Back to images

druid-fips

FIPS AvailableSecurity Hardened

druid-fips | CleanStart Images

Container Specifications

Version:

Package Support

Has APK?Yes

Has a shell?Yes

Runtime Configuration

Entrypoint/druid.sh

Userclnstrt

Working directory/usr/share/java/druid

Stop signalSIGTERM

Environment Variables

PATH/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin

JAVA_HOME/usr/lib/jvm/default-jvm

CLASSPATH/usr/lib/bouncycastle-fips/*:/usr/share/java/druid/lib/*

DRUID_ADDITIONAL_CLASSPATH/usr/lib/bouncycastle-fips/*

SSL_CERT_FILE/etc/ssl/certs/ca-certificates.crt

JAVA_OPTS

-Djava.security.provider.1=org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider -Djava.security.provider.2=org.bouncycastle.jsse.provider.BouncyCastleJsseProvider -Dcom.sun.net.ssl.enableECC=false -Djavax.net.ssl.trustStoreType=PKCS12

Command

N/A

JSON

json

{
  "IMAGE": "druid-fips:34.0.0-dev",
  "ENTRYPOINT": [
    "/druid.sh"
  ],
  "ENVIRONMENT": [
    "PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin",
    "JAVA_HOME=/usr/lib/jvm/default-jvm",
    "CLASSPATH=/usr/lib/bouncycastle-fips/*:/usr/share/java/druid/lib/*",
    "DRUID_ADDITIONAL_CLASSPATH=/usr/lib/bouncycastle-fips/*",
    "SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt",
    "JAVA_OPTS=-Djava.security.provider.1=org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider -Djava.security.provider.2=org.bouncycastle.jsse.provider.BouncyCastleJsseProvider -Dcom.sun.net.ssl.enableECC=false -Djavax.net.ssl.trustStoreType=PKCS12"
  ],
  "CMD": null,
  "WORKDIR": "/usr/share/java/druid",
  "USER": "clnstrt",
  "Has_apk": "true",
  "Has_shell": "true",
  "EOL": "N/A",
  "EOS": "N/A"
}