library
    sonarqube
    datacenter-app
Namespace
library
Image / Tag
sonarqube:datacenter-app
Content Digest
sha256:b867131293a46f3362503f8afb18dfc6f266251121772d7b33f803b0e3f66077
Details
Created

2026-11-03 00:18:20 UTC

Size

1.6 GB

Content Digest
Labels
  • io.k8s.description
    SonarQube Server is a self-managed, automatic code review tool that systematically helps you deliver Clean Code.
  • io.openshift.min-cpu
    400m
  • io.openshift.min-memory
    2048M
  • io.openshift.non-scalable
    false
  • io.openshift.tags
    sonarqube,static-code-analysis,code-quality,clean-code
  • org.opencontainers.image.url
    https://github.com/SonarSource/docker-sonarqube
  • org.opencontainers.image.version
    24.04
Environment
DOCKER_RUNNING

true

JAVA_HOME

/opt/java/openjdk

JAVA_VERSION

jdk-25.0.5+8

LANG

en_US.UTF-8

LANGUAGE

en_US:en

LC_ALL

en_US.UTF-8

PATH

/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

SONARQUBE_HOME

/opt/sonarqube

SONAR_CLUSTER_ENABLED

true

SONAR_CLUSTER_NODE_TYPE

application

SONAR_VERSION

2026.5.4.134003

SQ_DATA_DIR

/opt/sonarqube/data

SQ_EXTENSIONS_DIR

/opt/sonarqube/extensions

SQ_LOGS_DIR

/opt/sonarqube/logs

SQ_TEMP_DIR

/opt/sonarqube/temp

Layers

[#000] sha256:7a48b8f0e5c73d0cc2a85b008978396aa19d253dc1b96fdb0b769ee6dcbeca4a - 1.74% (28.4 MB)

[#001] sha256:355167cb7a407d1417f068d14e439c1524c862b959dfd5bb64a8ca5c9d4623ba - 1.02% (16.6 MB)

[#002] sha256:0de6cbbd38aeae4638aa7dc854586b203cf84d73bc182401f0bbf85936708962 - 5.41% (88.4 MB)

[#003] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)

[#004] sha256:c9565fbefe6b531b2d5a7fc4172f23e21316a8a7ecededc828045ed4dfa00543 - 0.0% (2.41 KB)

[#005] sha256:3c96686aa8473a34ef6fdd379605017444ebefdc2510ef8713e7bdb27de756a9 - 91.84% (1.47 GB)

[#006] sha256:cdc1e1ba514fe06c29bba4462fe71f67e0e28b5078f4044aeb4bec839a8fcc27 - 0.0% (1.38 KB)

[#007] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)

History
2026-10-25 14:17:45 UTC

/bin/sh -c #(nop) ARG RELEASE

2026-10-25 14:17:45 UTC

/bin/sh -c #(nop) ARG LAUNCHPAD_BUILD_ARCH

2026-10-25 14:17:45 UTC

/bin/sh -c #(nop) LABEL org.opencontainers.image.version=24.04

2026-10-25 14:17:47 UTC

/bin/sh -c #(nop) ADD file:eed88e94d6aa7c9da62836e137f889e03988c1a6b237b0cedb6ca666dfaa98ea in /

2026-10-25 14:17:47 UTC

/bin/sh -c #(nop) CMD ["/bin/bash"]

2026-10-29 19:16:38 UTC (buildkit.dockerfile.v0)

ENV JAVA_HOME=/opt/java/openjdk

2026-10-29 19:16:38 UTC (buildkit.dockerfile.v0)

ENV PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

2026-10-29 19:16:38 UTC (buildkit.dockerfile.v0)

ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8

2026-10-29 19:16:38 UTC (buildkit.dockerfile.v0)

RUN /bin/sh -c set -eux; apt-get update; DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends fontconfig ca-certificates p11-kit binutils tzdata locales ; echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen; locale-gen en_US.UTF-8; rm -rf /var/lib/apt/lists/* # buildkit

2026-10-29 19:16:38 UTC (buildkit.dockerfile.v0)

ENV JAVA_VERSION=jdk-25.0.5+8

2026-10-29 19:16:55 UTC (buildkit.dockerfile.v0)

RUN /bin/sh -c set -eux; ARCH="$(dpkg --print-architecture)"; case "${ARCH}" in amd64) ESUM='68982529869257d0ee6b824ec5aa270ff8b118bb438670da0b97ebdab178d7fb'; BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.5%2B8/OpenJDK25U-jdk_x64_linux_hotspot_25.0.5_8.tar.gz'; ;; arm64) ESUM='bb5b2ded252f21c6090cf780b0a408ad0d83bbb557e702955643557f13231880'; BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.5%2B8/OpenJDK25U-jdk_aarch64_linux_hotspot_25.0.5_8.tar.gz'; ;; ppc64el) ESUM='47825886fd72e86c94e6fd1687a13bebb4ae729e24d2788be0d294589bf07297'; BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.5%2B8/OpenJDK25U-jdk_ppc64le_linux_hotspot_25.0.5_8.tar.gz'; ;; riscv64) ESUM='21d9ee84f64d845e7de888f86cc2abe3256c75853a0d5abe7fd42d6526374e90'; BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.5%2B8/OpenJDK25U-jdk_riscv64_linux_hotspot_25.0.5_8.tar.gz'; ;; s390x) ESUM='dfed6b7b428852ab1a3b9eb7734264f4d4cc163686e4136f93b9942f3d8f44cd'; BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.5%2B8/OpenJDK25U-jdk_s390x_linux_hotspot_25.0.5_8.tar.gz'; ;; *) echo "Unsupported arch: ${ARCH}"; exit 1; ;; esac; savedAptMark="$(apt-mark showmanual)"; apt-get update; apt-get install -y --no-install-recommends wget gnupg; wget --progress=dot:giga -O /tmp/openjdk.tar.gz ${BINARY_URL}; wget --progress=dot:giga -O /tmp/openjdk.tar.gz.sig ${BINARY_URL}.sig; export GNUPGHOME="$(mktemp -d)"; gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 3B04D753C9050D9A5D343F39843C48A565F8F04B; gpg --batch --verify /tmp/openjdk.tar.gz.sig /tmp/openjdk.tar.gz; rm -rf "${GNUPGHOME}" /tmp/openjdk.tar.gz.sig; echo "${ESUM} */tmp/openjdk.tar.gz" | sha256sum -c -; mkdir -p "$JAVA_HOME"; tar --extract --file /tmp/openjdk.tar.gz --directory "$JAVA_HOME" --strip-components 1 --no-same-owner ; rm -f /tmp/openjdk.tar.gz ${JAVA_HOME}/lib/src.zip; apt-mark auto '.*' > /dev/null; apt-mark manual $savedAptMark > /dev/null; apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; rm -rf /var/lib/apt/lists/*; find "$JAVA_HOME/lib" -name '*.so' -exec dirname '{}' ';' | sort -u > /etc/ld.so.conf.d/docker-openjdk.conf; ldconfig; java -Xshare:dump; # buildkit

2026-10-29 19:16:57 UTC (buildkit.dockerfile.v0)

RUN /bin/sh -c set -eux; echo "Verifying install ..."; fileEncoding="$(echo 'System.out.println(System.getProperty("file.encoding"))' | jshell -s -)"; [ "$fileEncoding" = 'UTF-8' ]; rm -rf ~/.java; echo "javac --version"; javac --version; echo "java --version"; java --version; echo "Complete." # buildkit

2026-10-29 19:16:57 UTC (buildkit.dockerfile.v0)

COPY --chmod=755 entrypoint.sh /__cacert_entrypoint.sh # buildkit

2026-10-29 19:16:57 UTC (buildkit.dockerfile.v0)

ENTRYPOINT ["/__cacert_entrypoint.sh"]

2026-10-29 19:16:57 UTC (buildkit.dockerfile.v0)

CMD ["jshell"]

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

LABEL io.k8s.description=SonarQube Server is a self-managed, automatic code review tool that systematically helps you deliver Clean Code.

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

LABEL io.openshift.min-cpu=400m

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

LABEL io.openshift.min-memory=2048M

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

LABEL io.openshift.non-scalable=false

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

LABEL io.openshift.tags=sonarqube,static-code-analysis,code-quality,clean-code

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

LABEL org.opencontainers.image.url=https://github.com/SonarSource/docker-sonarqube

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

ARG SONARQUBE_VERSION=2026.5.4.134003

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

ARG SONARQUBE_ZIP_URL=https://binaries.sonarsource.com/CommercialDistribution/sonarqube-datacenter/sonarqube-datacenter-2026.5.4.134003.zip

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

ENV DOCKER_RUNNING=true JAVA_HOME=/opt/java/openjdk SONARQUBE_HOME=/opt/sonarqube SONAR_VERSION=2026.5.4.134003 SQ_DATA_DIR=/opt/sonarqube/data SQ_EXTENSIONS_DIR=/opt/sonarqube/extensions SQ_LOGS_DIR=/opt/sonarqube/logs SQ_TEMP_DIR=/opt/sonarqube/temp SONAR_CLUSTER_NODE_TYPE=application SONAR_CLUSTER_ENABLED=true

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

RUN |2 SONARQUBE_VERSION=2026.5.4.134003 SONARQUBE_ZIP_URL=https://binaries.sonarsource.com/CommercialDistribution/sonarqube-datacenter/sonarqube-datacenter-2026.5.4.134003.zip /bin/sh -c set -eux; deluser ubuntu; useradd --system --uid 1000 --gid 0 sonarqube; apt-get update; apt-get --no-install-recommends -y install bash ca-certificates curl fonts-dejavu gnupg iproute2 unzip; echo "networkaddress.cache.ttl=5" >> "${JAVA_HOME}/conf/security/java.security"; sed --in-place --expression="s?securerandom.source=file:/dev/random?securerandom.source=file:/dev/urandom?g" "${JAVA_HOME}/conf/security/java.security"; emsign_g3_alias='cn_emsign_ecc_root_ca__g3,o_emudhra_technologies_limited,ou_emsign_pki,c_in [jdk]'; emsign_g3_sha256='86:A1:EC:BA:08:9C:4A:8D:3B:BE:27:34:C6:12:BA:34:1D:81:3E:04:3C:F9:E8:A8:62:CD:5C:57:A3:6B:BE:6B'; if keytool -list -cacerts -storepass changeit -alias "${emsign_g3_alias}" > /dev/null 2>&1; then keytool -delete -cacerts -storepass changeit -alias "${emsign_g3_alias}"; fi; keytool -list -cacerts -storepass changeit > /tmp/cacerts.txt; if grep -q "${emsign_g3_sha256}" /tmp/cacerts.txt; then echo "emSign ECC Root CA - G3 is still trusted by the JDK" >&2; exit 1; fi; rm /tmp/cacerts.txt; if [ -e /etc/ssl/certs/emSign_ECC_Root_CA_-_G3.pem ]; then echo "emSign ECC Root CA - G3 is still trusted by the OS" "(ca-certificates $(dpkg-query -W -f='${Version}' ca-certificates))" >&2; exit 1; fi; for server in $(shuf -e hkps://keyserver.ubuntu.com) ; do gpg --batch --keyserver "${server}" --recv-keys 679F1EE92B19609DE816FDE81DB198F93525EC1A && break || : ; done; cd /opt; curl --proto "=https" --fail --output sonarqube.zip --silent --show-error "${SONARQUBE_ZIP_URL}"; curl --proto "=https" --fail --output sonarqube.zip.asc --silent --show-error "${SONARQUBE_ZIP_URL}.asc"; gpg --batch --verify sonarqube.zip.asc sonarqube.zip; unzip -q sonarqube.zip; mv "sonarqube-${SONARQUBE_VERSION}" sonarqube; rm sonarqube.zip*; rm -rf ${SONARQUBE_HOME}/bin/*; ln -s "${SONARQUBE_HOME}/lib/sonar-application-${SONARQUBE_VERSION}.jar" "${SONARQUBE_HOME}/lib/sonarqube.jar"; chown -R sonarqube:root ${SONARQUBE_HOME}; chown -R sonarqube:root "${SQ_DATA_DIR}" "${SQ_EXTENSIONS_DIR}" "${SQ_LOGS_DIR}" "${SQ_TEMP_DIR}"; chmod -R 550 ${SONARQUBE_HOME}; chmod -R 770 "${SQ_DATA_DIR}" "${SQ_EXTENSIONS_DIR}" "${SQ_LOGS_DIR}" "${SQ_TEMP_DIR}"; apt-get remove -y gnupg unzip; rm -rf /var/lib/apt/lists/*; # buildkit

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

VOLUME [/opt/sonarqube/data /opt/sonarqube/extensions /opt/sonarqube/logs /opt/sonarqube/temp]

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

COPY --chown=root:root --chmod=555 run.sh sonar.sh /opt/sonarqube/docker/ # buildkit

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

WORKDIR /opt/sonarqube

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

EXPOSE map[9000/tcp:{}]

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

USER sonarqube

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

STOPSIGNAL SIGINT

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

ENTRYPOINT ["/opt/sonarqube/docker/run.sh"]

2026-11-03 00:18:20 UTC (buildkit.dockerfile.v0)

CMD ["/opt/sonarqube/docker/sonar.sh"]

Details
Created

2026-11-03 00:18:24 UTC

Size

1.6 GB

Content Digest
Labels
  • io.k8s.description
    SonarQube Server is a self-managed, automatic code review tool that systematically helps you deliver Clean Code.
  • io.openshift.min-cpu
    400m
  • io.openshift.min-memory
    2048M
  • io.openshift.non-scalable
    false
  • io.openshift.tags
    sonarqube,static-code-analysis,code-quality,clean-code
  • org.opencontainers.image.url
    https://github.com/SonarSource/docker-sonarqube
  • org.opencontainers.image.version
    24.04
Environment
DOCKER_RUNNING

true

JAVA_HOME

/opt/java/openjdk

JAVA_VERSION

jdk-25.0.5+8

LANG

en_US.UTF-8

LANGUAGE

en_US:en

LC_ALL

en_US.UTF-8

PATH

/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

SONARQUBE_HOME

/opt/sonarqube

SONAR_CLUSTER_ENABLED

true

SONAR_CLUSTER_NODE_TYPE

application

SONAR_VERSION

2026.5.4.134003

SQ_DATA_DIR

/opt/sonarqube/data

SQ_EXTENSIONS_DIR

/opt/sonarqube/extensions

SQ_LOGS_DIR

/opt/sonarqube/logs

SQ_TEMP_DIR

/opt/sonarqube/temp

Layers

[#000] sha256:e2d2bb84d02254f4be480ca3c62f94fc12ac959c11b3ce5bd7da3f411b2b9607 - 1.69% (27.6 MB)

[#001] sha256:94bdec4e33f7645ca9d3383fe9af1ec19d1e6c503305cf4ce7a0fc82a4fa915a - 1.09% (17.8 MB)

[#002] sha256:784683ba044abcbc3be83747952be596f9b973975167190c919626cad9173ee2 - 5.35% (87.4 MB)

[#003] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)

[#004] sha256:73859e380a34d3e320409b2010b9ef69a9b84bce5e0b60a0aef80070a3fd4104 - 0.0% (2.41 KB)

[#005] sha256:ea417b42f192294a2f4f90bc006752a4c81f4f521fbae1818d24d0962396d85d - 91.88% (1.47 GB)

[#006] sha256:ec7d0019ee3a45a0cc956f9af76664834508bc1065495fed331ebfb4bac69dbb - 0.0% (1.38 KB)

[#007] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)

History
2026-10-25 14:18:00 UTC

/bin/sh -c #(nop) ARG RELEASE

2026-10-25 14:18:00 UTC

/bin/sh -c #(nop) ARG LAUNCHPAD_BUILD_ARCH

2026-10-25 14:18:00 UTC

/bin/sh -c #(nop) LABEL org.opencontainers.image.version=24.04

2026-10-25 14:18:03 UTC

/bin/sh -c #(nop) ADD file:2c901e275b6c59fa9cf0fb689a9665247088dba23d45178d9aa52ec3263de265 in /

2026-10-25 14:18:03 UTC

/bin/sh -c #(nop) CMD ["/bin/bash"]

2026-10-29 19:09:23 UTC (buildkit.dockerfile.v0)

ENV JAVA_HOME=/opt/java/openjdk

2026-10-29 19:09:23 UTC (buildkit.dockerfile.v0)

ENV PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

2026-10-29 19:09:23 UTC (buildkit.dockerfile.v0)

ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8

2026-10-29 19:09:23 UTC (buildkit.dockerfile.v0)

RUN /bin/sh -c set -eux; apt-get update; DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends fontconfig ca-certificates p11-kit binutils tzdata locales ; echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen; locale-gen en_US.UTF-8; rm -rf /var/lib/apt/lists/* # buildkit

2026-10-29 19:09:23 UTC (buildkit.dockerfile.v0)

ENV JAVA_VERSION=jdk-25.0.5+8

2026-10-29 19:09:44 UTC (buildkit.dockerfile.v0)

RUN /bin/sh -c set -eux; ARCH="$(dpkg --print-architecture)"; case "${ARCH}" in amd64) ESUM='68982529869257d0ee6b824ec5aa270ff8b118bb438670da0b97ebdab178d7fb'; BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.5%2B8/OpenJDK25U-jdk_x64_linux_hotspot_25.0.5_8.tar.gz'; ;; arm64) ESUM='bb5b2ded252f21c6090cf780b0a408ad0d83bbb557e702955643557f13231880'; BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.5%2B8/OpenJDK25U-jdk_aarch64_linux_hotspot_25.0.5_8.tar.gz'; ;; ppc64el) ESUM='47825886fd72e86c94e6fd1687a13bebb4ae729e24d2788be0d294589bf07297'; BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.5%2B8/OpenJDK25U-jdk_ppc64le_linux_hotspot_25.0.5_8.tar.gz'; ;; riscv64) ESUM='21d9ee84f64d845e7de888f86cc2abe3256c75853a0d5abe7fd42d6526374e90'; BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.5%2B8/OpenJDK25U-jdk_riscv64_linux_hotspot_25.0.5_8.tar.gz'; ;; s390x) ESUM='dfed6b7b428852ab1a3b9eb7734264f4d4cc163686e4136f93b9942f3d8f44cd'; BINARY_URL='https://github.com/adoptium/temurin25-binaries/releases/download/jdk-25.0.5%2B8/OpenJDK25U-jdk_s390x_linux_hotspot_25.0.5_8.tar.gz'; ;; *) echo "Unsupported arch: ${ARCH}"; exit 1; ;; esac; savedAptMark="$(apt-mark showmanual)"; apt-get update; apt-get install -y --no-install-recommends wget gnupg; wget --progress=dot:giga -O /tmp/openjdk.tar.gz ${BINARY_URL}; wget --progress=dot:giga -O /tmp/openjdk.tar.gz.sig ${BINARY_URL}.sig; export GNUPGHOME="$(mktemp -d)"; gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 3B04D753C9050D9A5D343F39843C48A565F8F04B; gpg --batch --verify /tmp/openjdk.tar.gz.sig /tmp/openjdk.tar.gz; rm -rf "${GNUPGHOME}" /tmp/openjdk.tar.gz.sig; echo "${ESUM} */tmp/openjdk.tar.gz" | sha256sum -c -; mkdir -p "$JAVA_HOME"; tar --extract --file /tmp/openjdk.tar.gz --directory "$JAVA_HOME" --strip-components 1 --no-same-owner ; rm -f /tmp/openjdk.tar.gz ${JAVA_HOME}/lib/src.zip; apt-mark auto '.*' > /dev/null; apt-mark manual $savedAptMark > /dev/null; apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; rm -rf /var/lib/apt/lists/*; find "$JAVA_HOME/lib" -name '*.so' -exec dirname '{}' ';' | sort -u > /etc/ld.so.conf.d/docker-openjdk.conf; ldconfig; java -Xshare:dump; # buildkit

2026-10-29 19:09:46 UTC (buildkit.dockerfile.v0)

RUN /bin/sh -c set -eux; echo "Verifying install ..."; fileEncoding="$(echo 'System.out.println(System.getProperty("file.encoding"))' | jshell -s -)"; [ "$fileEncoding" = 'UTF-8' ]; rm -rf ~/.java; echo "javac --version"; javac --version; echo "java --version"; java --version; echo "Complete." # buildkit

2026-10-29 19:09:46 UTC (buildkit.dockerfile.v0)

COPY --chmod=755 entrypoint.sh /__cacert_entrypoint.sh # buildkit

2026-10-29 19:09:46 UTC (buildkit.dockerfile.v0)

ENTRYPOINT ["/__cacert_entrypoint.sh"]

2026-10-29 19:09:46 UTC (buildkit.dockerfile.v0)

CMD ["jshell"]

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

LABEL io.k8s.description=SonarQube Server is a self-managed, automatic code review tool that systematically helps you deliver Clean Code.

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

LABEL io.openshift.min-cpu=400m

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

LABEL io.openshift.min-memory=2048M

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

LABEL io.openshift.non-scalable=false

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

LABEL io.openshift.tags=sonarqube,static-code-analysis,code-quality,clean-code

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

LABEL org.opencontainers.image.url=https://github.com/SonarSource/docker-sonarqube

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

ARG SONARQUBE_VERSION=2026.5.4.134003

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

ARG SONARQUBE_ZIP_URL=https://binaries.sonarsource.com/CommercialDistribution/sonarqube-datacenter/sonarqube-datacenter-2026.5.4.134003.zip

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

ENV DOCKER_RUNNING=true JAVA_HOME=/opt/java/openjdk SONARQUBE_HOME=/opt/sonarqube SONAR_VERSION=2026.5.4.134003 SQ_DATA_DIR=/opt/sonarqube/data SQ_EXTENSIONS_DIR=/opt/sonarqube/extensions SQ_LOGS_DIR=/opt/sonarqube/logs SQ_TEMP_DIR=/opt/sonarqube/temp SONAR_CLUSTER_NODE_TYPE=application SONAR_CLUSTER_ENABLED=true

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

RUN |2 SONARQUBE_VERSION=2026.5.4.134003 SONARQUBE_ZIP_URL=https://binaries.sonarsource.com/CommercialDistribution/sonarqube-datacenter/sonarqube-datacenter-2026.5.4.134003.zip /bin/sh -c set -eux; deluser ubuntu; useradd --system --uid 1000 --gid 0 sonarqube; apt-get update; apt-get --no-install-recommends -y install bash ca-certificates curl fonts-dejavu gnupg iproute2 unzip; echo "networkaddress.cache.ttl=5" >> "${JAVA_HOME}/conf/security/java.security"; sed --in-place --expression="s?securerandom.source=file:/dev/random?securerandom.source=file:/dev/urandom?g" "${JAVA_HOME}/conf/security/java.security"; emsign_g3_alias='cn_emsign_ecc_root_ca__g3,o_emudhra_technologies_limited,ou_emsign_pki,c_in [jdk]'; emsign_g3_sha256='86:A1:EC:BA:08:9C:4A:8D:3B:BE:27:34:C6:12:BA:34:1D:81:3E:04:3C:F9:E8:A8:62:CD:5C:57:A3:6B:BE:6B'; if keytool -list -cacerts -storepass changeit -alias "${emsign_g3_alias}" > /dev/null 2>&1; then keytool -delete -cacerts -storepass changeit -alias "${emsign_g3_alias}"; fi; keytool -list -cacerts -storepass changeit > /tmp/cacerts.txt; if grep -q "${emsign_g3_sha256}" /tmp/cacerts.txt; then echo "emSign ECC Root CA - G3 is still trusted by the JDK" >&2; exit 1; fi; rm /tmp/cacerts.txt; if [ -e /etc/ssl/certs/emSign_ECC_Root_CA_-_G3.pem ]; then echo "emSign ECC Root CA - G3 is still trusted by the OS" "(ca-certificates $(dpkg-query -W -f='${Version}' ca-certificates))" >&2; exit 1; fi; for server in $(shuf -e hkps://keyserver.ubuntu.com) ; do gpg --batch --keyserver "${server}" --recv-keys 679F1EE92B19609DE816FDE81DB198F93525EC1A && break || : ; done; cd /opt; curl --proto "=https" --fail --output sonarqube.zip --silent --show-error "${SONARQUBE_ZIP_URL}"; curl --proto "=https" --fail --output sonarqube.zip.asc --silent --show-error "${SONARQUBE_ZIP_URL}.asc"; gpg --batch --verify sonarqube.zip.asc sonarqube.zip; unzip -q sonarqube.zip; mv "sonarqube-${SONARQUBE_VERSION}" sonarqube; rm sonarqube.zip*; rm -rf ${SONARQUBE_HOME}/bin/*; ln -s "${SONARQUBE_HOME}/lib/sonar-application-${SONARQUBE_VERSION}.jar" "${SONARQUBE_HOME}/lib/sonarqube.jar"; chown -R sonarqube:root ${SONARQUBE_HOME}; chown -R sonarqube:root "${SQ_DATA_DIR}" "${SQ_EXTENSIONS_DIR}" "${SQ_LOGS_DIR}" "${SQ_TEMP_DIR}"; chmod -R 550 ${SONARQUBE_HOME}; chmod -R 770 "${SQ_DATA_DIR}" "${SQ_EXTENSIONS_DIR}" "${SQ_LOGS_DIR}" "${SQ_TEMP_DIR}"; apt-get remove -y gnupg unzip; rm -rf /var/lib/apt/lists/*; # buildkit

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

VOLUME [/opt/sonarqube/data /opt/sonarqube/extensions /opt/sonarqube/logs /opt/sonarqube/temp]

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

COPY --chown=root:root --chmod=555 run.sh sonar.sh /opt/sonarqube/docker/ # buildkit

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

WORKDIR /opt/sonarqube

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

EXPOSE map[9000/tcp:{}]

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

USER sonarqube

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

STOPSIGNAL SIGINT

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

ENTRYPOINT ["/opt/sonarqube/docker/run.sh"]

2026-11-03 00:18:24 UTC (buildkit.dockerfile.v0)

CMD ["/opt/sonarqube/docker/sonar.sh"]

Danger Zone
Delete Tag

Please be careful as this will not just delete the reference but also the actual content!

For example when you have latest and v1.2.3 both pointing to the same image
the deletion of latest will also permanently remove v1.2.3.

Delete