RapidFort Community Images

repository·main·Indexed 43 days ago

https://github.com/rapidfort/community-images

Hardened, optimized Docker container images designed to minimize attack surfaces and remediate software vulnerabilities (CVEs). These images are functionally equivalent to standard versions—including IronBank and official releases for Apache Airflow, Argo CD, Ansible, and others—but are optimized by removing unnecessary software components to reduce image size by 60-90%.

Tokens
54K
Snippets
194
Records
282
Agent score
54%

What's inside RapidFort

  1. What is the Fluentd Elasticsearch IronBank hardened image?

    main

    The rapidfort/fluentd-elasticsearch-ib image is a hardened version of the official Platform One Fluentd Elasticsearch IronBank image.

    It is a Fluentd container with the fluent-plugin-elasticsearch plugin installed. RapidFort optimizes these images by removing unnecessary software components to reduce the software attack surface while remaining functionally equivalent to the original.

  2. What is a hardened MinIO console Iron Bank image?

    main

    This is a RapidFort-optimized and hardened version of the official Platform One MinIO console Iron Bank image.

    Key Characteristics:

    • Functionally Equivalent: It performs the same tasks as the original image (providing a graphical user interface for MinIO).
    • Reduced Attack Surface: RapidFort's SASM platform removes unnecessary software components to improve security and limit the blast radius of potential attacks.
    • Free to Use: The image has no license limitations.
  3. What is a hardened Metricbeat Iron-Bank image?

    main

    The rapidfort/metricbeat-ib image is an optimized and hardened version of the official Platform One Metricbeat Iron-Bank image.

    RapidFort uses its SASM platform to remove unnecessary software components, which significantly reduces the software attack surface and improves security while remaining functionally equivalent to the original image. This process helps protect infrastructure by limiting the potential blast radius of an attack.

  4. Overview of RapidFort community-images

    main
    The community-images repository provides free, Hardened Images which are optimized versions of popular base images. These images are designed to be secure and reliable by significantly reducing vulnerabilities and attack surfaces. RapidFort achieves this by analyzing container images, removing unnecessary components, and ensuring only essential, secure elements remain, effectively removing most Common Known Vulnerabilities (CVEs).
  5. What is a hardened MkDocs IronBank image?

    main

    The rapidfort/mkdocs-ib image is an optimized and hardened version of the official Platform One MkDocs IronBank container image.

    RapidFort uses its SASM platform to remove unnecessary software components, which significantly reduces the software attack surface and improves security while remaining functionally equivalent to the original image. Vulnerability reports for these hardened images are updated daily to include the latest discovered vulnerabilities and fixes.

  6. What is a hardened k6 Iron Bank image?

    main

    The rapidfort/k6-ib image is a hardened, optimized version of the official Platform One k6 Iron Bank image.

    Key Characteristics:

    • Functionally Equivalent: It performs the same load testing tasks as the original k6 Iron Bank image.
    • Reduced Attack Surface: RapidFort's SASM platform optimizes the image by removing unnecessary software components, which significantly reduces the software attack surface and improves security.
    • Free to Use: The image is free to use with no license limitations.
    • Daily Updates: Vulnerability reports are updated daily to include newly discovered vulnerabilities and fixes.
  7. What is a hardened Argo CD Big-Bang Iron Bank image?

    main

    The RapidFort hardened image is a functionally equivalent version of the official Platform One Argo CD Big-Bang Iron Bank image.

    It has been optimized using RapidFort's SASM platform to remove unnecessary software components. This process reduces the software attack surface and improves security by limiting the potential blast radius of attacks, without changing the core functionality of Argo CD.

  8. Getting Started with RapidFort

    main
    RapidFort scans Docker containers to identify vulnerabilities and detect unused components that can be removed to harden the image. The project provides optimized and hardened versions of popular container images from Docker Hub for community use.
  9. What is a hardened Molecule Iron Bank image?

    main

    The rapidfort/molecule-ib image is a hardened and optimized version of the official Platform One Molecule Iron Bank image.

    RapidFort uses its SASM platform to remove unnecessary software components, which significantly reduces the software attack surface and improves security while remaining functionally equivalent to the original image. Molecule itself is a tool designed to aid in the development and testing of Ansible roles.

  10. Access RapidFort Community Images

    main

    RapidFort provides a collection of hardened community images, many of which are based on Iron Bank (DSO) versions. Developers can access these images via Docker Hub or view detailed security reports for specific images through the RapidFort community portal.

    For each image listed in the repository, you can:

    1. View the Full Security Report: Access detailed analysis and vulnerability information via the RapidFort community image info portal.
    2. Pull from Docker Hub: Use the RapidFort-hosted versions on Docker Hub for deployment.

    Commonly available images include tools like skopeo, prometheus-operator, velero, k6, and various infrastructure components like ceph and coredns.

  11. Browse and use RapidFort community images

    main

    The rapidfort/community-images repository provides a catalog of hardened container images derived from popular official repositories (e.g., PostgreSQL, NGINX, Redis, MongoDB).

    Users can:

    1. View Security Reports: Each image entry provides a link to a detailed security report via the RapidFort application, allowing you to inspect the hardening results.
    2. Pull Hardened Images: Instead of using standard official images, you can pull the RapidFort-hardened versions directly from Docker Hub. These are prefixed with rapidfort/.
    3. Identify Image Variants: The catalog distinguishes between different sources, such as 'Official' (from Docker Hub library) and 'IronBank' (from the DoD Iron Bank registry), providing hardened versions for both.