Curated Runtime Containers for the Ecosystem

Each image is a pinned upstream plus a minimal, justified delta. The upstream pin is the invariant; the delta is the complete extension surface. No in-place mutations — only versioned, documented changes.

View Repository

Image Catalog

Each image: a pinned upstream base + a documented delta. :latest is forbidden — every consumer pins an explicit tag.

wordpress-fpm:8.3

Upstream: wordpress:6.9.4-php8.3-fpm

Delta: gmp PHP extension + wordpress-media.ini (memory_limit=512M, upload_max_filesize=64M, post_max_size=128M)

aralez:0.92.5

Upstream: rust:1.88-slim → debian:bookworm-slim

Delta: ARM64 build of Pingora reverse proxy — upstream publishes amd64 only; LTO disabled to avoid OOM on builder

fip-controller:0.1.0

Upstream: Rust build → slim runtime

Delta: Multi-FIP follow-pod controller for Hetzner floating IPs — keeps each FIP assigned to the node running its target pod

fip-alias-agent:0.1.0

Upstream: Rust build → iproute2 runtime

Delta: Privileged DaemonSet managing eth0 IP aliases on Kubernetes nodes on behalf of fip-controller

:latest is Forbidden

Every consumer of a solera image pins an explicit tag so the upstream-pinned delta is reproducible. The tag encodes the upstream version — solera/wordpress-fpm:8.3 means wordpress 6.9.4 php8.3-fpm extended with this catalog's specific delta. Immutable by convention, not by mechanism.

Technology Stack

Docker BuildKit Nickel NCL Nushell just lian-build SOPS Rust 2021 PHP 8.3 Pingora

Documented runtime deltas for the ecosystem

Docker BuildKit · lian-build · Nickel NCL · Rust services

View Repository