xTag

Overview

Full name
docker.io/bitnamisecure/redis
Registry
docker.io
Namespace
bitnamisecure
Repository
redis
Cached tags
2
Last synced
07/01/2026, 06:46 AM
Topics
数据库与缓存

Introduction

Bitnami Secure 加固版 Redis 镜像，在官方 Redis 上叠加安全默认项与 Bitnami 运维脚本，适合缓存、会话与消息队列，需持久化 data 目录。

Details

bitnamisecure/redis 是 Bitnami Secure 产品线的 Redis 发行版，预置非 root 用户、默认禁用危险命令并附带 healthcheck 脚本。与 bitnami/redis 相比安全基线更严；支持主从复制与 Sentinel 模式（需对应 chart）。tag 较少，生产应固定 tag、设置 REDIS_PASSWORD、挂载 /bitnami/redis/data 持久化 RDB/AOF，并限制网络仅应用 namespace 可访问。

快速启动

docker run -d --name redis \
  -p 6379:6379 \
  -e REDIS_PASSWORD=change-me \
  docker.io/bitnamisecure/redis:latest

推荐实践

docker run -d --name redis \
  --restart unless-stopped \
  -p 6379:6379 \
  -e REDIS_PASSWORD=change-me \
  -e REDIS_AOF_ENABLED=yes \
  -v /data/redis:/bitnami/redis/data \
  docker.io/bitnamisecure/redis:7.2.0

核心参数说明

  • -p 6379:6379 — Redis 协议端口
  • -e REDIS_PASSWORD — requirepass 认证
  • -e REDIS_AOF_ENABLED=yes — 开启 AOF 持久化
  • -v .../redis:/bitnami/redis/data — RDB/AOF 数据目录
  • --restart unless-stopped — 缓存层持续在线
  • 固定 tag — 与 Bitnami chart 版本对齐

Kubernetes

apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: redis
spec:
  serviceName: redis
  replicas: 1
  selector:
    matchLabels:
      app: redis
  template:
    metadata:
      labels:
        app: redis
    spec:
      containers:
        - name: redis
          image: docker.io/bitnamisecure/redis:7.2.0
          ports:
            - containerPort: 6379
          envFrom:
            - secretRef:
                name: redis-auth
          volumeMounts:
            - name: data
              mountPath: /bitnami/redis/data
  volumeClaimTemplates:
    - metadata:
        name: data
      spec:
        accessModes: ["ReadWriteOnce"]
        resources:
          requests:
            storage: 8Gi
---
apiVersion: v1
kind: Service
metadata:
  name: redis
spec:
  clusterIP: None
  selector:
    app: redis
  ports:
    - port: 6379

Secret 存 REDIS_PASSWORD；主从或 Sentinel 用 Helm chart，PVC 选 SSD StorageClass。

Latest tags (20)

View all 2 tags →
TagArchPushed AtSizeDigestSyncWishAction
docker.io/bitnamisecure/redis
:latest-metadata
-2026/06/30 03:04--
docker.io/bitnamisecure/redis
:latest
linux/amd64linux/arm64
2026/06/30 03:0346.8 MBsha256:d8fb04a8d2de…