Available Images

Complete reference of all available Cbox base image tags and variants.

Image Registry

All images are published to GitHub Container Registry:

ghcr.io/cboxdk/php-baseimages/{image-type}:{tag}

Image Tiers

All images come in three tiers to match your needs:

Multi-Service Images (PHP-FPM + Nginx)

Single container with both PHP-FPM and Nginx - perfect for simple deployments.

Standard Tier (Default)

Slim Tier

Optimized for APIs and microservices with minimal footprint:

Full Tier

Includes Chromium for Browsershot, Dusk, and PDF generation:

Rootless Variants

All tiers support rootless execution (runs as www-data user). Available for all PHP versions:

Where {version} is 8.2, 8.3, 8.4, or 8.5.

Tag Format

{type}:{php_version}-{os}[-tier][-rootless]

Examples:
php-fpm-nginx:8.4-bookworm              # Standard tier (default)
php-fpm-nginx:8.4-bookworm-slim         # Slim tier
php-fpm-nginx:8.4-bookworm-full         # Full tier
php-fpm-nginx:8.4-bookworm-rootless     # Standard + rootless
php-fpm-nginx:8.4-bookworm-slim-rootless  # Slim + rootless
php-fpm-nginx:8.4-bookworm-full-rootless  # Full + rootless

Rolling Tags (Recommended)

Rolling tags receive weekly security updates:

# Automatically gets security patches every Monday
image: ghcr.io/cboxdk/php-baseimages/php-fpm-nginx:8.4-bookworm

Immutable SHA Tags

For reproducible builds, use SHA-pinned tags:

# Locked to specific build
image: ghcr.io/cboxdk/php-baseimages/php-fpm-nginx:8.4-bookworm@sha256:abc123...

Architecture Support

All images are built for multiple architectures:

Docker automatically pulls the correct architecture:

# Works on both AMD64 and ARM64
docker pull ghcr.io/cboxdk/php-baseimages/php-fpm-nginx:8.4-bookworm

OS Information

Cbox Base Images use Debian 12 (Bookworm) as the base operating system.

Tier Comparison

Version Support

Recommendation: Use PHP 8.4 or 8.5 for production. PHP 8.5 includes the latest language features.

Usage Examples

Docker CLI

# Pull standard tier (most Laravel/PHP apps)
docker pull ghcr.io/cboxdk/php-baseimages/php-fpm-nginx:8.4-bookworm

# Pull slim tier (APIs, microservices)
docker pull ghcr.io/cboxdk/php-baseimages/php-fpm-nginx:8.4-bookworm-slim

# Pull full tier (Browsershot, Dusk)
docker pull ghcr.io/cboxdk/php-baseimages/php-fpm-nginx:8.4-bookworm-full

# Run with volume mount
docker run -p 8000:80 -v $(pwd):/var/www/html \
  ghcr.io/cboxdk/php-baseimages/php-fpm-nginx:8.4-bookworm

Docker Compose

services:
  # Standard tier - most Laravel apps
  app:
    image: ghcr.io/cboxdk/php-baseimages/php-fpm-nginx:8.4-bookworm
    ports:
      - "8000:80"
    volumes:
      - ./:/var/www/html

  # Slim tier - API service
  api:
    image: ghcr.io/cboxdk/php-baseimages/php-fpm-nginx:8.4-bookworm-slim
    ports:
      - "8001:80"

  # Full tier - PDF generation service
  pdf:
    image: ghcr.io/cboxdk/php-baseimages/php-fpm-nginx:8.4-bookworm-full
    environment:
      PHP_MEMORY_LIMIT: "1G"

Dockerfile

# Standard tier for most apps
FROM ghcr.io/cboxdk/php-baseimages/php-fpm-nginx:8.4-bookworm

COPY --chown=www-data:www-data . /var/www/html

RUN composer install --no-dev --optimize-autoloader

# Full tier for Browsershot
FROM ghcr.io/cboxdk/php-baseimages/php-fpm-nginx:8.4-bookworm-full

COPY --chown=www-data:www-data . /var/www/html

RUN composer install --no-dev --optimize-autoloader

Weekly Security Rebuilds

All images are automatically rebuilt every Monday at 03:00 UTC:

• Latest upstream PHP patches
• Latest OS security updates
• CVE scanning with Trivy
• Multi-architecture builds

Stay secure: Pull images regularly to get security patches.

# Pull latest security patches
docker pull ghcr.io/cboxdk/php-baseimages/php-fpm-nginx:8.4-bookworm
docker-compose up -d --pull always

Need help choosing? See Choosing a Variant | Image Tiers Comparison