Redis server images

Alauda's fork of docker-library/redis (upstream now maintained at redis/docker-library-redis): the build recipes for the Redis server container images shipped with Alauda's Redis middleware product.

Layout

releases/<version>/<variant>/ — one image recipe per built Redis version (5.0, 6.0, 7.2, plus a separate redis-benchmark image): Dockerfile, docker-entrypoint.sh, NOTICE.md, and numbered source patches applied at build time.

Patches

• 01–10 — backports of upstream Redis security fixes to versions that no longer receive upstream releases.
• 80 — optional encrypted-credential support for requirepass, masterauth, and sentinel auth-pass: values prefixed with <.> are AES-256-CBC ciphertext in hex. The key is read at runtime from a local key file — $REDIS_CRYPTO_KEY_FILE, default /etc/redis/crypto.key, 48 bytes (32-byte key followed by 16-byte IV). When no key file is present the feature is disabled and values are used verbatim.
• 81/82 — Redis core enablement patches (extended module API surface, per-key module metadata). These compile into the server but are dormant unless a module that uses the added APIs is loaded.

Building

# 7.2 uses the repository root as build context
docker build -f releases/7.2/alpine/Dockerfile .

# older versions build from their own directory
docker build releases/6.0/alpine

The Dockerfiles reference Alauda-internal base images (build-harbor.alauda.cn/ops/alpine:<tag>). To build outside Alauda infrastructure, substitute a matching alpine base image.

Known divergences from upstream docker-library

• Alauda base image instead of the official alpine image.
• redis-benchmark is removed from the server images and shipped as a separate image (releases/redis-benchmark/).
• The CVE backport and enablement patches listed above.

Licensing

Everything in this repository is BSD-3-Clause.

Redis source code is not contained in this repository; it is downloaded at image build time from the official release URLs pinned in each Dockerfile. Every Redis version built here (5.0, 6.0, 7.2) is BSD-3-Clause, and the patch files are modifications to that source, so they carry the same license.

See LICENSE for the full terms and NOTICE.md for attribution and where to obtain the source of the built images.

Each built image embeds the applicable license texts under /licenses/: the license file from the pinned Redis source release plus a NOTICE.md.