⚠️ Breaking changes
- Container image is now based on
gcr.io/distroless/static-debian13:nonroot(previouslyalpine)- The container runs as UID
65532instead of root. Mounted files (SSH key, config, TLS files, password/passphrase files) must be readable by this user, e.g.chown 65532 <file>, or override the user with--user. - The image no longer contains a shell or tools like
wget/curl. Healthchecks or commands executed inside the container (sh -c ...,docker exec ... sh) no longer work. Use an external check against/metricsinstead.
- The container runs as UID
New
- Multi-arch container images for
linux/amd64,linux/arm64andlinux/arm/v7.
Changes
- The environment variables
SSH_KEYFILE,CONFIG_FILE,ALARM_FILTERandCMD_FLAGSwork as before. They are now handled by the binary itself and apply only when the container is started without arguments. - Values containing spaces (e.g. an
ALARM_FILTERregex) are no longer split up. - The binary is built with
-trimpathand without debug symbols, which makes it smaller. - Fixed the
-ssh.keyfileflag description ("Private key file").