[{"_1":2,"_176":-5,"_177":-5},"loaderData",{"_3":4,"_18":19,"_26":27,"_164":165},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16,"_17":11},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","dockerRebrandTour","routes/_layout",{"_20":-5,"_21":22,"_23":22,"_24":11,"_25":22},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.layers.$namespace.$reponame.$tag.(images).($imageUrlDigest)",{"_28":29,"_30":31,"_83":84,"_100":-7,"_101":-7,"_102":-7,"_103":-7,"_104":-5,"_105":-5,"_106":11,"_107":11,"_77":108,"_155":22,"_125":126,"_156":124,"_157":76,"_36":47,"_158":11,"_159":22,"_160":49,"_161":-5,"_162":11,"_163":11},"scanningType","none","tagData",{"_32":33,"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_68":69,"_70":35,"_71":72,"_73":74,"_75":76,"_77":78,"_79":65,"_80":69,"_81":60,"_82":22},"content_type","image","creator",936126,"digest","sha256:dfc9a89c237b1a03890377b43ec0aa570b7f3c23e8da262cf1299be5d2de56f8","full_size",122431344,"id",1040591458,"images",[44,62],{"_45":46,"_36":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":49,"_57":-5,"_58":39,"_59":60,"_61":-5},"architecture","amd64","sha256:643717491a66d31aae8846dc4a2f0acfb54c020c616497b1504650f1fc50b702","features","","last_pulled","2026-10-22T04:55:27.183852497Z","last_pushed","2026-10-21T08:32:20.039015747Z","os","linux","os_features","os_version","size","status","active","variant",{"_45":63,"_36":64,"_48":49,"_50":65,"_52":66,"_54":55,"_56":49,"_57":-5,"_58":67,"_59":60,"_61":-5},"arm64","sha256:4564f2532f501ee4add380ec98e9c598913c9c8bd6b4485334a8128f87222644","2026-10-22T04:55:28.197042379Z","2026-10-21T08:32:30.008748492Z",110650131,"last_updated","2026-10-21T08:32:47.375393Z","last_updater","last_updater_username","linuxserverci","media_type","application/vnd.docker.distribution.manifest.list.v2+json","name","universal-docker-in-docker-2c511d5b33d00d4644cc3c88f1d71e8d695e6b82","repository",8415271,"tag_last_pulled","tag_last_pushed","tag_status","v2","tagImages",[85,95],{"_45":46,"_36":47,"_48":49,"_50":51,"_52":53,"_86":87,"_54":55,"_56":49,"_57":-5,"_58":39,"_59":60,"_61":-5},"layers",[88,92],{"_58":89,"_90":91,"_36":49},0,"instruction","LABEL maintainer=aptalca",{"_36":93,"_58":39,"_90":94},"sha256:edefa202be6b21a5cabfe700bd918a78251d3ec2f975ef822bf284771c8434ad","COPY /root-layer/ / # buildkit",{"_45":63,"_36":64,"_48":49,"_50":65,"_52":66,"_86":96,"_54":55,"_56":49,"_57":-5,"_58":67,"_59":60,"_61":-5},[97,98],{"_58":89,"_90":91,"_36":49},{"_36":99,"_58":67,"_90":94},"sha256:ea2d38e3b604b9859978e6db508c85854f9f638460388fa74b5235cfd143bd95","layerOrdinals","packageName","cveId","sbom","scoutSummary","staticSummary","isScoutPaymentRequired","canSeeVulnerabilities",{"_109":110,"_111":112,"_113":114,"_115":49,"_116":11,"_68":117,"_118":119,"_120":121,"_75":124,"_125":126,"_127":128,"_129":33,"_130":131,"_59":132,"_133":60,"_134":-5,"_135":89,"_136":137,"_138":11,"_139":126,"_140":141,"_146":11,"_147":148,"_152":126,"_153":154},"categories",[],"content_types",[33],"date_registered","2020-02-02T22:39:50.312211Z","description","is_private","2026-10-22T05:54:52.840222Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[122,74,123],"application/vnd.docker.container.image.v1+json","application/vnd.oci.image.index.v1+json","mods","namespace","linuxserver","pull_count",2568518,"repository_type","star_count",28,1,"status_description","source","collaborator_count","full_description","# Intro\n\nThe purpose of the repository is to provide examples and guidance in creating and storing a user consumable modification layer for the Library of Linuxserver.io Containers.\nAt its core a Docker Mod is a tarball of files stored on Dockerhub and/or GitHub Container Registry that is downloaded and extracted on container boot before any init logic is run.\nThis allows:\n\n* Developers and community users to modify base containers to suit their needs without the need to maintain a fork of the main docker repository\n* Mods to be shared with the Linuxserver.io userbase as individual independent projects with their own support channels and development ideologies\n* Zero cost hosting and build pipelines for these modifications leveraging GitHub Container Registry and Dockerhub\n* Full custom configuration management layers for hooking containers into each other using environment variables contained in a compose file\n\nIt is important to note to end users of this system that there are not only extreme security implications to consuming files from sources outside of our control, but by leveraging community Mods you essentially lose direct support from the core LinuxServer team. Our first and foremost troubleshooting step will be to remove the `DOCKER_MODS` environment variable when running into issues and replace the container with a clean LSIO one.\n\nAgain, when pulling in logic from external sources practice caution and trust the sources/community you get them from.\n\n## LinuxServer.io Hosted Mods\n\nWe host and publish official Mods at the [linuxserver/mods](https://github.com/orgs/linuxserver/packages/container/mods/versions) endpoint as separate tags. Each tag is in the format of `-` for the latest versions, and `--` for the specific versions.\n\nHere's a list of the official Mods we host: [https://mods.linuxserver.io/](https://mods.linuxserver.io/)\n\n## Using a Docker Mod\n\nBefore consuming a Docker Mod ensure that the source code for it is publicly posted along with its build pipeline pushing to Dockerhub.\n\nConsumption of a Docker Mod is intended to be as user friendly as possible and can be achieved with the following environment variables being passed to the container:\n\n* DOCKER_MODS- This can be a single endpoint `user/endpoint:tag` or an array of endpoints separated by `|` `user/endpoint:tag|user2/endpoint2:tag`\n* RUN_BANNED_MODS- If this is set to any value you will bypass our centralized filter of banned Dockerhub users and run Mods regardless of a ban\n\nFull example:\n\ndocker run\n\n```bash\ndocker create \\\n --name=nzbget \\\n -e DOCKER_MODS=lscr.io/linuxserver/mods:universal-tshoot \\\n -e PUID=1000 \\\n -e PGID=1000 \\\n -e TZ=Europe/London \\\n -p 6789:6789 \\\n -v /path/to/nzbget/data:/config \\\n -v /path/to/downloads:/downloads \\\n --restart unless-stopped \\\n lscr.io/linuxserver/nzbget\n```\n\n docker compose\n\n```yaml\n---\nservices:\n nzbget:\n image: lscr.io/linuxserver/nzbget:latest\n container_name: nzbget\n environment:\n - DOCKER_MODS=lscr.io/linuxserver/mods:universal-tshoot\n - PUID=1000\n - PGID=1000\n - TZ=Europe/London\n volumes:\n - /path/to/nzbget/data:/config\n - /path/to/downloads:/downloads #optional\n ports:\n - 6789:6789\n restart: unless-stopped\n```\n\nThis will spin up an nzbget container and apply the custom logic found in the following repository:\n\n[https://github.com/linuxserver/docker-mods/tree/universal-tshoot](https://github.com/linuxserver/docker-mods/tree/universal-tshoot)\n\nThis mod installs some basic troubleshooting tools such as dig, netstat, nslookup, etc.\n\n## Creating and maintaining a Docker Mod\n\n**All of the example files referenced in this section are available in the [template](https://github.com/linuxserver/docker-mods/tree/template) branch of this repo.**\n\nWe will always recommend to our users consuming Mods that they leverage ones from active community members or projects so transparency is key here. We understand that image layers can be pushed on the back end behind these pipelines, but every little bit helps. In this repository we will be going over two basic methods of making a Mod along with an example of the GitHub Actions build logic to get this into a Dockerhub and/or GitHub Container Registry endpoint. Though we are not officially endorsing GitHub Actions here it is built in to GitHub repositories and forks making it very easy to get started. If you prefer others feel free to use them as long as build jobs are transparent.\n\n> **Note**\n> One of the core ideas to remember when creating a Mod is that it can only contain a **single image layer**, the examples below will show you how to add files standardly and how to run complex logic to assemble the files in a build layer to copy them over into this single layer.\n\n### Mod Types\n\nWe now only support s6 v3 mods. All currently supported Linuxserver base images are using s6 v3, however, older pinned images, forked versions, etc. may still be using v2. New mods will not work with older s6 v2 based images.\n\n### Docker Mod Simple - just add scripts\n\nIn this repository you will find the `Dockerfile` containing:\n\n```Dockerfile\nFROM scratch\n\n# copy local files\nCOPY root/ /\n```\n\nFor most users this will suffice and anything in the root/ folder of the repository will be added to the end users Docker container / path.\n\n#### New (v3) mods\n\nThe most common paths to leverage for Linuxserver images are as follows. Assuming a mod name of `universal-mymod`:\n\n```text\n.\n└── root\n ├── defaults -- Any default config files you need to copy as part of the mod can be placed here\n └── etc\n └── s6-overlay\n └── s6-rc.d\n ├── init-mods-end\n │ └── dependencies.d\n │ └── init-mod-universal-mymod -- If your mod does not need to install packages it should be a dependency of init-mods-end (empty file)\n ├── init-mods-package-install\n │ └── dependencies.d\n │ └── init-mod-universal-mymod -- If your mod needs to install packages it should be a dependency of init-mods-package-install (empty file)\n ├── init-mod-universal-mymod\n │ ├── dependencies.d\n │ │ └── init-mods -- Tells our init logic that this depends on the `init-mods` step (empty file)\n │ ├── run -- This is the init logic script that runs before the services in the container. Use `chmod +x` to set proper permissions.\n │ ├── type -- This should contain the string `oneshot`.\n │ └── up -- This should contain the absolute path to `run` e.g. `/etc/s6-overlay/s6-rc.d/init-mod-universal-mymod/run`.\n ├── svc-mod-universal-mymod\n │ ├── dependencies.d\n │ │ └── init-services -- Tells our init logic that this depends on the `init-services` step (empty file)\n │ ├── run -- This is the script that runs in the foreground for persistent services. Use `chmod +x` to set proper permissions.\n │ └── type -- This should contain the string `longrun`.\n └── user\n └── contents.d\n ├── init-mod-universal-mymod -- Tells our init logic that we need this directory (empty file)\n └── svc-mod-universal-mymod -- Tells our init logic that we need this directory (empty file)\n```\n\n> **Note**\n> For `oneshot` scripts you can alternatively omit the `run` file entirely and use the [execlineb](https://skarnet.org/software/execline/execlineb.html) syntax in `up` if your requirements are simple enough.\n\n#### Installing Packages\n\nv3 mods make use of a single package install process for all mods to minimise the amount of calls to external endpoints and speed up the mod init process. If you need to install repo packages you should append them to `/mod-repo-packages-to-install.list` for repo packages or `/mod-pip-packages-to-install.list` for pip packages and the mod handler will install them for you. Make sure to handle both Ubuntu and Alpine package names if your mod needs to support both e.g.\n\n```bash\n#!/usr/bin/with-contenv bash\n\n## Ubuntu\nif [ -f /usr/bin/apt ]; then\n echo \"\\\n dnsutils \\\n net-tools \\\n iputils-ping \\\n traceroute\" >> /mod-repo-packages-to-install.list\n\nfi\n# Alpine\nif [ -f /sbin/apk ]; then\n echo \"\\\n bind-tools \\\n net-tools\" >> /mod-repo-packages-to-install.list\nfi\n```\n\nIf your mod needs to take additional config steps *after* the packages have been installed, add a second `oneshot` script and make it depend on `init-mods-package-install`, add it as a dependency of `init-mods-end`, and add it to the content bundle e.g.\n\n```text\n.\n└── root\n └── etc\n └── s6-overlay\n └── s6-rc.d\n ├── init-mods-end\n │ └── dependencies.d\n │ └── init-mod-universal-mymod-postinstall\n ├── init-mod-universal-mymod-postinstall\n │ ├── dependencies.d\n │ │ └── init-mods-package-install\n │ ├── run\n │ ├── type\n │ └── up\n └── user\n └── contents.d\n └── init-mod-universal-mymod-postinstall\n```\n\nServices will always run last, controlled by their dependency on `init-services`.\n\n### Docker Mod Complex - Sky is the limit\n\nIn this repository you will find the `Dockerfile.complex` containing:\n\n```Dockerfile\n## Buildstage ##\nFROM ghcr.io/linuxserver/baseimage-alpine:3.20 as buildstage\n\nRUN \\\n echo \"**** install packages ****\" && \\\n apk add --no-cache \\\n curl && \\\n echo \"**** grab rclone ****\" && \\\n mkdir -p /root-layer && \\\n curl -o \\\n /root-layer/rclone.deb -L \\\n \"https://downloads.rclone.org/v1.47.0/rclone-v1.47.0-linux-amd64.deb\"\n\n# copy local files\nCOPY root/ /root-layer/\n\n## Single layer deployed image ##\nFROM scratch\n\n# Add files from buildstage\nCOPY --from=buildstage /root-layer/ /\n```\n\nHere we are leveraging a multi stage DockerFile to run custom logic and pull down an rclone deb from the Internet to include in our image layer for distribution. Any amount of logic can be run in this build stage or even multiple build stages as long as the files in the end are combined into a single folder for the COPY command in the final output.\n\n## Getting a Mod to Dockerhub\n\nTo publish a Mod to DockerHub you will need the following accounts:\n\n* Github- [https://github.com/join](https://github.com/join)\n* DockerHub- [https://hub.docker.com/signup](https://hub.docker.com/signup)\n\nWe recommend using this repository as a template for your first Mod, so in this section we assume the code is finished and we will only concentrate on plugging into GitHub Actions/Dockerhub.\n\nThe only code change you need to make to the build logic file `.github/workflows/BuildImage.yml` will be to modify the ENDPOINT to your own image:\n\n```yaml\n ENDPOINT: \"user/endpoint\"\n BRANCH: \"master\"\n```\n\nUser is your Dockerhub user and endpoint is your own custom name (typically the name of the repository where your mod is). You do not need to create this endpoint beforehand, the build logic will push it and create it on first run.\n\nHead over to `https://github.com/user/endpoint/settings/secrets` and click on `New secret`\n\nAdd `DOCKERUSER` (your DockerHub username) and `DOCKERPASS` (your DockerHub password or token).\n\nYou can create a token by visiting [https://hub.docker.com/settings/security](https://hub.docker.com/settings/security)\n\nGitHub Actions will trigger a build off of your repo when you commit. The image will be pushed to Dockerhub on success. This Dockerhub endpoint is the Mod variable you can use to customize your container now.\n\n## Getting a Mod to GitHub Container Registry\n\nTo publish a Mod to GitHub Container Registry you will need the following accounts:\n\n* Github- [https://github.com/join](https://github.com/join)\n\nWe recommend using this repository as a template for your first Mod, so in this section we assume the code is finished and we will only concentrate on plugging into GitHub Actions/GitHub Container Registry.\n\nThe only code change you need to make to the build logic file `.github/workflows/BuildImage.yml` will be to modify the ENDPOINT to your own image:\n\n```yaml\n ENDPOINT: \"user/endpoint\"\n BRANCH: \"master\"\n```\n\n`user` is your GitHub user and `endpoint` is your own custom name (typically the name of the repository where your mod is). You do not need to create this endpoint beforehand, the build logic will push it and create it on first run.\n\nHead over to `https://github.com///settings/secrets` and click on `New secret`\n\nAdd `CR_USER` (your GitHub username) and `CR_PAT` (a personal access token with `read:packages` and `write:packages` scopes).\n\nYou can create a personal access token by visiting [https://github.com/settings/tokens](https://github.com/settings/tokens)\n\nGitHub Actions will trigger a build off of your repo when you commit. The image will be pushed to GitHub Container Registry on success. This GitHub Container Registry endpoint is the Mod variable you can use to customize your container now.\n\n## Submitting a PR for a Mod to be added to the official LinuxServer.io repo\n\n* Fork this repo, checkout the `template` branch.\n* Edit the `Dockerfile` for the mod. `Dockerfile.complex` is only an example and included for reference; it should be deleted when done.\n* Inspect the `root` folder contents. Edit, add and remove as necessary.\n* After all init scripts and services are created, run `find ./ -path \"./.git\" -prune -o ( -name \"run\" -o -name \"finish\" -o -name \"check\" ) -not -perm -u=x,g=x,o=x -print -exec chmod +x {} +` to fix permissions.\n* Edit the readme with pertinent info.\n* Finally edit the `.github/workflows/BuildImage.yml`. Customize the vars for `BASEIMAGE` and `MODNAME`. Set the versioning logic and `MULTI_ARCH` if needed.\n* Ask the team to create a new branch named `-` in this repo. Baseimage should be the name of the image the mod will be applied to. The new branch will be based on the [template branch](https://github.com/linuxserver/docker-mods/tree/template).\n* Submit PR against the branch created by the team.\n* Make sure that the commits in the PR are squashed.\n* Also make sure that the commit and PR titles are in the format of `: `. Detailed description and further info should be provided in the body (ie. `code-server: python2 add python-pip`).\n\n## Appendix\n\n### File encoding\n\ns6 init files must be encoded in plain `UTF-8`, and not `UTF-8 with BOM`. You can remove the BOM using your IDE if necessary.\n\n### Inspecting mods\n\nTo inspect the file contents of external Mods dive is a great CLI tool:\n\n[https://github.com/wagoodman/dive](https://github.com/wagoodman/dive)\n\nBasic usage:\n\n#### With Docker\n\n```bash\ndocker run --rm -it \\\n -v /var/run/docker.sock:/var/run/docker.sock \\\n wagoodman/dive:latest \n```\n\n#### Without Docker\n\n```bash\ndive \n```","has_starred","hub_user","immutable_tags_settings",{"_142":11,"_143":144},"enabled","rules",[145],".*","is_automated","permissions",{"_149":22,"_150":11,"_151":11},"read","write","admin","user","storage_size",427130053426,"isOrg","reponame","tag","canDeleteTags","isHubSbxKitsEnabled","currentTab","tagAttestations","displaySecurityMetadata","showSbxLogoOverride","routes/_layout.layers.$namespace.$reponame.$tag.(images).($imageUrlDigest)._index",{"_28":29,"_102":-7,"_100":-7,"_101":-7,"_30":166,"_36":47,"_170":171,"_175":11},{"_32":33,"_34":35,"_36":37,"_38":39,"_40":41,"_42":167,"_68":69,"_70":35,"_71":72,"_73":74,"_75":76,"_77":78,"_79":65,"_80":69,"_81":60,"_82":22},[168,169],{"_45":46,"_36":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":49,"_57":-5,"_58":39,"_59":60,"_61":-5},{"_45":63,"_36":64,"_48":49,"_50":65,"_52":66,"_54":55,"_56":49,"_57":-5,"_58":67,"_59":60,"_61":-5},"imageWithLayers",{"_45":46,"_36":47,"_48":49,"_50":51,"_52":53,"_86":172,"_54":55,"_56":49,"_57":-5,"_58":39,"_59":60,"_61":-5},[173,174],{"_58":89,"_90":91,"_36":49},{"_36":93,"_58":39,"_90":94},"hasPermissionToViewRepoSettings","actionData","errors"]

linuxserver/mods:universal-docker-in-docker-2c511d5b33d00d4644cc3c88f1d71e8d695e6b82