概要

フル名
docker.io/infisical/infisical
Registry
docker.io
名前空間
infisical
リポジトリ
infisical
キャッシュ Tag 数
1128
最終同期
07/06/2026, 11:10 AM

概要

Infisical 开源密钥与配置管理平台镜像,集中管理 env/证书并同步至 CI 与 K8s,适合替代自建 Vault 轻量方案。

詳細

infisical/infisical 提供 Web UI、REST API 与 SDK,团队在此管理项目密钥、轮换策略与访问审计。典型用于 GitOps 流水线注入 Secret,与 HashiCorp Vault 相比上手更快、功能聚焦应用配置。定位为 Web + API 平台服务,需 PostgreSQL/Redis 与加密主密钥;生产固定 tag、HTTPS 与 SSO。

快速启动

docker run -d --name infisical \
  -p 8080:8080 \
  -e DB_CONNECTION_URI=postgresql://infisical:pass@postgres/infisical \
  docker.io/infisical/infisical:latest

推荐实践

docker run -d --name infisical \
  --restart unless-stopped \
  -p 8080:8080 \
  -e DB_CONNECTION_URI=postgresql://infisical:pass@postgres.internal/infisical \
  -e REDIS_URL=redis://redis.internal:6379 \
  -e ENCRYPTION_KEY=32-byte-hex-key \
  docker.io/infisical/infisical:v0.86.0

核心参数说明

  • -p 8080:8080 — Infisical Web/API 端口
  • -e DB_CONNECTION_URI — PostgreSQL 连接(高敏
  • -e ENCRYPTION_KEY — 静态加密主密钥(高敏
  • -e REDIS_URL — 会话与队列缓存
  • --restart unless-stopped — 密钥平台持续在线
  • 固定 tag — API 与迁移脚本 pin

Kubernetes

apiVersion: apps/v1
kind: Deployment
metadata:
  name: infisical
spec:
  replicas: 2
  selector:
    matchLabels:
      app: infisical
  template:
    metadata:
      labels:
        app: infisical
    spec:
      containers:
        - name: infisical
          image: docker.io/infisical/infisical:v0.86.0
          ports:
            - containerPort: 8080
          envFrom:
            - secretRef:
                name: infisical-secrets
---
apiVersion: v1
kind: Service
metadata:
  name: infisical
spec:
  selector:
    app: infisical
  ports:
    - port: 8080
      targetPort: 8080

PostgreSQL/Redis 独立 StatefulSet;Ingress TLS + OIDC,定期备份 ENCRYPTION_KEY。

Tagアーキテクチャプッシュ日時サイズDigest同期期望操作
docker.io/infisical/infisical
:v0.161.10
linux/amd64linux/arm64
2026/06/30 00:46722.6 MBsha256:dd091c9925a1
docker.io/infisical/infisical
:87b727c
linux/amd64linux/arm64
2026/06/30 00:46722.6 MBsha256:dd091c9925a1
docker.io/infisical/infisical
:latest
linux/amd64linux/arm64
2026/06/30 00:46722.6 MBsha256:dd091c9925a1
docker.io/infisical/infisical
:v0.161.9
linux/amd64linux/arm64
2026/06/27 01:49722.7 MBsha256:2d569dbdb5ba
docker.io/infisical/infisical
:c25d5ab
linux/amd64linux/arm64
2026/06/27 01:49722.7 MBsha256:2d569dbdb5ba
docker.io/infisical/infisical
:v0.161.8
linux/amd64linux/arm64
2026/06/25 04:50722.4 MBsha256:970ce2d1ba91
docker.io/infisical/infisical
:f02ab14
linux/amd64linux/arm64
2026/06/25 04:50722.4 MBsha256:970ce2d1ba91
docker.io/infisical/infisical
:v0.161.7
linux/amd64linux/arm64
2026/06/24 23:57722.5 MBsha256:f1d439e4a31d
docker.io/infisical/infisical
:9d085eb
linux/amd64linux/arm64
2026/06/24 23:57722.5 MBsha256:f1d439e4a31d
docker.io/infisical/infisical
:v0.161.6
linux/arm64linux/amd64
2026/06/24 22:40702.2 MBsha256:24033d8ffe26
docker.io/infisical/infisical
:12bb7b1
linux/arm64linux/amd64
2026/06/24 22:40702.2 MBsha256:24033d8ffe26
docker.io/infisical/infisical
:v0.161.5
linux/amd64linux/arm64
2026/06/23 07:26722.3 MBsha256:96496c939505
docker.io/infisical/infisical
:6c38c30
linux/amd64linux/arm64
2026/06/23 07:26722.3 MBsha256:96496c939505
docker.io/infisical/infisical
:v0.161.4
linux/amd64linux/arm64
2026/06/23 01:40722.2 MBsha256:2788468d593b
docker.io/infisical/infisical
:6567e83
linux/amd64linux/arm64
2026/06/23 01:40722.2 MBsha256:2788468d593b
docker.io/infisical/infisical
:v0.161.3
linux/amd64linux/arm64
2026/06/20 02:07722.2 MBsha256:8219f4fe581f
docker.io/infisical/infisical
:e4c1bbf
linux/amd64linux/arm64
2026/06/20 02:07722.2 MBsha256:8219f4fe581f
docker.io/infisical/infisical
:v0.161.1
linux/amd64linux/arm64
2026/06/18 00:34722.2 MBsha256:10891d63e67c
docker.io/infisical/infisical
:c5d42ba
linux/amd64linux/arm64
2026/06/18 00:34722.2 MBsha256:10891d63e67c
docker.io/infisical/infisical
:v0.161.0
linux/amd64linux/arm64
2026/06/12 21:54722.0 MBsha256:1d6adc549ccb