This is a Monero container image built using the binaries distributed by the Monero team. The container image runs monerod.
Since the distributed Monero binary uses dynamically-linked glibc, it uses the Chainguard glibc-dynamic base image. This is a distroless container, and as such has very little attack surfaces. It also has no shell, so it's not possible to execute a shell into the container.
podman pull ghcr.io/comminutus/monero
podman run -it --rm ghcr.io/comminutus/monero
Note that the container image does not set any other command line options other than --data-dir (see "Volumes" below). If you need to run monerod non-interactively, use the --non-interactive command line option (i.e. podman run -d ghcr.io/comminutus/monero --non-interactive).
For a full list of command line options, consult the Monero documentation.
The container's persistent data, including configuration and blockchain data are stored at /var/lib/monero.
When running the container image with Docker, Kubernetes, OpenShift, etc., mount your volumes at /var/lib/monero.
Because the container uses Chainguard's image as a base, the monerod process is run as a non-root user. The username and group name is nonroot. The UID and GID are set to 65532.
The container exposes the following ports:
| Port | Enabled by Default? | Use |
|---|---|---|
| 18080 | Y | peer-to-peer communications; used for nodes to communicate with other nodes |
| 18081 | Y | RPC communications, used for wallets and other tools to communicate with this node |
| 18082 | N | JSON-RPC port |
| 28080 | N | stagenet peer-to-peer communications |
| 28081 | N | stagenet RPC communications |
| 28082 | N | stagenet JSON-RPC port |
| 38080 | N | testnet peer-to-peer communications |
| 38081 | N | testnet RPC communications |
| 38082 | N | testnet JSON-RPC port |
| Name | Version |
|---|---|
| Chainguard glibc-dynamic | latest |
| Monero | v0.18.3.4 |
The container image portion of this project is licensed under the GNU Affero General Public License v3.0 - see the LICENSE file for details.
The Monero software binaries included with this container image inherit Monero's license - see the MONERO LICENSE file for details.
The Chainguard glibc-dynamic base container image is licensed under the Apache 2.0 License