Namespace
appsmith
Image / Tagappsmith-ee:release
Content Digestsha256:cdf4edf13cbaf4f31b8fae97fd091790fbd130d3b802b072dceadbf245370b29
Details
2026-10-15 02:03:18 UTC
1.88 GB
Labels
-
com.centurylinklabs.watchtower.lifecycle.pre-check/watchtower-hooks/pre-check.sh
-
com.centurylinklabs.watchtower.lifecycle.pre-update/watchtower-hooks/pre-update.sh
-
maintainertech@appsmith.com
-
org.opencontainers.image.revisiond53a4af94b54118f4281bca4196ff3f5baa5ebbd
-
org.opencontainers.image.sourcehttps://github.com/appsmithorg/appsmith-ee
-
org.opencontainers.image.versionv2.5.1-SNAPSHOT
Environment
APPSMITH_AIRGAP_ENABLEDfalse
APPSMITH_BETTERBUGS_API_KEY3878cc594d09f078e573b6fab160395b
APPSMITH_CLOUD_SERVICES_BASE_URLhttps://release-cs.appsmith.com
APPSMITH_PYLON_APP_ID6d14674c-41cc-412f-92c7-970041e64b61
APPSMITH_SEGMENT_CE_KEYofHYwPrNAJMgHYMx10zzL95CKptKhnJR
KEYGEN_LICENSE_VERIFICATION_KEY LANGC.UTF-8
LC_ALLC.UTF-8
NSS_WRAPPER_GROUP/tmp/appsmith/group
NSS_WRAPPER_PASSWD/tmp/appsmith/passwd
NSS_WRAPPER_SYMLINK/usr/local/lib/libnss_wrapper.so
PATH/opt/bin:/opt/java/bin:/opt/node/bin:/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
TMP/tmp/appsmith
WWW_PATH/tmp/appsmith/www
Layers
[#000] sha256:a60ef8ec184edb5ed91f5983f00261359fb2fe20f603e8d488b9477d32fcad70 - 1.47% (28.4 MB)
[#001] sha256:0da5a635b21a4338195a8e2eca47bc5a1836c7d632b5131069d76a84e73cd7b8 - 0.0% (125 Bytes)
[#002] sha256:ac0d863615728c4d70828dfd7238e779b3c6f73953cfb55016ad77dfc826d765 - 16.48% (317 MB)
[#003] sha256:075a629b7cccdb0e81f787c03ebf6e012faaf4eff3191df40707186798e07fba - 0.36% (6.99 MB)
[#004] sha256:6cf1b2490f1a4318d9a7b1bb49019ff5d333be740caf4a0ce0b88a8c4fb9be9d - 0.14% (2.77 MB)
[#005] sha256:990aab07de49b8144eff445e650f92b0901e9fbdb24e9bb1c44f8005c660ed2d - 3.75% (72.3 MB)
[#006] sha256:5803e2487a26706f6106497461037e32a005870615b2867487b2fa8b5653e9dc - 7.27% (140 MB)
[#007] sha256:018c68c73afca382147ccb51172b1aeda81a38e6c6f588065d996b1412664ebe - 3.1% (59.7 MB)
[#008] sha256:47d265262e457e899990ead5927df2a9f916aca9ebd98400ac6edf0f08d8edf6 - 0.0% (122 Bytes)
[#009] sha256:29197f7609a2b3d91685db1ee2ed720d4eb8f7cd2e2dd5c654feefa0823037f5 - 0.93% (17.9 MB)
[#010] sha256:325666b9db30f65ef5df315e814295c3f012fd5c9759fa6a5acf24987b5b14d9 - 8.92% (172 MB)
[#011] sha256:86bd6ca1fb2c1c47174c3af62902d62029f7dfaae59aecac9d3cde7103bd12d2 - 0.03% (545 KB)
[#012] sha256:f043f48cfb3dab36825ba35d8277070c6a447865b06485dd71f2bcdfc6a27385 - 0.0% (124 Bytes)
[#013] sha256:f6254c9c67438021e0d03beea327522f1122a40ac889f050c173ec20906176cf - 1.07% (20.6 MB)
[#014] sha256:0d7f1fe7cba48c33332a7121ed968592534288af6fdbb56c5c2848ea36598fd0 - 0.59% (11.5 MB)
[#015] sha256:dd5ef6fa3994c633597daf8f7630d70b264ebb6f343906cbe539850d289566db - 0.0% (7.72 KB)
[#016] sha256:6e3e071914f22db93e87804c3ca19799e7fe6156cb8c1b1bdc6757cab75b1d70 - 1.94% (37.3 MB)
[#017] sha256:e73410463f1e35512b87f9f16b3bc06eedc0cd1bf3145ee6588c331870a388db - 0.0% (207 Bytes)
[#018] sha256:d7376be1a2de2c5bdbd6e73cd9ffeb304142dea08d684ea352900e595c278c4b - 35.02% (675 MB)
[#019] sha256:bd9ddc54bea929a22b334e73e026d4136e5b73f5cc29942896c72e4ece69b13d - 0.0% (34 Bytes)
[#020] sha256:6ac7acdca38e33690780179f1223f4286fdc9d6fe3783ae026aeee684bdfd72c - 7.27% (140 MB)
[#021] sha256:850dd029645e21480567077b000e40192c041e35df5d4f26dadce0087a504987 - 1.05% (20.2 MB)
[#022] sha256:b3ca43dda5d5b88fd7d3d3ec84ddf473081e267cfcc907e7830b81ed97de94ee - 0.14% (2.62 MB)
[#023] sha256:bd9ddc54bea929a22b334e73e026d4136e5b73f5cc29942896c72e4ece69b13d - 0.0% (34 Bytes)
[#024] sha256:a15580b4e3db9363b23eca9a36d0357671f5749411f8beb9fa84a2a0965fae53 - 10.47% (202 MB)
History
/bin/sh -c #(nop) ARG RELEASE
2026-09-18 21:20:35 UTC/bin/sh -c #(nop) ARG LAUNCHPAD_BUILD_ARCH
2026-09-18 21:20:35 UTC/bin/sh -c #(nop) LABEL org.opencontainers.image.version=24.04
2026-09-18 21:20:37 UTC/bin/sh -c #(nop) ADD file:6c214fc3c3c22122c7eb68f7fb32783df308e60b1eaeb9baf7e4d0cc961d448d in /
2026-09-18 21:20:38 UTC/bin/sh -c #(nop) CMD ["/bin/bash"]
2026-10-05 05:23:33 UTC (buildkit.dockerfile.v0)LABEL maintainer=tech@appsmith.com
2026-10-05 05:23:33 UTC (buildkit.dockerfile.v0)WORKDIR /opt/appsmith
2026-10-05 05:23:33 UTC (buildkit.dockerfile.v0)ENV LANG=C.UTF-8
2026-10-05 05:23:33 UTC (buildkit.dockerfile.v0)ENV LC_ALL=C.UTF-8
2026-10-12 05:15:58 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && printf 'Acquire::Retries "3";\nAcquire::http::Timeout "30";\nAcquire::https::Timeout "30";\n' > /etc/apt/apt.conf.d/80-appsmith-retries && apt-get update && apt-get upgrade --yes && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes supervisor curl nfs-common gnupg gettext ca-certificates libnss-wrapper software-properties-common git && add-apt-repository -y ppa:git-core/ppa && curl --retry 3 --retry-connrefused --connect-timeout 15 --retry-max-time 60 -fsSL -o /tmp/mongodb-server-7.0.asc https://www.mongodb.org/static/pgp/server-7.0.asc && gpg --dearmor -o /usr/share/keyrings/mongodb-server-7.0.gpg /tmp/mongodb-server-7.0.asc && echo "deb [ arch=amd64,arm64 signed-by=/usr/share/keyrings/mongodb-server-7.0.gpg ] https://repo.mongodb.org/apt/ubuntu jammy/mongodb-org/7.0 multiverse" | tee /etc/apt/sources.list.d/mongodb-org-7.0.list && echo "deb http://apt.postgresql.org/pub/repos/apt $(grep CODENAME /etc/lsb-release | cut -d= -f2)-pgdg main" | tee /etc/apt/sources.list.d/pgdg.list && curl --fail --retry 3 --retry-connrefused --connect-timeout 15 --retry-max-time 60 --silent --show-error --location -o /tmp/pgdg-ACCC4CF8.asc https://www.postgresql.org/media/keys/ACCC4CF8.asc && apt-key add /tmp/pgdg-ACCC4CF8.asc && apt update && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes mongodb-org-server mongodb-org-mongos mongodb-mongosh postgresql-14 git tar zstd openssh-client && DEBIAN_FRONTEND=noninteractive apt-get purge --yes --auto-remove software-properties-common && apt-get clean && rm -rf /root/.cache /root/.npm /usr/local/share/doc /usr/share/doc /usr/share/man /var/lib/apt/lists/* /etc/apt/apt.conf.d/80-appsmith-retries /tmp/* # buildkit
2026-10-12 05:15:58 UTC (buildkit.dockerfile.v0)COPY /usr/local/bin/redis-server /usr/local/bin/redis-server # buildkit
2026-10-12 05:15:58 UTC (buildkit.dockerfile.v0)COPY /usr/local/bin/redis-cli /usr/local/bin/redis-cli # buildkit
2026-10-12 05:15:58 UTC (buildkit.dockerfile.v0)COPY /tmp/mongo-tools/bin/ /usr/bin/ # buildkit
2026-10-12 05:15:58 UTC (buildkit.dockerfile.v0)ENV PATH=/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-10-12 05:16:00 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && mkdir -p /opt/java && arch="$(uname -m | sed 's/x86_64/x64/; s/aarch64/aarch64/')" && curl --fail --retry 3 --retry-connrefused --connect-timeout 15 --retry-max-time 60 --location -o /tmp/adoptium-jdk.tar.gz "https://api.adoptium.net/v3/binary/latest/25/ga/linux/${arch}/jdk/hotspot/normal/eclipse" && tar -xzf /tmp/adoptium-jdk.tar.gz -C /opt/java --strip-components 1 && rm -f /tmp/adoptium-jdk.tar.gz # buildkit
2026-10-12 05:16:04 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eo xtrace mkdir -p /opt/node arch="$(uname -m | sed 's/x86_64/x64/; s/aarch64/arm64/')" curl -LOsS "https://nodejs.org/dist/latest-v24.x/SHASUMS256.txt" filename="$(awk '/linux-'"$arch"'.tar.gz/ {print $2}' SHASUMS256.txt)" curl -LOsS "https://nodejs.org/dist/latest-v24.x/$filename" grep "$filename" SHASUMS256.txt | sha256sum -c - tar -xzf "$filename" -C /opt/node --strip-components 1 rm "$filename" SHASUMS256.txt # Node 24.x bundles npm 11.16/11.17, whose bundled tar (<=7.5.16) is vulnerable # to CVE-2026-59873 (node-tar gzip-bomb DoS). npm 11.18.0 is the first release # bundling the patched tar 7.5.19; pin it since no Node 24.x ships a fixed npm yet. export PATH="/opt/node/bin:$PATH" npm install -g npm@11.18.0 # npm 11.18.0 / 11.19.0 still vendor brace-expansion 5.0.7 (CVE-2026-69152 / # CVE-2026-14257) and ip-address 10.2.0 (CVE-2026-69192). Unpack patched # tarballs over the nested copies; `npm install --prefix` on npm's own # package.json tries to resolve private @npmcli/* deps and 404s. npm_nm="$(npm root -g)/npm/node_modules" tmp="$(mktemp -d)" (cd "$tmp" && npm pack --silent brace-expansion@5.0.9 ip-address@10.3.1) rm -rf "$npm_nm/brace-expansion" "$npm_nm/ip-address" mkdir -p "$npm_nm/brace-expansion" "$npm_nm/ip-address" tar -xzf "$tmp"/brace-expansion-*.tgz -C "$npm_nm/brace-expansion" --strip-components 1 tar -xzf "$tmp"/ip-address-*.tgz -C "$npm_nm/ip-address" --strip-components 1 rm -rf "$tmp" npm cache clean --force # buildkit
2026-10-12 05:16:05 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/caddy # buildkit
2026-10-12 05:16:05 UTC (buildkit.dockerfile.v0)COPY /usr/bin/caddy /opt/caddy/caddy # buildkit
2026-10-12 05:16:06 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/keycloak/data && curl --location https://github.com/keycloak/keycloak/releases/download/26.7.3/keycloak-26.7.3.tar.gz | tar -xz -C /opt/keycloak --strip-components 1 && mkdir -p /opt/keycloak/data/tmp # buildkit
2026-10-12 05:16:06 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux && KC_NETTY_JAR=/opt/keycloak/lib/lib/main/io.netty.netty-handler-4.1.136.Final.jar && test -f "$KC_NETTY_JAR" && curl --fail --retry 3 --connect-timeout 15 --location --output "$KC_NETTY_JAR" https://repo.maven.apache.org/maven2/io/netty/netty-handler/4.1.137.Final/netty-handler-4.1.137.Final.jar && echo "d0e4c6ee4779f59f6ab2fb5d388e4f57147c82270164b37945764bb9bda96a44 $KC_NETTY_JAR" | sha256sum --check # buildkit
2026-10-12 05:16:06 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && mkdir -p /opt/temporal # buildkit
2026-10-12 05:16:07 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/bin/temporal-server /opt/temporal/ # buildkit
2026-10-12 05:16:07 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/bin/temporal-sql-tool /opt/temporal/ # buildkit
2026-10-12 05:16:07 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/temporal-1.22.7/schema/postgresql/v12 /opt/temporal/temporal-1.22.7/schema/postgresql/v12 # buildkit
2026-10-12 05:16:07 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/newrelic && curl -o /opt/newrelic/newrelic.jar https://download.newrelic.com/newrelic/java-agent/newrelic-agent/current/newrelic-agent.jar # buildkit
2026-10-12 05:16:07 UTC (buildkit.dockerfile.v0)VOLUME [/appsmith-stacks]
2026-10-12 05:16:07 UTC (buildkit.dockerfile.v0)ENV TMP=/tmp/appsmith
2026-10-12 05:16:07 UTC (buildkit.dockerfile.v0)ENV WWW_PATH=/tmp/appsmith/www
2026-10-12 05:16:07 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_SYMLINK=/usr/local/lib/libnss_wrapper.so
2026-10-12 05:16:07 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c NSS_WRAPPER_LIB=$(find /usr/lib -name libnss_wrapper.so -type f 2>/dev/null | head -n1) && ln -sf "$NSS_WRAPPER_LIB" $NSS_WRAPPER_SYMLINK # buildkit
2026-10-12 05:16:07 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_PASSWD=/tmp/appsmith/passwd
2026-10-12 05:16:07 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_GROUP=/tmp/appsmith/group
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ARG APPSMITH_CLOUD_SERVICES_BASE_URL
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ENV APPSMITH_CLOUD_SERVICES_BASE_URL=https://release-cs.appsmith.com
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ARG APPSMITH_SEGMENT_CE_KEY
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ARG APPSMITH_AIRGAP_ENABLED=false
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ARG KEYGEN_LICENSE_VERIFICATION_KEY
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ARG APPSMITH_CLIENT_BUILD_PATH=./app/client/build
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ENV APPSMITH_SEGMENT_CE_KEY=ofHYwPrNAJMgHYMx10zzL95CKptKhnJR
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ENV APPSMITH_AIRGAP_ENABLED=false
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ENV KEYGEN_LICENSE_VERIFICATION_KEY=
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ARG APPSMITH_BETTERBUGS_API_KEY
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ENV APPSMITH_BETTERBUGS_API_KEY=3878cc594d09f078e573b6fab160395b
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ARG APPSMITH_PYLON_APP_ID
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ENV APPSMITH_PYLON_APP_ID=6d14674c-41cc-412f-92c7-970041e64b61
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)COPY deploy/docker/fs / # buildkit
2026-10-15 02:03:05 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL=https://release-cs.appsmith.com APPSMITH_SEGMENT_CE_KEY=ofHYwPrNAJMgHYMx10zzL95CKptKhnJR APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY=3878cc594d09f078e573b6fab160395b APPSMITH_PYLON_APP_ID=6d14674c-41cc-412f-92c7-970041e64b61 /bin/sh -c if ! [ -f info.json ]; then echo "Missing info.json" >&2 exit 1 fi if ! [ -f server/mongo/server.jar ]; then echo "Missing MongoDB server.jar file. Are you using the build script?" >&2 exit 1 fi # buildkit
2026-10-15 02:03:05 UTC (buildkit.dockerfile.v0)COPY ./app/client/build editor/ # buildkit
2026-10-15 02:03:05 UTC (buildkit.dockerfile.v0)COPY ./app/client/packages/rts/dist rts/ # buildkit
2026-10-15 02:03:06 UTC (buildkit.dockerfile.v0)COPY ./app/client/packages/mcp/dist mcp/ # buildkit
2026-10-15 02:03:06 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL=https://release-cs.appsmith.com APPSMITH_SEGMENT_CE_KEY=ofHYwPrNAJMgHYMx10zzL95CKptKhnJR APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY=3878cc594d09f078e573b6fab160395b APPSMITH_PYLON_APP_ID=6d14674c-41cc-412f-92c7-970041e64b61 /bin/sh -c mkdir --mode 775 "/dev/shm/git-storage" # buildkit
2026-10-15 02:03:06 UTC (buildkit.dockerfile.v0)ENV PATH=/opt/bin:/opt/java/bin:/opt/node/bin:/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-10-15 02:03:18 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL=https://release-cs.appsmith.com APPSMITH_SEGMENT_CE_KEY=ofHYwPrNAJMgHYMx10zzL95CKptKhnJR APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY=3878cc594d09f078e573b6fab160395b APPSMITH_PYLON_APP_ID=6d14674c-41cc-412f-92c7-970041e64b61 /bin/sh -c set -o errexit cd ./rts # NODE_DISABLE_COMPILE_CACHE=1 prevents npm/node from populating a v8 # bytecode cache under $TMP (/tmp/appsmith) as root during the build, # which would otherwise leave the directory un-writable for the # non-root runtime user when the entrypoint tries to mkdir inside it. # The cache only benefits npm's own code, not RTS, so disabling at # build time costs nothing. NODE_DISABLE_COMPILE_CACHE=1 npm install --only=prod cd - # Make all `*.sh` files executable, excluding `node_modules`. find . \( -name node_modules -prune \) -o \( -type f -name '*.sh' \) -exec chmod +x '{}' + # Ensure all custom command-scripts have executable permission chmod +x /opt/bin/* /watchtower-hooks/*.sh # Disable setuid/setgid bits for the files inside container. find / \( -path /proc -prune \) -o \( \( -perm -2000 -o -perm -4000 \) -exec chmod -s '{}' + \) || true mkdir -p /.mongodb/mongosh /appsmith-stacks chmod ugo+w /etc /appsmith-stacks chmod -R ugo+w /var/run /.mongodb /etc/ssl /usr/local/share ln --verbose --force --symbolic --no-target-directory /appsmith-stacks/data/keycloak /opt/keycloak/data/h2 # Keycloak writes builds to the quarkus directory in some situations and needs to be able to do so when not root chmod -R ugo+w /opt/keycloak/lib/quarkus # Keycloak 24+ writes a truststore to /opt/keycloak/data/ at startup chmod ugo+w /opt/keycloak/data # Keycloak's GzipResourceEncodingProvider caches compressed theme resources here chmod -R ugo+w /opt/keycloak/data/tmp # buildkit
2026-10-15 02:03:18 UTC (buildkit.dockerfile.v0)LABEL com.centurylinklabs.watchtower.lifecycle.pre-check=/watchtower-hooks/pre-check.sh
2026-10-15 02:03:18 UTC (buildkit.dockerfile.v0)LABEL com.centurylinklabs.watchtower.lifecycle.pre-update=/watchtower-hooks/pre-update.sh
2026-10-15 02:03:18 UTC (buildkit.dockerfile.v0)EXPOSE map[80/tcp:{}]
2026-10-15 02:03:18 UTC (buildkit.dockerfile.v0)EXPOSE map[443/tcp:{}]
2026-10-15 02:03:18 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["/opt/appsmith/entrypoint.sh"]
2026-10-15 02:03:18 UTC (buildkit.dockerfile.v0)HEALTHCHECK &{["CMD-SHELL" "\"/opt/appsmith/healthcheck.sh\""] "15s" "15s" "45s" "0s" '\x00'}
2026-10-15 02:03:18 UTC (buildkit.dockerfile.v0)CMD ["/usr/bin/supervisord" "-n"]
Details
2026-10-15 02:03:20 UTC
1.86 GB
Labels
-
com.centurylinklabs.watchtower.lifecycle.pre-check/watchtower-hooks/pre-check.sh
-
com.centurylinklabs.watchtower.lifecycle.pre-update/watchtower-hooks/pre-update.sh
-
maintainertech@appsmith.com
-
org.opencontainers.image.revisiond53a4af94b54118f4281bca4196ff3f5baa5ebbd
-
org.opencontainers.image.sourcehttps://github.com/appsmithorg/appsmith-ee
-
org.opencontainers.image.versionv2.5.1-SNAPSHOT
Environment
APPSMITH_AIRGAP_ENABLEDfalse
APPSMITH_BETTERBUGS_API_KEY3878cc594d09f078e573b6fab160395b
APPSMITH_CLOUD_SERVICES_BASE_URLhttps://release-cs.appsmith.com
APPSMITH_PYLON_APP_ID6d14674c-41cc-412f-92c7-970041e64b61
APPSMITH_SEGMENT_CE_KEYofHYwPrNAJMgHYMx10zzL95CKptKhnJR
KEYGEN_LICENSE_VERIFICATION_KEY LANGC.UTF-8
LC_ALLC.UTF-8
NSS_WRAPPER_GROUP/tmp/appsmith/group
NSS_WRAPPER_PASSWD/tmp/appsmith/passwd
NSS_WRAPPER_SYMLINK/usr/local/lib/libnss_wrapper.so
PATH/opt/bin:/opt/java/bin:/opt/node/bin:/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
TMP/tmp/appsmith
WWW_PATH/tmp/appsmith/www
Layers
[#000] sha256:90812e242c93750dbd37ce847c7d3db62c2c53035367d1d89c61184f168f5d37 - 1.45% (27.6 MB)
[#001] sha256:0da5a635b21a4338195a8e2eca47bc5a1836c7d632b5131069d76a84e73cd7b8 - 0.0% (125 Bytes)
[#002] sha256:77e20f19cc7522ace1e30447ead9d6bea09c18ca493097a86a76da7fa8052a8e - 16.26% (310 MB)
[#003] sha256:aa8aa59a8acbde87c88cd0a6b67ecc6cc4f62a7ed76bbf805075e96f83a2865d - 0.37% (7.03 MB)
[#004] sha256:e3359de8416630ecd46a5d6b2ff9a2e3c9974d3c53f0c7a876428808e50447f4 - 0.15% (2.82 MB)
[#005] sha256:c2f96ad7426457d70080979a4524259a4394a0b78af1faed72625ee0394a950e - 3.48% (66.3 MB)
[#006] sha256:71f456b0c986a5aa544fa47a094193d569978dbac5414e892249e069421ca632 - 7.28% (139 MB)
[#007] sha256:1fa5d5b96937844545ca3cdd57ec70fae3939b2514f8e725596855feac7d9a7b - 3.12% (59.5 MB)
[#008] sha256:23f49f10163db87422187ccfab560a23aa9eada2745202595396c741e0867417 - 0.0% (122 Bytes)
[#009] sha256:5cc8f30cae5e43375c8bb90f8bdc6811707fde4b374a0c7ed337179482da4067 - 0.85% (16.2 MB)
[#010] sha256:cb8f990f9ec50d6dce123d2f7952ba67badb19cd892a591d99efec5a7446193b - 9.02% (172 MB)
[#011] sha256:60a1ab98968a9254420e67e999ba20d27074f6a312731bb360b3472ddf3a5d6b - 0.03% (545 KB)
[#012] sha256:36d6a90fd633284c4790b65dd7279c132b04ed62fc056d4bd10821d56744c3a7 - 0.0% (123 Bytes)
[#013] sha256:909c709456a7902ba3c9993117f66458e99455abf4da10ef58332a7ffc992422 - 0.97% (18.5 MB)
[#014] sha256:d979f48cc6fbb18e3504de1968be1688e83c97c49cfead8919af70fb5a4dcc6d - 0.53% (10.2 MB)
[#015] sha256:c7e72e83f42b3e55091308b1ff24e394d38332a366aec9d3da71bab2e3d58ef0 - 0.0% (7.72 KB)
[#016] sha256:ad84e00608103a59c4e274e72eae246c99926611fd56e6e767d395ad7ec03e8e - 1.96% (37.3 MB)
[#017] sha256:4851f49aa72b3627ae52fc3f4137d4ddf8f31c702a2c3478f2fc55113b45b1be - 0.0% (207 Bytes)
[#018] sha256:d7376be1a2de2c5bdbd6e73cd9ffeb304142dea08d684ea352900e595c278c4b - 35.38% (675 MB)
[#019] sha256:bd9ddc54bea929a22b334e73e026d4136e5b73f5cc29942896c72e4ece69b13d - 0.0% (34 Bytes)
[#020] sha256:963a8c5ff1c2884d7d931f1e83ca5c345fe693807c8642f6a9041c09eb12c156 - 7.34% (140 MB)
[#021] sha256:850dd029645e21480567077b000e40192c041e35df5d4f26dadce0087a504987 - 1.06% (20.2 MB)
[#022] sha256:8ac69c30717952de142aae268a2a7eb3f45a4e9381f6db3011f688d8955e45ba - 0.14% (2.62 MB)
[#023] sha256:bd9ddc54bea929a22b334e73e026d4136e5b73f5cc29942896c72e4ece69b13d - 0.0% (34 Bytes)
[#024] sha256:1a48fe46053c07a819a5609b6ae25ce3ac55f79659c5f32a64ae557bcddf0afd - 10.63% (203 MB)
History
/bin/sh -c #(nop) ARG RELEASE
2026-09-18 21:23:09 UTC/bin/sh -c #(nop) ARG LAUNCHPAD_BUILD_ARCH
2026-09-18 21:23:10 UTC/bin/sh -c #(nop) LABEL org.opencontainers.image.version=24.04
2026-09-18 21:23:13 UTC/bin/sh -c #(nop) ADD file:1cd6cb2db79bbe57d4c67f2fc8379cad96159285fa5a44e68dad06261eee82b4 in /
2026-09-18 21:23:13 UTC/bin/sh -c #(nop) CMD ["/bin/bash"]
2026-10-05 05:23:33 UTC (buildkit.dockerfile.v0)LABEL maintainer=tech@appsmith.com
2026-10-05 05:23:33 UTC (buildkit.dockerfile.v0)WORKDIR /opt/appsmith
2026-10-05 05:23:33 UTC (buildkit.dockerfile.v0)ENV LANG=C.UTF-8
2026-10-05 05:23:33 UTC (buildkit.dockerfile.v0)ENV LC_ALL=C.UTF-8
2026-10-12 05:16:15 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && printf 'Acquire::Retries "3";\nAcquire::http::Timeout "30";\nAcquire::https::Timeout "30";\n' > /etc/apt/apt.conf.d/80-appsmith-retries && apt-get update && apt-get upgrade --yes && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes supervisor curl nfs-common gnupg gettext ca-certificates libnss-wrapper software-properties-common git && add-apt-repository -y ppa:git-core/ppa && curl --retry 3 --retry-connrefused --connect-timeout 15 --retry-max-time 60 -fsSL -o /tmp/mongodb-server-7.0.asc https://www.mongodb.org/static/pgp/server-7.0.asc && gpg --dearmor -o /usr/share/keyrings/mongodb-server-7.0.gpg /tmp/mongodb-server-7.0.asc && echo "deb [ arch=amd64,arm64 signed-by=/usr/share/keyrings/mongodb-server-7.0.gpg ] https://repo.mongodb.org/apt/ubuntu jammy/mongodb-org/7.0 multiverse" | tee /etc/apt/sources.list.d/mongodb-org-7.0.list && echo "deb http://apt.postgresql.org/pub/repos/apt $(grep CODENAME /etc/lsb-release | cut -d= -f2)-pgdg main" | tee /etc/apt/sources.list.d/pgdg.list && curl --fail --retry 3 --retry-connrefused --connect-timeout 15 --retry-max-time 60 --silent --show-error --location -o /tmp/pgdg-ACCC4CF8.asc https://www.postgresql.org/media/keys/ACCC4CF8.asc && apt-key add /tmp/pgdg-ACCC4CF8.asc && apt update && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes mongodb-org-server mongodb-org-mongos mongodb-mongosh postgresql-14 git tar zstd openssh-client && DEBIAN_FRONTEND=noninteractive apt-get purge --yes --auto-remove software-properties-common && apt-get clean && rm -rf /root/.cache /root/.npm /usr/local/share/doc /usr/share/doc /usr/share/man /var/lib/apt/lists/* /etc/apt/apt.conf.d/80-appsmith-retries /tmp/* # buildkit
2026-10-12 05:16:15 UTC (buildkit.dockerfile.v0)COPY /usr/local/bin/redis-server /usr/local/bin/redis-server # buildkit
2026-10-12 05:16:15 UTC (buildkit.dockerfile.v0)COPY /usr/local/bin/redis-cli /usr/local/bin/redis-cli # buildkit
2026-10-12 05:16:15 UTC (buildkit.dockerfile.v0)COPY /tmp/mongo-tools/bin/ /usr/bin/ # buildkit
2026-10-12 05:16:15 UTC (buildkit.dockerfile.v0)ENV PATH=/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-10-12 05:16:18 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && mkdir -p /opt/java && arch="$(uname -m | sed 's/x86_64/x64/; s/aarch64/aarch64/')" && curl --fail --retry 3 --retry-connrefused --connect-timeout 15 --retry-max-time 60 --location -o /tmp/adoptium-jdk.tar.gz "https://api.adoptium.net/v3/binary/latest/25/ga/linux/${arch}/jdk/hotspot/normal/eclipse" && tar -xzf /tmp/adoptium-jdk.tar.gz -C /opt/java --strip-components 1 && rm -f /tmp/adoptium-jdk.tar.gz # buildkit
2026-10-12 05:16:24 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eo xtrace mkdir -p /opt/node arch="$(uname -m | sed 's/x86_64/x64/; s/aarch64/arm64/')" curl -LOsS "https://nodejs.org/dist/latest-v24.x/SHASUMS256.txt" filename="$(awk '/linux-'"$arch"'.tar.gz/ {print $2}' SHASUMS256.txt)" curl -LOsS "https://nodejs.org/dist/latest-v24.x/$filename" grep "$filename" SHASUMS256.txt | sha256sum -c - tar -xzf "$filename" -C /opt/node --strip-components 1 rm "$filename" SHASUMS256.txt # Node 24.x bundles npm 11.16/11.17, whose bundled tar (<=7.5.16) is vulnerable # to CVE-2026-59873 (node-tar gzip-bomb DoS). npm 11.18.0 is the first release # bundling the patched tar 7.5.19; pin it since no Node 24.x ships a fixed npm yet. export PATH="/opt/node/bin:$PATH" npm install -g npm@11.18.0 # npm 11.18.0 / 11.19.0 still vendor brace-expansion 5.0.7 (CVE-2026-69152 / # CVE-2026-14257) and ip-address 10.2.0 (CVE-2026-69192). Unpack patched # tarballs over the nested copies; `npm install --prefix` on npm's own # package.json tries to resolve private @npmcli/* deps and 404s. npm_nm="$(npm root -g)/npm/node_modules" tmp="$(mktemp -d)" (cd "$tmp" && npm pack --silent brace-expansion@5.0.9 ip-address@10.3.1) rm -rf "$npm_nm/brace-expansion" "$npm_nm/ip-address" mkdir -p "$npm_nm/brace-expansion" "$npm_nm/ip-address" tar -xzf "$tmp"/brace-expansion-*.tgz -C "$npm_nm/brace-expansion" --strip-components 1 tar -xzf "$tmp"/ip-address-*.tgz -C "$npm_nm/ip-address" --strip-components 1 rm -rf "$tmp" npm cache clean --force # buildkit
2026-10-12 05:16:24 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/caddy # buildkit
2026-10-12 05:16:24 UTC (buildkit.dockerfile.v0)COPY /usr/bin/caddy /opt/caddy/caddy # buildkit
2026-10-12 05:16:26 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/keycloak/data && curl --location https://github.com/keycloak/keycloak/releases/download/26.7.3/keycloak-26.7.3.tar.gz | tar -xz -C /opt/keycloak --strip-components 1 && mkdir -p /opt/keycloak/data/tmp # buildkit
2026-10-12 05:16:26 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux && KC_NETTY_JAR=/opt/keycloak/lib/lib/main/io.netty.netty-handler-4.1.136.Final.jar && test -f "$KC_NETTY_JAR" && curl --fail --retry 3 --connect-timeout 15 --location --output "$KC_NETTY_JAR" https://repo.maven.apache.org/maven2/io/netty/netty-handler/4.1.137.Final/netty-handler-4.1.137.Final.jar && echo "d0e4c6ee4779f59f6ab2fb5d388e4f57147c82270164b37945764bb9bda96a44 $KC_NETTY_JAR" | sha256sum --check # buildkit
2026-10-12 05:16:26 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -o xtrace && mkdir -p /opt/temporal # buildkit
2026-10-12 05:16:26 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/bin/temporal-server /opt/temporal/ # buildkit
2026-10-12 05:16:26 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/bin/temporal-sql-tool /opt/temporal/ # buildkit
2026-10-12 05:16:26 UTC (buildkit.dockerfile.v0)COPY /opt/temporal/temporal-1.22.7/schema/postgresql/v12 /opt/temporal/temporal-1.22.7/schema/postgresql/v12 # buildkit
2026-10-12 05:16:27 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c mkdir -p /opt/newrelic && curl -o /opt/newrelic/newrelic.jar https://download.newrelic.com/newrelic/java-agent/newrelic-agent/current/newrelic-agent.jar # buildkit
2026-10-12 05:16:27 UTC (buildkit.dockerfile.v0)VOLUME [/appsmith-stacks]
2026-10-12 05:16:27 UTC (buildkit.dockerfile.v0)ENV TMP=/tmp/appsmith
2026-10-12 05:16:27 UTC (buildkit.dockerfile.v0)ENV WWW_PATH=/tmp/appsmith/www
2026-10-12 05:16:27 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_SYMLINK=/usr/local/lib/libnss_wrapper.so
2026-10-12 05:16:27 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c NSS_WRAPPER_LIB=$(find /usr/lib -name libnss_wrapper.so -type f 2>/dev/null | head -n1) && ln -sf "$NSS_WRAPPER_LIB" $NSS_WRAPPER_SYMLINK # buildkit
2026-10-12 05:16:27 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_PASSWD=/tmp/appsmith/passwd
2026-10-12 05:16:27 UTC (buildkit.dockerfile.v0)ENV NSS_WRAPPER_GROUP=/tmp/appsmith/group
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ARG APPSMITH_CLOUD_SERVICES_BASE_URL
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ENV APPSMITH_CLOUD_SERVICES_BASE_URL=https://release-cs.appsmith.com
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ARG APPSMITH_SEGMENT_CE_KEY
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ARG APPSMITH_AIRGAP_ENABLED=false
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ARG KEYGEN_LICENSE_VERIFICATION_KEY
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ARG APPSMITH_CLIENT_BUILD_PATH=./app/client/build
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ENV APPSMITH_SEGMENT_CE_KEY=ofHYwPrNAJMgHYMx10zzL95CKptKhnJR
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ENV APPSMITH_AIRGAP_ENABLED=false
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ENV KEYGEN_LICENSE_VERIFICATION_KEY=
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ARG APPSMITH_BETTERBUGS_API_KEY
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ENV APPSMITH_BETTERBUGS_API_KEY=3878cc594d09f078e573b6fab160395b
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ARG APPSMITH_PYLON_APP_ID
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)ENV APPSMITH_PYLON_APP_ID=6d14674c-41cc-412f-92c7-970041e64b61
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)COPY deploy/docker/fs / # buildkit
2026-10-15 02:03:04 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL=https://release-cs.appsmith.com APPSMITH_SEGMENT_CE_KEY=ofHYwPrNAJMgHYMx10zzL95CKptKhnJR APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY=3878cc594d09f078e573b6fab160395b APPSMITH_PYLON_APP_ID=6d14674c-41cc-412f-92c7-970041e64b61 /bin/sh -c if ! [ -f info.json ]; then echo "Missing info.json" >&2 exit 1 fi if ! [ -f server/mongo/server.jar ]; then echo "Missing MongoDB server.jar file. Are you using the build script?" >&2 exit 1 fi # buildkit
2026-10-15 02:03:05 UTC (buildkit.dockerfile.v0)COPY ./app/client/build editor/ # buildkit
2026-10-15 02:03:05 UTC (buildkit.dockerfile.v0)COPY ./app/client/packages/rts/dist rts/ # buildkit
2026-10-15 02:03:05 UTC (buildkit.dockerfile.v0)COPY ./app/client/packages/mcp/dist mcp/ # buildkit
2026-10-15 02:03:05 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL=https://release-cs.appsmith.com APPSMITH_SEGMENT_CE_KEY=ofHYwPrNAJMgHYMx10zzL95CKptKhnJR APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY=3878cc594d09f078e573b6fab160395b APPSMITH_PYLON_APP_ID=6d14674c-41cc-412f-92c7-970041e64b61 /bin/sh -c mkdir --mode 775 "/dev/shm/git-storage" # buildkit
2026-10-15 02:03:05 UTC (buildkit.dockerfile.v0)ENV PATH=/opt/bin:/opt/java/bin:/opt/node/bin:/usr/lib/postgresql/14/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-10-15 02:03:20 UTC (buildkit.dockerfile.v0)RUN |7 APPSMITH_CLOUD_SERVICES_BASE_URL=https://release-cs.appsmith.com APPSMITH_SEGMENT_CE_KEY=ofHYwPrNAJMgHYMx10zzL95CKptKhnJR APPSMITH_AIRGAP_ENABLED=false KEYGEN_LICENSE_VERIFICATION_KEY= APPSMITH_CLIENT_BUILD_PATH=./app/client/build APPSMITH_BETTERBUGS_API_KEY=3878cc594d09f078e573b6fab160395b APPSMITH_PYLON_APP_ID=6d14674c-41cc-412f-92c7-970041e64b61 /bin/sh -c set -o errexit cd ./rts # NODE_DISABLE_COMPILE_CACHE=1 prevents npm/node from populating a v8 # bytecode cache under $TMP (/tmp/appsmith) as root during the build, # which would otherwise leave the directory un-writable for the # non-root runtime user when the entrypoint tries to mkdir inside it. # The cache only benefits npm's own code, not RTS, so disabling at # build time costs nothing. NODE_DISABLE_COMPILE_CACHE=1 npm install --only=prod cd - # Make all `*.sh` files executable, excluding `node_modules`. find . \( -name node_modules -prune \) -o \( -type f -name '*.sh' \) -exec chmod +x '{}' + # Ensure all custom command-scripts have executable permission chmod +x /opt/bin/* /watchtower-hooks/*.sh # Disable setuid/setgid bits for the files inside container. find / \( -path /proc -prune \) -o \( \( -perm -2000 -o -perm -4000 \) -exec chmod -s '{}' + \) || true mkdir -p /.mongodb/mongosh /appsmith-stacks chmod ugo+w /etc /appsmith-stacks chmod -R ugo+w /var/run /.mongodb /etc/ssl /usr/local/share ln --verbose --force --symbolic --no-target-directory /appsmith-stacks/data/keycloak /opt/keycloak/data/h2 # Keycloak writes builds to the quarkus directory in some situations and needs to be able to do so when not root chmod -R ugo+w /opt/keycloak/lib/quarkus # Keycloak 24+ writes a truststore to /opt/keycloak/data/ at startup chmod ugo+w /opt/keycloak/data # Keycloak's GzipResourceEncodingProvider caches compressed theme resources here chmod -R ugo+w /opt/keycloak/data/tmp # buildkit
2026-10-15 02:03:20 UTC (buildkit.dockerfile.v0)LABEL com.centurylinklabs.watchtower.lifecycle.pre-check=/watchtower-hooks/pre-check.sh
2026-10-15 02:03:20 UTC (buildkit.dockerfile.v0)LABEL com.centurylinklabs.watchtower.lifecycle.pre-update=/watchtower-hooks/pre-update.sh
2026-10-15 02:03:20 UTC (buildkit.dockerfile.v0)EXPOSE map[80/tcp:{}]
2026-10-15 02:03:20 UTC (buildkit.dockerfile.v0)EXPOSE map[443/tcp:{}]
2026-10-15 02:03:20 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["/opt/appsmith/entrypoint.sh"]
2026-10-15 02:03:20 UTC (buildkit.dockerfile.v0)HEALTHCHECK &{["CMD-SHELL" "\"/opt/appsmith/healthcheck.sh\""] "15s" "15s" "45s" "0s" '\x00'}
2026-10-15 02:03:20 UTC (buildkit.dockerfile.v0)CMD ["/usr/bin/supervisord" "-n"]
Delete Tag
Please be careful as this will not just delete the reference but also the actual content!
For example when you have latest and v1.2.3 both pointing to the same image
the deletion of latest will also permanently remove v1.2.3.