Ory Kratos is an Identity and User Management system.
10K+
ubuntu/kratos is a rock for kratos maintained by Canonical.
Kratos is the developer-friendly, security-hardened and battle-tested identity, User Management and Authentication system for the Cloud.
The identity management server Ory Kratos enables you to implement user management, login and registration in a secure and straightforward way. Don't rewrite every aspect of identity management yourself. Ory Kratos implements all common flows such as login and logout, account activation, mfa/2fa, profile and session management, user facing errors and account recovery methods. Just spin up a docker image and write a simple UI for it in the language or framework of your choice.
NOTE: These tags follow a specific naming convention that respects the concept of channels.
| Tags | Supported until | Version | Base | Architectures | |
|---|---|---|---|---|---|
26-22.04_stable | aliases26-22.04, 26-22.04_beta, 26-22.04_candidate, 26-22.04_edge | 08/2026 | 26 | 22.04 | amd64 |
1-22.04_stable | aliases1-22.04, 1-22.04_beta, 1-22.04_candidate, 1-22.04_edge | 06/2026 | 1 | 22.04 | amd64 |
25-22.04_stable | aliases25-22.04, 25-22.04_beta, 25-22.04_candidate, 25-22.04_edge | 07/2026 | 25 | 22.04 | amd64 |
| Tags | Support ended on | Upgrade Path | |
|---|---|---|---|
1.1.0-22.04_stable | aliases1.1.0-22.041.1.0-22.04_beta1.1.0-22.04_candidate1.1.0-22.04_edge | 05/2025 | - |
This rock's entrypoint is Pebble, a container-optimized init process that enables the orchestration of a collection of local service processes as an organized set.
To view the Pebble services and checks defined in this rock:
docker run --rm ubuntu/kratos:1.1.0-22.04_stable plan
To run this rock, use any of the usual container runtimes, for example, docker:
docker run --name kratos-container \
-p 4433:4433 -p 4434:4434 \
ubuntu/kratos:1.1.0-22.04_stable
Access the Kratos public API at http://localhost:4433 and the admin API at http://localhost:4434.
To view the logs of the running container, run:
docker exec kratos-container pebble logs
Or, for a specific service:
docker exec kratos-container pebble logs <service>
Rocks may have predefined health checks that you can list by running:
docker exec kratos-container pebble checks
The overall health of your container can be inspected via:
docker exec kratos-container pebble health
| Option | Description | Default |
|---|---|---|
| TRACING_ENABLED | Tracing enablement, e.g., true. | None |
| TRACING_PROVIDER | Tracing protocol to be used, e.g., otel. | None |
| TRACING_PROVIDERS_OTLP_INSECURE | Allow tracing via non TLS insecure communication, e.g., true. | None |
| TRACING_PROVIDERS_OTLP_SAMPLING_SAMPLING_RATIO | Tracing sampling ratio, e.g., 1.0. | None |
| TRACING_PROVIDERS_OTLP_SERVER_URL | Tracing server URL and port, e.g., tempo.server.io:4318. | None |
| SERVE_PUBLIC_BASE_URL | Public URL Kratos will be served from, e.g., https://kratos.io/dev/path. | None |
| DSN | Database connection string for PostgreSQL database, e.g., postgres://user:pass@postgresql:5432/db. | None |
| HTTPS_PROXY | HTTPS proxy used in air-gapped environments. | None |
| HTTP_PROXY | HTTP proxy used in air-gapped environments. | None |
| NO_PROXY | Domain that needs to be excluded from the proxy, used in air-gapped environments. | None |
| Option | Description | Default |
|---|---|---|
-v <path>:/kratos.yaml | Kratos config with settings needed to configure it as an OIDC provider. See https://www.ory.sh/docs/kratos/reference/configuration as a reference. | None |
| Option | Description | Default |
|---|---|---|
-p <port>:4433 | Expose port 4433 on the host. | None |
-p <port>:4434 | Expose port 4434 on the host. | None |
| Option | Description | Default |
|---|---|---|
kratos serve all --config /kratos.yaml | Launch Kratos web servers using environment variables and the mounted config. | None |
Canonical is the provider of this container image. It is the user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within, as well as with Canonical’s IP Policy.
Content type
Image
Digest
sha256:a45d93ba0…
Size
22.9 MB
Last updated
2 months ago
docker pull ubuntu/kratos:26-22.04_stablePulls:
58
Last week