The CleanStart Ruby image provides a production-ready, security-hardened container optimized for enterprise environments. Built on a minimal base OS with comprehensive security hardening, this image delivers reliable application execution with advanced security features.
Core capabilities and strengths of this runtime container
Typical scenarios where this runtime container excels
Download the runtime container images
docker pull cleanstart/ruby:latestdocker pull cleanstart/ruby:latest-devStart interactive session for development
docker run -d --name ruby-prod \\
--read-only \\
--security-opt=no-new-privileges \\
--user 1000:1000 \\
cleanstart/ruby:latestExecute a simple Hello World program
docker run -it --name ruby-test cleanstart/ruby:latest-devRun container with local workspace mounted
docker run --rm -v $(pwd):/app -w /app cleanstart/ruby:latest-dev python --versionRun application with port forwarding
docker run -d --name ruby-app \
-p 8000:8000 \
-v $(pwd):/app \
-w /app \
cleanstart/ruby:latestConfiguration options available through environment variables
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/binRecommended security configurations and practices
Recommended security context for Kubernetes deployments
securityContext:
runAsNonRoot: true
runAsUser: 1000
runAsGroup: 1000
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
drop: ['ALL']Essential links and resources for further information