Overview
- Full name
docker.io/chainguard/minio- Registry
- docker.io
- Namespace
- chainguard
- Repository
- minio
- Cached tags
- 2
- Last synced
- 06/29/2026, 08:11 PM
Introduction
Chainguard 安全加固 MinIO 对象存储镜像，S3 兼容 API 与最小攻击面，供应链安全合规 S3 后端。
Details
chainguard/minio 基于 Chainguard 安全镜像构建的 MinIO 对象存储，提供 S3 兼容 API、桶管理与静态网站托管，采用 distroless 最小攻击面。定位为安全合规 S3 存储，需 data volume 持久化；K8s StatefulSet 或 docker 单机对象存储后端。
快速启动
docker run -d --name minio \
-p 9000:9000 -p 9001:9001 \
-e MINIO_ROOT_USER=minioadmin \
-e MINIO_ROOT_PASSWORD=minioadmin \
-v /data/minio:/data \
docker.io/chainguard/minio:latest
推荐实践
docker run -d --name minio \
--restart unless-stopped \
-p 9000:9000 -p 9001:9001 \
-e MINIO_ROOT_USER=admin \
-e MINIO_ROOT_PASSWORD=changeme \
-v /data/minio:/data \
docker.io/chainguard/minio:RELEASE.2024-01-01
核心参数说明
-p 9000:9000— S3 API 端口-p 9001:9001— MinIO Console-e MINIO_ROOT_PASSWORD— 管理员密码（高敏）-v .../minio:...— 对象数据持久化
Kubernetes
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: minio
spec:
serviceName: minio
replicas: 1
selector:
matchLabels:
app: minio
template:
metadata:
labels:
app: minio
spec:
containers:
- name: minio
image: docker.io/chainguard/minio:RELEASE.2024-01-01
ports:
- containerPort: 9000
envFrom:
- secretRef:
name: minio-creds
volumeMounts:
- name: data
mountPath: /data
volumeClaimTemplates:
- metadata:
name: data
spec:
accessModes: [ReadWriteOnce]
resources:
requests:
storage: 100Gi
---
apiVersion: v1
kind: Service
metadata:
name: minio
spec:
selector:
app: minio
ports:
- port: 9000
targetPort: 9000
分布式模式需 MinIO Operator；Ingress 暴露 Console。
Latest tags (20)
View all 2 tags →| Tag | Arch | Pushed At | Size | Digest | Sync | Wish | Action |
|---|---|---|---|---|---|---|---|
docker.io/chainguard/minio :latest-dev | linux/amd64linux/arm64 | 2026/06/26 21:57 | 77.4 MB | sha256:2c8b47c7b4fa… | |||
docker.io/chainguard/minio :latest | linux/amd64linux/arm64 | 2026/06/26 21:57 | 60.2 MB | sha256:789c48b34bd7… |