xTag

Overview

Full name
docker.io/neuvector/updater
Registry
docker.io
Namespace
neuvector
Repository
updater
Cached tags
28
Last synced
07/06/2026, 12:02 PM

Introduction

NeuVector 漏洞库更新器镜像，定期拉取 CVE 特征库供 NeuVector 扫描引擎使用，以 CronJob 方式部署而非常驻 Web 服务。

Details

neuvector/updater 为 NeuVector 容器安全平台提供漏洞数据库同步任务，下载最新 CVE 规则并写入共享存储供 scanner 读取。典型作为 NeuVector 安装后的定时更新组件，定位为 CronJob/定时任务而非用户-facing 服务。生产应固定 tag、挂载与 scanner 共享的 volume 并监控更新失败告警。

快速启动

docker run --rm \
  -v /data/neuvector/db:/var/neuvector \
  docker.io/neuvector/updater:latest

推荐实践

docker run --rm \
  -v /data/neuvector/db:/var/neuvector \
  -e https_proxy=http://proxy.internal:8080 \
  docker.io/neuvector/updater:5.3.0

核心参数说明

  • -v .../db:... — CVE 规则库输出目录（与 scanner 共享）
  • -e https_proxy — 受限网络下代理拉取
  • 定位 — 定时 --rm 更新任务
  • 固定 tag — 与 NeuVector 控制器版本 pin
  • 调度 — 建议 cron 每日执行
  • 非 — 长期 Deployment 服务

Kubernetes

apiVersion: batch/v1
kind: CronJob
metadata:
  name: neuvector-updater
  namespace: neuvector
spec:
  schedule: "0 2 * * *"
  jobTemplate:
    spec:
      template:
        spec:
          restartPolicy: OnFailure
          containers:
            - name: updater
              image: docker.io/neuvector/updater:5.3.0
              volumeMounts:
                - name: cve-db
                  mountPath: /var/neuvector
          volumes:
            - name: cve-db
              persistentVolumeClaim:
                claimName: neuvector-cve-db

PVC 与 NeuVector scanner 共享；按 air-gap 环境配置 proxy 或离线导入流程。

Latest tags (20)

View all 28 tags →
TagArchPushed AtSizeDigestSyncWishAction
docker.io/neuvector/updater
:latest
linux/arm64linux/amd64
2026/07/06 04:2218.1 MBsha256:0421d9f283cd…
docker.io/neuvector/updater
:0.0.12
linux/amd64linux/arm64
2026/06/18 06:5918.4 MBsha256:4f212f477c43…
docker.io/neuvector/updater
:0.0.11
linux/amd64linux/arm64
2026/05/29 06:2718.4 MBsha256:3f4a128f8b81…
docker.io/neuvector/updater
:0.0.11-rc1
linux/amd64linux/arm64
2026/05/28 06:2718.4 MBsha256:cafe0c743c0b…
docker.io/neuvector/updater
:0.0.10
linux/amd64linux/arm64
2026/04/24 12:0418.4 MBsha256:028d0203b8dc…
docker.io/neuvector/updater
:0.0.9
linux/amd64linux/arm64
2026/03/19 02:2818.4 MBsha256:02402092f013…
docker.io/neuvector/updater
:0.0.8
linux/amd64linux/arm64
2026/02/13 02:2618.4 MBsha256:51a606ea3765…
docker.io/neuvector/updater
:0.0.7
linux/amd64linux/arm64
2025/12/12 05:1818.4 MBsha256:d0ea0daef21d…
docker.io/neuvector/updater
:arm64.5.3
linux/arm64/v8
2025/10/25 08:3424.3 MBsha256:4d9402d53eaa…
docker.io/neuvector/updater
:amd64.5.3
linux/amd64
2025/10/25 08:269.1 MBsha256:21160a2a2861…
docker.io/neuvector/updater
:0.0.6
linux/amd64linux/arm64
2025/10/21 08:1618.4 MBsha256:7af019543e54…
docker.io/neuvector/updater
:arm64.latest
linux/arm64/v8
2025/09/17 07:1526.3 MBsha256:259da5e3926c…
docker.io/neuvector/updater
:amd64.latest
linux/amd64
2025/09/17 07:1218.4 MBsha256:adc9e86e3adc…
docker.io/neuvector/updater
:0.0.5
linux/amd64linux/arm64
2025/08/27 05:1218.3 MBsha256:22730cc8c2b3…
docker.io/neuvector/updater
:0.0.4
linux/amd64linux/arm64
2025/07/10 07:2018.3 MBsha256:e353bdb52af2…
docker.io/neuvector/updater
:0.0.4-rc1
linux/amd64linux/arm64
2025/06/26 23:5518.3 MBsha256:3854bea88f5e…
docker.io/neuvector/updater
:0.0.3
linux/amd64linux/arm64
2025/05/13 08:3918.5 MBsha256:a67c997e7253…
docker.io/neuvector/updater
:0.0.3-rc2
linux/amd64linux/arm64
2025/05/10 03:3618.5 MBsha256:20f5395a3125…
docker.io/neuvector/updater
:0.0.3-rc1
linux/amd64linux/arm64
2025/04/30 03:5218.5 MBsha256:370a05ebe645…
docker.io/neuvector/updater
:0.0.2
linux/amd64linux/arm64
2025/03/19 02:3918.5 MBsha256:17007bbb1674…