TIP

Original: View on authzed.com
中文版: 查看中文版

Installing SpiceDB with Docker

This document outlines how to install SpiceDB for systems running Docker or similar container runtimes.

Docker Image Registries

Every release of SpiceDB publishes AMD64 and ARM64 images to multiple public registries:

• authzed/spicedb (Docker Hub)
• ghcr.io/authzed/spicedb (GitHub)
• quay.io/authzed/spicedb (Quay)

INFO

While the SpiceDB image on Docker Hub has millions of downloads, for production usage it is recommended to push a copy of the SpiceDB image to your own registry to avoid any outages or rate-limits impacting your deployment.

Pulling the Latest SpiceDB Docker Image

You can install the latest version of SpiceDB using the standard pull command:

docker pull authzed/spicedb:latest

WARNING

Production deployments should never use the latest tag. Instead, opt for a tag referencing a specific release. For automated upgrades, consider deploying the SpiceDB Operator.

Pulling the Latest SpiceDB Debug Image

By default, SpiceDB images are based on Chainguard Images to remain minimal and secure. However, this can complicate debugging since no tools are included in the image.

If you need to execute a user session into a running SpiceDB container and install packages for debugging, use the debug image:

docker pull authzed/spicedb:latest-debug

Every release of SpiceDB has a corresponding debug image. Add -debug to any release tag to pull it.