This is an automated archive made by the Lemmit Bot.
The original was posted on /r/selfhosted by /u/ElevenNotes on 2025-07-04 13:31:23+00:00.
DISCLAIMER FOR REDDIT USERS โ ๏ธ
- You'll find the source code for the image on my github repo: 11notes/adguard or at the end of this post
- You can debug distroless containers. Check my RTFM/distroless for an example on how easily this can be done
- If you prefer the original image or any other image provider, that is fine, it is your choice and as long as you are happy, I am happy
- No, I don't plan to make a PR to the original image, because that PR would be huge and require a lot of effort and I have other stuff to attend to than to fix everyones Docker images
- No AI was used to write this post or to write the code for my images! The README.md is generated by my own github action based on the project.md template, there is no LLM involved, even if you hate emojis
INTRODUCTION ๐ข
AdGuard Home is a network-wide software for blocking ads and tracking. After you set it up, it'll cover all your home devices, and you won't need any client-side software for that.
SYNOPSIS ๐
What can I do with this? This image will run AdGuard-Home rootless and distroless, for maximum security and performance.
UNIQUE VALUE PROPOSITION ๐ถ
Why should I run this image and not the other image(s) that already exist? Good question! Because ...
- ... this image runs rootless as 1000:1000
- ... this image has no shell since it is distroless
- ... this image has a health check
- ... this image runs read-only
- ... this image is automatically scanned for CVEs before and after publishing
- ... this image is created via a secure and pinned CI/CD process
- ... this image is very small
If you value security, simplicity and optimizations to the extreme, then this image might be for you.
COMPARISON ๐
Below you find a comparison between this image and the most used or original one.
| image | 11notes/adguard:0.107.63 | adguard/adguardhome:latest | |
|
|
| | image size on disk | 15.2MB | 74.2MB | | process UID/GID | 1000/1000 | 0/0 | | distroless? | โ | โ | | rootless? | โ | โ |
VOLUMES ๐
- /adguard/etc - Directory of the configuration file
- /adguard/var - Directory of database and query log files
COMPOSE โ๏ธ
name: "adguard"
services:
adguard:
image: "11notes/adguard:0.107.63"
read\_only: true
environment:
TZ: "Europe/Zurich"
volumes:
- "etc:/adguard/etc"
- "var:/adguard/var"
tmpfs:
# tmpfs volume because of read\_only: true
- "/adguard/run:uid=1000,gid=1000"
ports:
- "53:53/udp"
- "53:53/tcp"
- "3000:3000/tcp"
networks:
frontend:
sysctls:
# allow rootless container to access ports < 1024
net.ipv4.ip\_unprivileged\_port\_start: 53
restart: "always"
volumes:
etc:
var:
networks:
frontend: