Base images

This page provides an overview of Google-provided base container images.

What are base images?

A base image is the starting point for most container-based development workflows. Developers start with a base image and layer on top of it the necessary libraries, binaries, and configuration files used to run their application.

Many base images are basic or minimal Linux distributions: Debian, Ubuntu, Red Hat Enterprise Linux (RHEL), Rocky Linux, or Alpine. Developers can consume these images directly from Docker Hub or other sources. There are official providers along with a wide variety of other downstream repackagers that layer software to meet customer needs.

Google maintains base images for building its own applications. These images are built from the same source that Docker Hub uses. Therefore, they match the images you would get from Docker Hub.

The advantage of using Google-maintained images is that they are stored on Google Cloud, so you can pull these images directly from your environment without having to traverse networks.

Google updates these images whenever a new version of an official image is released and the new version fixes a known vulnerability reported by Artifact Analysis. For more information on image versions, see the GitHub repository of official images.

Google-provided base images

Google-provided base images are available for the following OS distributions:

OS Repository path Google Cloud Marketplace listing
Debian 10 "Buster" marketplace.gcr.io/google/debian10 Google Cloud Marketplace
Debian 11 "Bullseye" marketplace.gcr.io/google/debian11 Google Cloud Marketplace
Debian 12 "Bookworm" marketplace.gcr.io/google/debian12 Google Cloud Marketplace
Rocky Linux 8 marketplace.gcr.io/google/rockylinux8 Google Cloud Marketplace
Rocky Linux 9 marketplace.gcr.io/google/rockylinux9 Google Cloud Marketplace
Ubuntu 20.04 marketplace.gcr.io/google/ubuntu2004 Google Cloud Marketplace
Ubuntu 22.04 marketplace.gcr.io/google/ubuntu2204 Google Cloud Marketplace

Changes to Google-provided base images

The following base image changes take effect on November 3, 2023:

  • Updated Debian 10 and Debian 11 images no longer have OpenSSL pre-installed.
  • The updated Ubuntu 20.04 image no longer has curl, Python, systemd, or sudo pre-installed.
  • Google no longer provides base images for the following Linux distributions: CentOS 7, CentOS 8, Ubuntu 18.04, and Debian 9 "Stretch".

Licensing

For information about the license that applies to the base images, refer to the distribution's documentation.

Alternative options

If base images aren't for you, you can use Cached images, which are frequently requested Docker Hub images stored on mirror.gcr.io. If you configure your Docker daemon to use cached images, your client always checks for a cached copy of a Docker Hub image before attempting to pull it directly from Docker Hub.

Learn more about pulling cached images.

For more ways to protect your software supply chain, including image validation, see Software supply chain security.

What's next