/lib/libnss_wrapper.so
2026-09-11 08:41:27 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c NSS_WRAPPER_LIB=$(find /usr/lib -name libnss_wrapper.so -type f 2>/dev/null | head -n1) && ln -sf "$NSS_WRAPPER_LIB" $NSS_WRAPPER_SYMLINK # buildkit
2026-09-11 08:41:27 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_PASSWD=/tmp/appsmith/passwd
2026-09-11 08:41:27 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_GROUP=/tmp/appsmith/group
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ARG APPSMITH_CLOUD_SERVICES_BASE_URL
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ENV APPSMITH_CLOUD_SERVICES_BASE_URL=
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ARG APPSMITH_SEGMENT_CE_KEY
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ARG APPSMITH_AIRGAP_ENABLED=false
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ARG KEYGEN_LICENSE_VERIFICATION_KEY
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ARG APPSMITH_CLIENT_BUILD_PATH=./app/client/build
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ENV APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ENV APPSMITH_AIRGAP_ENABLED=false
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ENV KEYGEN_LICENSE_VERIFICATION_KEY=
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ARG APPSMITH_BETTERBUGS_API_KEY
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ENV APPSMITH_BETTERBUGS_API_KEY=
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ARG APPSMITH_PYLON_APP_ID
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)ENV APPSMITH_PYLON_APP_ID=
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)COPY deploy/docker/fs / # buildkit
2026-09-15 09:03:36 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL= APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY= APPSMITH_PYLON_APP_ID= /bin/sh -c if ! [ -f info.json ]; then echo "Missing info.json" >&2 exit 1 fi if ! [ -f server/mongo/server.jar ]; then echo "Missing MongoDB server.jar file. Are you using the build script?" >&2 exit 1 fi # buildkit
2026-09-15 09:03:37 UTC (buildkit.dockerfile.v0)COPY ./app/client/build editor/ # buildkit
2026-09-15 09:03:37 UTC (buildkit.dockerfile.v0)COPY ./app/client/packages/rts/dist rts/ # buildkit
2026-09-15 09:03:37 UTC (buildkit.dockerfile.v0)COPY ./app/client/packages/mcp/dist mcp/ # buildkit
2026-09-15 09:03:38 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL= APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY= APPSMITH_PYLON_APP_ID= /bin/sh -c mkdir --mode 775 "/dev/shm/git-storage" # buildkit
2026-09-15 09:03:38 UTC (buildkit.dockerfile.v0)ENV PATH=/opt/bin:/opt/java/bin:/opt/node/bin:/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-09-15 09:03:54 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL= APPSMITH_SEGMENT_CE_KEY=AGuvNK0MfQgtxwBMCia7fRNxTjfoBRec APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY= APPSMITH_PYLON_APP_ID= /bin/sh -c set -o errexit cd ./rts # NODE_DISABLE_COMPILE_CACHE=1 prevents npm/node from populating a v8 # bytecode cache under $TMP (/tmp/appsmith) as root during the build, # which would otherwise leave the directory un-writable for the # non-root runtime user when the entrypoint tries to mkdir inside it. # The cache only benefits npm's own code, not RTS, so disabling at # build time costs nothing. NODE_DISABLE_COMPILE_CACHE=1 npm install --only=prod cd - # Make all `*.sh` files executable, excluding `node_modules`. find . \( -name node_modules -prune \) -o \( -type f -name '*.sh' \) -exec chmod +x '{}' + # Ensure all custom command-scripts have executable permission chmod +x /opt/bin/* /watchtower-hooks/*.sh # Disable setuid/setgid bits for the files inside container. find / \( -path /proc -prune \) -o \( \( -perm -2000 -o -perm -4000 \) -exec chmod -s '{}' + \) || true mkdir -p /.mongodb/mongosh /appsmith-stacks chmod ugo+w /etc /appsmith-stacks chmod -R ugo+w /var/run /.mongodb /etc/ssl /usr/local/share ln --verbose --force --symbolic --no-target-directory /appsmith-stacks/data/keycloak /opt/keycloak/data/h2 # Keycloak writes builds to the quarkus directory in some situations and needs to be able to do so when not root chmod -R ugo+w /opt/keycloak/lib/quarkus # Keycloak 24+ writes a truststore to /opt/keycloak/data/ at startup chmod ugo+w /opt/keycloak/data # Keycloak's GzipResourceEncodingProvider caches compressed theme resources here chmod -R ugo+w /opt/keycloak/data/tmp # buildkit
2026-09-15 09:03:54 UTC (buildkit.dockerfile.v0)LABEL com.centurylinklabs.watchtower.lifecycle.pre-check=/watchtower-hooks/pre-check.sh
2026-09-15 09:03:54 UTC (buildkit.dockerfile.v0)LABEL com.centurylinklabs.watchtower.lifecycle.pre-update=/watchtower-hooks/pre-update.sh
2026-09-15 09:03:54 UTC (buildkit.dockerfile.v0)EXPOSE map[80/tcp:{}]
2026-09-15 09:03:54 UTC (buildkit.dockerfile.v0)EXPOSE map[443/tcp:{}]
2026-09-15 09:03:54 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["/opt/appsmith/entrypoint.sh"]
2026-09-15 09:03:54 UTC (buildkit.dockerfile.v0)HEALTHCHECK &{["CMD-SHELL" "\"/opt/appsmith/healthcheck.sh\""] "15s" "15s" "45s" "0s" '\x00'}
2026-09-15 09:03:54 UTC (buildkit.dockerfile.v0)CMD ["/usr/bin/supervisord" "-n"]
Delete Tag
Please be careful as this will not just delete the reference but also the actual content!
For example when you have latest and v1.2.3 both pointing to the same image
the deletion of latest will also permanently remove v1.2.3.