ClickHouse on Docker Hardened Images

ClickHouse is now available on Docker Hardened Images, providing a stripped-down, security-hardened version of the ClickHouse stack that includes the server image, ClickHouse Keeper, the Kubernetes Operator, and its Helm chart. These images are designed to pass enterprise security scans by excluding unnecessary packages, thus reducing vulnerabilities commonly found in the standard ClickHouse Docker image, which is built on Ubuntu 22.04 and includes many unused packages. Docker Hardened Images aim to maintain the same ClickHouse functionality while improving security by removing unnecessary tools like wget, which carry unresolved CVEs. This approach allows for a smoother developer experience in enterprise environments, as it separates the needs for local development and production security. The hardened images require minimal changes to the deployment process and offer options for managed and self-deployed ClickHouse services, providing flexibility in how much operational work teams choose to handle themselves.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.