The CleanStart Cortex image provides a production-ready, security-hardened container optimized for enterprise environments. Built on a minimal base OS with comprehensive security hardening, this image delivers reliable application execution with advanced security features.
Core capabilities and strengths of this runtime container
Typical scenarios where this runtime container excels
Download the runtime container images
docker pull <Registry URL>/cleanstartos/cortex:latestdocker pull <Registry URL>/cleanstartos/cortex:latest-devStart interactive session for development
docker run -d --name cortex-prod \\
--read-only \\
--security-opt=no-new-privileges \\
--user 1000:1000 \\
<Registry URL>/cleanstartos/cortex:latestExecute a simple Hello World program
docker run -it --name cortex-test <Registry URL>/cleanstartos/cortex:latest-devRun container with local workspace mounted
docker run --rm -v $(pwd):/app -w /app <Registry URL>/cleanstartos/cortex:latest-dev python --versionRun application with port forwarding
docker run -d --name cortex-app \
-p 8000:8000 \
-v $(pwd):/app \
-w /app \
<Registry URL>/cleanstartos/cortex:latestConfiguration options available through environment variables
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/binRecommended security configurations and practices
Recommended security context for Kubernetes deployments
securityContext:
runAsNonRoot: true
runAsUser: 1000
runAsGroup: 1000
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
drop: ['ALL']Awarded with
Docker verified
Certifications
