containers

A focused collection of container images for my home-ops stack 🏠

---

Overview

Personal container images used in my home-ops cluster. Images are published to GitHub Container Registry.

Principles

• 📦 Semantically versioned — pin by digest for true immutability
• 🏗️ Multi-arch — linux/amd64 and linux/arm64
• 🔒 Rootless — no root required
• 🪶 KISS — stdout logging, one process per container, no s6-overlay

Tag Immutability

Tags here are not immutable by themselves. Pin to the sha256 digest for a truly immutable reference:

Reference	Immutable
ghcr.io/rafaribe/paperless-ai:rolling	❌
ghcr.io/rafaribe/paperless-ai:1.2.3	❌
ghcr.io/rafaribe/paperless-ai:rolling@sha256:abcd...	✅
ghcr.io/rafaribe/paperless-ai:1.2.3@sha256:abcd...	✅

Renovate can track both digest and version changes automatically.

Available Images

Container	Channel	Image
docmost-mcp	stable	ghcr.io/rafaribe/docmost-mcp
paperless-ai	stable	ghcr.io/rafaribe/paperless-ai
qbittorrent	stable	ghcr.io/rafaribe/qbittorrent
qbittorrent-beta	beta	ghcr.io/rafaribe/qbittorrent-beta

Usage

Kubernetes

spec:
  securityContext:
    runAsUser: 65534
    runAsGroup: 65534
    fsGroup: 65534
    fsGroupChangePolicy: OnRootMismatch

Docker Compose

services:
  app:
    image: ghcr.io/rafaribe/<image>:<version>
    user: 65534:65534