graze logo

snack overflow

by the graze technology teams

We’ve just released a public Docker image for composer, a popular dependency management tool for PHP.

Get it now with docker pull graze/composer, or check it out on the Docker Hub.

To share cache and authentication with your host you can use the following configuration:

~$ docker run --rm -it \
     -v $(pwd):/usr/src/app \
     -v ~/.composer:/root/.composer \
     -v ~/.ssh/id_rsa:/root/.ssh/id_rsa:ro \
     -v ~/.ssh/known_hosts:/root/.ssh/known_hosts:ro \
     graze/composer

Previously we’ve been using the semi-official image composer/composer, but have found it to be too large and infrequently updated, important when security issues like the latest cache injection vulnerability are found.

The image comes in at just over 88 MB, based off Alpine 3.3, and is built daily using a hook.io “microservice”.