mysql

Free

FIPS AvailableSecurity Hardened

Description

The CleanStart Mysql image provides a production-ready, security-hardened database server optimized for enterprise environments. Built on a minimal base OS with comprehensive security hardening, this image delivers reliable data storage with advanced security features.

Key Features

Core capabilities and strengths of this runtime container

High-performance data storage and retrieval
ACID compliance and transaction support
Advanced indexing and query optimization
Enterprise-grade security and access control

Common Use Cases

Typical scenarios where this runtime container excels

Primary database for web applications
Data warehousing and analytics workloads
High-availability database clusters
Development and testing environments

Pull Commands

Download the runtime container images

docker pull <Registry URL>/cleanstartos/mysql:latest

docker pull <Registry URL>/cleanstartos/mysql:latest-dev

Interactive Development

Start interactive session for development

bash

docker run -d --name mysql-prod \\
  -p 5432:5432 \\
  -e POSTGRES_PASSWORD=secure_password \\
  -v mysql_data:/var/lib/postgresql/data \\
  --security-opt=no-new-privileges \\
  <Registry URL>/cleanstartos/mysql:latest

Run Hello World

Execute a simple Hello World program

bash

docker run -d --name mysql-dev \\
  -p 5432:5432 \\
  -e POSTGRES_PASSWORD=devpass \\
  <Registry URL>/cleanstartos/mysql:latest-dev

Mount Workspace

Run container with local workspace mounted

bash

docker run --rm -v $(pwd):/app -w /app <Registry URL>/cleanstartos/mysql:latest-dev python --version

Application Server

Run application with port forwarding

bash

docker run -d --name mysql-app \
  -p 8000:8000 \
  -v $(pwd):/app \
  -w /app \
  <Registry URL>/cleanstartos/mysql:latest

Environment Variables

Configuration options available through environment variables

PATH: System PATH configuration; /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
POSTGRES_PASSWORD: Password for the PostgreSQL superuser
POSTGRES_DB: Default database name; postgres

Security Best Practices

Recommended security configurations and practices

Use specific image tags for production (avoid latest)
Configure resource limits: memory and CPU constraints
Enable read-only root filesystem when possible
Run containers with non-root user (--user 1000:1000)
Use --security-opt=no-new-privileges flag
Regularly update container images for security patches
Implement proper network segmentation
Monitor container metrics for anomalies

Kubernetes Security Context

Recommended security context for Kubernetes deployments

yaml

securityContext:
  runAsNonRoot: true
  runAsUser: 1000
  runAsGroup: 1000
  readOnlyRootFilesystem: true
  allowPrivilegeEscalation: false
  capabilities:
    drop: ['ALL']

docker run -d --name mysql-prod \\ -p 5432:5432 \\ -e POSTGRES_PASSWORD=secure_password \\ -v mysql_data:/var/lib/postgresql/data \\ --security-opt=no-new-privileges \\ <Registry URL>/cleanstartos/mysql:latest