Block a user
qmcgaw/gluetun (latest)
Published 2026-09-24 09:28:35 +00:00 by pi-ux-ce
Installation
docker pull gitea.geeraert.eu/pi-ux-ce/qmcgaw/gluetun:latestsha256:d6f33ad40424a2a3bf55679601d4fbead4a23fb174f279dc24bd36fe34421c16
About this package
VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.
Image Layers
| ADD alpine-minirootfs-3.23.6-x86_64.tar.gz / # buildkit |
| CMD ["/bin/sh"] |
| ARG VERSION=latest |
| ARG CREATED=2026-09-23T23:02:31.234Z |
| ARG COMMIT=1267bae |
| LABEL org.opencontainers.image.authors=quentin.mcgaw@gmail.com org.opencontainers.image.created=2026-09-23T23:02:31.234Z org.opencontainers.image.version=latest org.opencontainers.image.revision=1267bae org.opencontainers.image.url=https://github.com/passteque/gluetun org.opencontainers.image.documentation=https://github.com/passteque/gluetun org.opencontainers.image.source=https://github.com/passteque/gluetun org.opencontainers.image.title=VPN swiss-knife like client for multiple VPN providers org.opencontainers.image.description=VPN swiss-knife like client to tunnel to multiple VPN servers using OpenVPN, IPtables, DNS over TLS, Shadowsocks, an HTTP proxy and Alpine Linux |
| ENV VPN_SERVICE_PROVIDER=pia VPN_TYPE=openvpn VPN_INTERFACE=tun0 OPENVPN_ENDPOINT_IP= OPENVPN_ENDPOINT_PORT= OPENVPN_PROTOCOL=udp OPENVPN_USER= OPENVPN_PASSWORD= OPENVPN_USER_SECRETFILE=/run/secrets/openvpn_user OPENVPN_PASSWORD_SECRETFILE=/run/secrets/openvpn_password OPENVPN_VERSION=2.6 OPENVPN_VERBOSITY=1 OPENVPN_FLAGS= OPENVPN_CIPHERS= OPENVPN_AUTH= OPENVPN_PROCESS_USER=root OPENVPN_MSSFIX= OPENVPN_CUSTOM_CONFIG= WIREGUARD_ENDPOINT_IP= WIREGUARD_ENDPOINT_PORT= WIREGUARD_CONF_SECRETFILE=/run/secrets/wg0.conf WIREGUARD_PRIVATE_KEY= WIREGUARD_PRIVATE_KEY_SECRETFILE=/run/secrets/wireguard_private_key WIREGUARD_PRESHARED_KEY= WIREGUARD_PRESHARED_KEY_SECRETFILE=/run/secrets/wireguard_preshared_key WIREGUARD_PUBLIC_KEY= WIREGUARD_ALLOWED_IPS= WIREGUARD_PERSISTENT_KEEPALIVE_INTERVAL=0 WIREGUARD_ADDRESSES= WIREGUARD_ADDRESSES_SECRETFILE=/run/secrets/wireguard_addresses WIREGUARD_MTU= WIREGUARD_IMPLEMENTATION=auto WIREGUARD_GSO=on AMNEZIAWG_ENDPOINT_IP= AMNEZIAWG_ENDPOINT_PORT= AMNEZIAWG_CONF_SECRETFILE=/run/secrets/wg0.conf AMNEZIAWG_PRIVATE_KEY= AMNEZIAWG_PRIVATE_KEY_SECRETFILE=/run/secrets/wireguard_private_key AMNEZIAWG_PRESHARED_KEY= AMNEZIAWG_PRESHARED_KEY_SECRETFILE=/run/secrets/wireguard_preshared_key AMNEZIAWG_PUBLIC_KEY= AMNEZIAWG_ALLOWED_IPS= AMNEZIAWG_PERSISTENT_KEEPALIVE_INTERVAL=0 AMNEZIAWG_ADDRESSES= AMNEZIAWG_ADDRESSES_SECRETFILE=/run/secrets/wireguard_addresses AMNEZIAWG_MTU= AMNEZIAWG_JC=0 AMNEZIAWG_JMIN=0 AMNEZIAWG_JMAX=0 AMNEZIAWG_S1=0 AMNEZIAWG_S2=0 AMNEZIAWG_S3=0 AMNEZIAWG_S4=0 AMNEZIAWG_H1= AMNEZIAWG_H2= AMNEZIAWG_H3= AMNEZIAWG_H4= AMNEZIAWG_I1= AMNEZIAWG_I2= AMNEZIAWG_I3= AMNEZIAWG_I4= AMNEZIAWG_I5= VPN_PORT_FORWARDING=off VPN_PORT_FORWARDING_PROVIDER= VPN_PORT_FORWARDING_UP_COMMAND= VPN_PORT_FORWARDING_DOWN_COMMAND= VPN_PORT_FORWARDING_LISTENING_PORTS=0 VPN_PORT_FORWARDING_PORTS_COUNT=1 VPN_PORT_FORWARDING_STATUS_FILE=/tmp/gluetun/forwarded_port PMTUD_ICMP_ADDRESSES=1.1.1.1,8.8.8.8 PMTUD_TCP_ADDRESSES=1.1.1.1:443,8.8.8.8:443,1.1.1.1:53,8.8.8.8:53,[2606:4700:4700::1111]:53,[2001:4860:4860::8888]:53,[2606:4700:4700::1111]:443,[2001:4860:4860::8888]:443 SERVER_SELECTION_MODE=random SERVER_REGIONS= SERVER_COUNTRIES= SERVER_CITIES= SERVER_HOSTNAMES= SERVER_CATEGORIES= ISP= OWNED_ONLY=no PRIVATE_INTERNET_ACCESS_OPENVPN_ENCRYPTION_PRESET= VPN_PORT_FORWARDING_USERNAME= VPN_PORT_FORWARDING_PASSWORD= OPENVPN_CERT= OPENVPN_KEY= OPENVPN_CLIENTCRT_SECRETFILE=/run/secrets/openvpn_clientcrt OPENVPN_CLIENTKEY_SECRETFILE=/run/secrets/openvpn_clientkey OPENVPN_ENCRYPTED_KEY= OPENVPN_ENCRYPTED_KEY_SECRETFILE=/run/secrets/openvpn_encrypted_key OPENVPN_KEY_PASSPHRASE= OPENVPN_KEY_PASSPHRASE_SECRETFILE=/run/secrets/openvpn_key_passphrase SERVER_NUMBER= SERVER_NAMES= STREAM_ONLY= FREE_ONLY= SECURE_CORE_ONLY= TOR_ONLY= MULTIHOP_ONLY= PREMIUM_ONLY= PORT_FORWARD_ONLY= FIREWALL_ENABLED_DISABLING_IT_SHOOTS_YOU_IN_YOUR_FOOT=on FIREWALL_VPN_INPUT_PORTS= FIREWALL_INPUT_PORTS= FIREWALL_OUTBOUND_SUBNETS= FIREWALL_IPTABLES_LOG_LEVEL=info IPV6_CHECK_ADDRESSES=[2001:4860:4860::8888]:53,[2606:4700:4700::1111]:53 LOG_LEVEL=info HEALTH_SERVER_ADDRESS=127.0.0.1:9999 HEALTH_TARGET_ADDRESSES=cloudflare.com:443,github.com:443 HEALTH_ICMP_TARGET_IPS=1.1.1.1,8.8.8.8 HEALTH_SMALL_CHECK_TYPE=icmp HEALTH_RESTART_VPN=on METRICS_TYPE=noop METRICS_PROMETHEUS_LISTENING_ADDRESS=:9090 DNS_SERVER=on DNS_UPSTREAM_RESOLVER_TYPE=DoT DNS_UPSTREAM_RESOLVERS= DNS_BLOCK_IPS= DNS_BLOCK_IP_PREFIXES= DNS_CACHING=on DNS_UPSTREAM_IPV6=off BLOCK_MALICIOUS=on BLOCK_ADS=off DNS_UNBLOCK_HOSTNAMES= DNS_REBINDING_PROTECTION_EXEMPT_HOSTNAMES= DNS_UPDATE_PERIOD=24h DNS_UPSTREAM_PLAIN_ADDRESSES= DNS_PUBLIC_NAMES_AS_LOCAL= DNS_PUBLIC_NAMESERVER_CIDRS_AS_LOCAL= HTTPPROXY= HTTPPROXY_LOG=off HTTPPROXY_LISTENING_ADDRESS=:8888 HTTPPROXY_STEALTH=off HTTPPROXY_USER= HTTPPROXY_PASSWORD= HTTPPROXY_USER_SECRETFILE=/run/secrets/httpproxy_user HTTPPROXY_PASSWORD_SECRETFILE=/run/secrets/httpproxy_password SHADOWSOCKS=off SHADOWSOCKS_LOG=off SHADOWSOCKS_LISTENING_ADDRESS=:8388 SHADOWSOCKS_PASSWORD= SHADOWSOCKS_PASSWORD_SECRETFILE=/run/secrets/shadowsocks_password SHADOWSOCKS_CIPHER=chacha20-ietf-poly1305 SOCKS5_ENABLED=off SOCKS5_LISTENING_ADDRESS=:1080 SOCKS5_USER= SOCKS5_PASSWORD= HTTP_CONTROL_SERVER_LOG=on HTTP_CONTROL_SERVER_ADDRESS=:8000 HTTP_CONTROL_SERVER_AUTH_CONFIG_FILEPATH=/gluetun/auth/config.toml HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE={} UPDATER_PERIOD=0 UPDATER_MIN_RATIO=0.8 UPDATER_VPN_SERVICE_PROVIDERS= UPDATER_PREFER_DIRECT_DOWNLOAD=no UPDATER_PROTONVPN_EMAIL= UPDATER_PROTONVPN_PASSWORD= UPDATER_PROTONVPN_TOTP_SECRET= PUBLICIP_FILE=/tmp/gluetun/ip PUBLICIP_ENABLED=on PUBLICIP_API=ipinfo,ifconfigco,ip2location,cloudflare PUBLICIP_API_TOKEN= STORAGE_SERVERS_ENABLED=on STORAGE_SERVERS_DIRECTORY_PATH=/gluetun/servers/ PPROF_ENABLED=no PPROF_BLOCK_PROFILE_RATE=0 PPROF_MUTEX_PROFILE_RATE=0 PPROF_HTTP_SERVER_ADDRESS=:6060 VERSION_INFORMATION=on TZ= PUID=1000 PGID=1000 |
| ENTRYPOINT ["/gluetun-entrypoint"] |
| EXPOSE [1080/tcp 1080/udp 8000/tcp 8388/tcp 8388/udp 8888/tcp] |
| HEALTHCHECK {Test:[CMD-SHELL /gluetun-entrypoint healthcheck] Interval:5s Timeout:5s StartPeriod:10s StartInterval:0s Retries:3} |
| ARG TARGETPLATFORM=linux/amd64 |
| RUN |4 VERSION=latest CREATED=2026-09-23T23:02:31.234Z COMMIT=1267bae TARGETPLATFORM=linux/amd64 /bin/sh -c apk add --no-cache --update -l wget && apk add --no-cache --update -X "https://dl-cdn.alpinelinux.org/alpine/v3.17/main" openvpn\~2.5 && mv /usr/sbin/openvpn /usr/sbin/openvpn2.5 && apk del openvpn && apk add --no-cache --update openvpn ca-certificates iptables iptables-legacy tzdata && mv /usr/sbin/openvpn /usr/sbin/openvpn2.6 && rm -rf /var/cache/apk/* /etc/openvpn/*.sh /usr/lib/openvpn/plugins/openvpn-plugin-down-root.so && deluser openvpn && mkdir /gluetun # buildkit |
| COPY /tmp/gobuild/entrypoint /gluetun-entrypoint # buildkit |
Labels
| Key | Value |
|---|---|
| org.opencontainers.image.authors | quentin.mcgaw@gmail.com |
| org.opencontainers.image.created | 2026-09-23T23:02:31.234Z |
| org.opencontainers.image.description | VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in. |
| org.opencontainers.image.documentation | https://github.com/passteque/gluetun |
| org.opencontainers.image.licenses | MIT |
| org.opencontainers.image.revision | 1267bae7d4b3043957d931c0c3dc0bbd88737b8e |
| org.opencontainers.image.source | https://github.com/passteque/gluetun |
| org.opencontainers.image.title | gluetun |
| org.opencontainers.image.url | https://github.com/passteque/gluetun |
| org.opencontainers.image.version | latest |