ubuntu/kratos

Verified Publisher

By Canonical

Updated 2 months ago

Ory Kratos is an Identity and User Management system.

Image
Integration & delivery
1

10K+

ubuntu/kratos repository overview

ubuntu/kratos is a rock for kratos maintained by Canonical.

Kratos is the developer-friendly, security-hardened and battle-tested identity, User Management and Authentication system for the Cloud.

The identity management server Ory Kratos enables you to implement user management, login and registration in a secure and straightforward way. Don't rewrite every aspect of identity management yourself. Ory Kratos implements all common flows such as login and logout, account activation, mfa/2fa, profile and session management, user facing errors and account recovery methods. Just spin up a docker image and write a simple UI for it in the language or framework of your choice.

[Learn more about kratos]

Tags and Architectures

NOTE: These tags follow a specific naming convention that respects the concept of channels.

TagsSupported untilVersionBaseArchitectures
26-22.04_stable
aliases26-22.04, 26-22.04_beta, 26-22.04_candidate, 26-22.04_edge
08/20262622.04amd64
1-22.04_stable
aliases1-22.04, 1-22.04_beta, 1-22.04_candidate, 1-22.04_edge
06/2026122.04amd64
25-22.04_stable
aliases25-22.04, 25-22.04_beta, 25-22.04_candidate, 25-22.04_edge
07/20262522.04amd64
View deprecated tags
TagsSupport ended onUpgrade Path
1.1.0-22.04_stable
aliases1.1.0-22.04, 1.1.0-22.04_beta, 1.1.0-22.04_candidate, 1.1.0-22.04_edge
05/2025 -

Get started

This rock's entrypoint is Pebble, a container-optimized init process that enables the orchestration of a collection of local service processes as an organized set.

[Learn more about Pebble]

Inspect

To view the Pebble services and checks defined in this rock:

docker run --rm ubuntu/kratos:1.1.0-22.04_stable plan
Run

To run this rock, use any of the usual container runtimes, for example, docker:

docker run --name kratos-container \
    -p 4433:4433 -p 4434:4434 \
    ubuntu/kratos:1.1.0-22.04_stable

Access the Kratos public API at http://localhost:4433 and the admin API at http://localhost:4434.

Get logs

To view the logs of the running container, run:

docker exec kratos-container pebble logs

Or, for a specific service:

docker exec kratos-container pebble logs <service>
Monitor health checks

Rocks may have predefined health checks that you can list by running:

docker exec kratos-container pebble checks

The overall health of your container can be inspected via:

docker exec kratos-container pebble health

Configuration

Environment variables
OptionDescriptionDefault
TRACING_ENABLEDTracing enablement, e.g., true.None
TRACING_PROVIDERTracing protocol to be used, e.g., otel.None
TRACING_PROVIDERS_OTLP_INSECUREAllow tracing via non TLS insecure communication, e.g., true.None
TRACING_PROVIDERS_OTLP_SAMPLING_SAMPLING_RATIOTracing sampling ratio, e.g., 1.0.None
TRACING_PROVIDERS_OTLP_SERVER_URLTracing server URL and port, e.g., tempo.server.io:4318.None
SERVE_PUBLIC_BASE_URLPublic URL Kratos will be served from, e.g., https://kratos.io/dev/path.None
DSNDatabase connection string for PostgreSQL database, e.g., postgres://user:pass@postgresql:5432/db.None
HTTPS_PROXYHTTPS proxy used in air-gapped environments.None
HTTP_PROXYHTTP proxy used in air-gapped environments.None
NO_PROXYDomain that needs to be excluded from the proxy, used in air-gapped environments.None
Volumes
OptionDescriptionDefault
-v <path>:/kratos.yamlKratos config with settings needed to configure it as an OIDC provider. See https://www.ory.sh/docs/kratos/reference/configuration as a reference.None
Ports
OptionDescriptionDefault
-p <port>:4433Expose port 4433 on the host.None
-p <port>:4434Expose port 4434 on the host.None
Application parameters
OptionDescriptionDefault
kratos serve all --config /kratos.yamlLaunch Kratos web servers using environment variables and the mounted config.None

[Report a bug] [Contribute]

Canonical is the provider of this container image. It is the user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within, as well as with Canonical’s IP Policy.

Tag summary

Content type

Image

Digest

sha256:a45d93ba0

Size

22.9 MB

Last updated

2 months ago

docker pull ubuntu/kratos:26-22.04_stable

This week's pulls

Pulls:

58

Last week