dotnet-docker

Ubuntu Chiseled images are distroless container images containing only the minimal set of packages required to run .NET applications. They are designed to reduce deployment size and attack surface by providing:

• A minimal set of required packages
• A non-root user by default
• No package manager
• No shell

Note that there are no chiseled SDK images available; you should use standard full Ubuntu SDK images to build your applications and then run them on Chiseled images.

The following appliance images contain diagnostic tools and applications. They often use distroless operating systems to reduce surface area and may not always specify an OS in their tags:

• .NET Monitor
• .NET Monitor Base
• Aspire Dashboard

Distroless container images contain only the minimal set of packages required for .NET applications. They are optimized for security and performance by removing everything else, including package managers and shells.

Key Features:

• Minimal package set for .NET.
• Non-root user by default.
• No package manager.
• No shell.

Available distroless variants include Azure Linux and Ubuntu (Chiseled).

This repository provides various samples for different .NET containerization scenarios. Key sample areas include:

Building Images

• Standard .NET apps: dotnetapp/README.md
• ASP.NET Core apps: aspnetapp/README.md
• Single file apps: releasesapp/README.md
• Native AOT apps: releasesapi/README.md
• Globalization/Time zone aware images: globalapp/README.md
• Multi-platform builds: build-for-a-platform.md

Development Guidance

• Multi-project solutions: complexapp/README.md
• SDK Container workflows: Build/test/run applications within an SDK container (build-in-sdk-container.md, run-tests-in-sdk-container.md, run-in-sdk-container.md)
• Local HTTPS development: run-aspnetcore-https-development.md
• Image Tag selection: ../documentation/supported-tags.md

Distroless container images contain only the minimal set of packages required to run .NET applications. They are designed for improved security, smaller deployment sizes, and faster start-up times.

Key characteristics:

• Minimal package set for .NET.
• Non-root user by default.
• No package manager.
• No shell.

Available variants include Azure Linux and Ubuntu (Chiseled).

Depending on your deployment needs, you can choose from several image variants:

• SDK Images: For building .NET applications.
• ASP.NET Core Runtime Images: For running web applications.
• .NET Runtime Images: For running console/non-web applications.
• Runtime Dependencies Images: For running apps that require specific OS dependencies.
• Distroless Images: Optimized for security and size. They contain only the minimal set of packages required for .NET, include a non-root user by default, and contain no package manager or shell. Available for Azure Linux and Ubuntu (Chiseled).

The .NET Monitor tool is a diagnostic tool used for capturing diagnostic artifacts (such as dumps and traces) in an operator-driven or automated manner. It is an ASP.NET application that hosts a web API for inspecting .NET processes and collecting diagnostic artifacts.

Key features include:

• Web API for process inspection and artifact collection.
• Extensions for egressing artifacts to Azure Blob Storage and Amazon S3.
• Can be run as a sidecar container to collect information from other containers running .NET Core 3.1 or .NET 5 and later.

The .NET Monitor Base image provides the core installation of .NET Monitor, an ASP.NET application that hosts a web API for inspecting .NET processes and collecting diagnostic artifacts (like dumps and traces).

Important: This image only contains base functionality. It is intended to be used as a base image upon which you install .NET Monitor extensions. If you require the full feature set (including egress capabilities) out of the box, use the dotnet/monitor image instead.

Distroless container images contain only the minimal set of packages required for .NET applications. They are optimized for security, deployment size, and start-up time.

Key characteristics:

• Minimal package set
• Non-root user by default
• No package manager
• No shell

Distroless images are available for Azure Linux and Ubuntu (Chiseled).