cleanstart/openldap
Verified Publisher
Secure by Design, Built for Speed, Hardened Container Images on a minimal base CleanStart OS.
Image
Databases & storage
0
100K+
cleanstart/openldap repository overview
 |
Verified OPENLDAP Container Image
A hardened, minimal OPENLDAP container image built from source with verifiable software provenance and an SBOM, designed for secure production deployments.
For additional versions including FIPS support, explore CleanStart Images — secure, hardened container images
Pull Latest Image
Download the container image from the registry
docker pull cleanstart/openldap:latest
docker pull cleanstart/openldap:latest-dev
Basic Run
Run the container with basic configuration
docker run -it --name openldap cleanstart/openldap:latest
Production Deployment
Create slapd.conf for bind mount
create file - nano ~/slapd.conf
- paste below config -
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
modulepath /usr/lib/openldap
moduleload back_mdb.so
database config
database mdb
maxsize 1073741824
suffix "dc=my-domain,dc=com"
rootdn "cn=Manager,dc=my-domain,dc=com"
rootpw {SSHA}yourhashedpasswordhere
directory /var/lib/openldap/openldap-data
index objectClass eq
database monitor
Production usage
docker rm -f openldap-prod 2>/dev/null; \
docker volume create openldap-prod-libdir && \
docker run --rm -v openldap-prod-libdir:/mount alpine sh -c "mkdir -p /mount/openldap-data && chown -R 389:389 /mount && chmod -R 700 /mount" && \
chmod 644 ~/slapd.conf && \
docker run -d --name openldap-prod \
--security-opt=no-new-privileges \
--user 389:389 \
--cap-drop ALL \
--cap-add NET_BIND_SERVICE \
--restart unless-stopped \
-v openldap-prod-libdir:/var/lib/openldap \
-v ~/slapd.conf:/etc/openldap/slapd.conf:ro \
-p 389:389 -p 636:636 \
--entrypoint slapd \
cleanstart/openldap:latest \
-h "ldap:// ldaps://" -d 0
Volume Mount local directory for persistent data
docker run -it --name openldap \
-v openldap-data:/var/lib/openldap/openldap-data \
cleanstart/openldap:latest
Port Forwarding Run with custom port mappings
docker run -it --name openldap \
-p 1389:389 -p 1636:636 \
cleanstart/openldap:latest
Why Use CleanStart Images
- Verified — Built from source with verifiable software provenance
- Hardened — Minimal software footprint designed for secure deployment
- Transparent — SBOM available for visibility into image contents
- Production-ready — Built for modern container environments
Tag summary
Content type
Image
Digest
sha256:dc813ec1e…
Size
39.9 MB
Last updated
about 21 hours ago
docker pull cleanstart/openldap