Enterprise-grade FIPS 140-2 compliant GNU C Library (glibc) container image providing cryptographic modules and security-hardened runtime environment for regulated industries and government applications. Features NIST-validated cryptographic implementations, STIG compliance, and optimized performance for mission-critical workloads.
Core capabilities and strengths of this container
Typical scenarios where this container excels
Download the container image from the registry
docker pull clnstrt-images.cleanstart.com/$ORGANIZATION/glibc-fips:latestdocker pull clnstrt-images.cleanstart.com/$ORGANIZATION/glibc-fips:latest-devRun the container with basic configuration
docker run -it --name glibc-fips-test clnstrt-images.cleanstart.com/$ORGANIZATION/glibc-fips:latest-devDeploy with production security settings
docker run -d --name glibc-fips-prod \
--read-only \
--security-opt=no-new-privileges \
--user 1000:1000 \
clnstrt-images.cleanstart.com/$ORGANIZATION/glibc-fips:latestMount local directory for persistent data
docker run -v $(pwd)/data:/data clnstrt-images.cleanstart.com/$ORGANIZATION/glibc-fips:latestRun with custom port mappings
docker run -p 8080:80 clnstrt-images.cleanstart.com/$ORGANIZATION/glibc-fips:latestConfiguration options available through environment variables
1strictFIPS:OSPPhighRecommended security configurations and practices
Recommended security context for Kubernetes deployments
securityContext:
runAsNonRoot: true
runAsUser: 1000
runAsGroup: 1000
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
drop: ["ALL"]
seccompProfile:
type: RuntimeDefaultEssential links and resources for further information