Ory Hydra is a hardened and certified OAuth 2.0 and OpenID Connect provider.
10K+
ubuntu/hydra is a rock for hydra maintained by Canonical.
Ory Hydra is a hardened, OpenID Certified OAuth 2.0 Server and OpenID Connect Provider optimized for low-latency, high throughput, and low resource consumption. Ory Hydra enables you to become an OAuth 2.0 and OpenID Connect provider. If you're not writing a basic web app but something that has to work on different devices, that has machine-2-machine interaction, or enables third-party developers to use your API (and pay for it), then this is what you're looking for.
NOTE: These tags follow a specific naming convention that respects the concept of channels.
| Tags | Supported until | Version | Base | Architectures | |
|---|---|---|---|---|---|
25-22.04_stable | aliases25-22.04, 25-22.04_beta, 25-22.04_candidate, 25-22.04_edge | 07/2026 | 25 | 22.04 | amd64 |
2-22.04_stable | aliases2-22.04, 2-22.04_beta, 2-22.04_candidate, 2-22.04_edge | 06/2026 | 2 | 22.04 | amd64 |
26-22.04_stable | aliases26-22.04, 26-22.04_beta, 26-22.04_candidate, 26-22.04_edge | 09/2026 | 26 | 22.04 | amd64 |
| Tags | Support ended on | Upgrade Path | |
|---|---|---|---|
2canonical-22.04_stable | aliases2canonical-22.042canonical-22.04_beta2canonical-22.04_candidate2canonical-22.04_edge | 05/2025 | - |
2.2.0-22.04_stable | aliases2.2.0-22.042.2.0-22.04_beta2.2.0-22.04_candidate2.2.0-22.04_edge | 05/2025 | - |
This rock's entrypoint is Pebble, a container-optimized init process that enables the orchestration of a collection of local service processes as an organized set.
To view the Pebble services and checks defined in this rock:
docker run --rm ubuntu/hydra:2canonical-22.04_stable plan
To run this rock, use any of the usual container runtimes, for example, docker:
docker run --name hydra-container \
-p 4444:4444 -p 4445:4445 \
ubuntu/hydra:2canonical-22.04_stable
Access the Hydra Public API at http://localhost:4444, Admin API at http://localhost:4445.
To view the logs of the running container, run:
docker exec hydra-container pebble logs
Or, for a specific service:
docker exec hydra-container pebble logs <service>
Rocks may have predefined health checks that you can list by running:
docker exec hydra-container pebble checks
The overall health of your container can be inspected via:
docker exec hydra-container pebble health
| Option | Description | Default |
|---|---|---|
| TRACING_ENABLED | Tracing enablement, e.g., true. | None |
| TRACING_PROVIDER | Tracing protocol to be used, e.g., otel. | None |
| TRACING_PROVIDERS_OTLP_INSECURE | Allow Tracing via non TLS/insecure communication, e.g., true. | None |
| TRACING_PROVIDERS_OTLP_SAMPLING_SAMPLING_RATIO | Tracing sampling ratio, e.g., 1.0. | None |
| TRACING_PROVIDERS_OTLP_SERVER_URL | Tracing server url and port, e.g., tempo.server.io:4318. | None |
| Option | Description | Default |
|---|---|---|
-v <path>:/hydra.yaml | Hydra config contains all the information needed to successfully configure it as an OIDC Provider, see https://github.com/ory/hydra/blob/master/internal/config/config.yaml as a reference | None |
| Option | Description | Default |
|---|---|---|
-p <port>:4444 | Expose Hydra Public API port 4444 on the host's <port>. | None |
-p <port>:4445 | Expose Hydra Admin API port 4445 on the host's <port> . | None |
| Option | Description | Default |
|---|---|---|
--args hydra -- serve all --config /hydra.yaml | Launch Hydra web server(s) using a mix of environment variables and the config mounted via volume. | None |
Canonical is the provider of this container image. It is the user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within, as well as with Canonical’s IP Policy.
Content type
Image
Digest
sha256:386175c2d…
Size
19.2 MB
Last updated
about 1 month ago
docker pull ubuntu/hydra:26-22.04_stablePulls:
75
Last week