[{"_1":2,"_159":-5,"_160":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_147":148},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.layers.$namespace.$reponame.$tag.(images).($imageUrlDigest)",{"_23":24,"_25":26,"_71":72,"_85":-7,"_86":-7,"_87":-7,"_88":-7,"_89":-5,"_90":-5,"_91":11,"_92":11,"_65":93,"_139":11,"_110":60,"_140":109,"_141":64,"_31":32,"_142":11,"_143":17,"_144":43,"_145":-5,"_146":11},"scanningType","none","tagData",{"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_56":57,"_58":30,"_59":60,"_61":62,"_63":64,"_65":66,"_67":45,"_68":57,"_69":54,"_70":17},"content_type","image","creator",372328,"digest","sha256:b7bff94c951b543b289ca3cf0a04d147f385fda78017e159a9ac0555c294049b","full_size",123441765,"id",1151855506,"images",[39],{"_40":41,"_31":32,"_42":43,"_44":45,"_46":47,"_48":49,"_50":43,"_51":-5,"_52":34,"_53":54,"_55":-5},"architecture","amd64","features","","last_pulled","2026-09-20T07:16:49.772161969Z","last_pushed","2026-05-04T12:27:31.293412552Z","os","linux","os_features","os_version","size","status","active","variant","last_updated","2026-05-04T12:27:31.421192Z","last_updater","last_updater_username","mwader","media_type","application/vnd.docker.container.image.v1+json","name","8.1.1-amd64","repository",5400754,"tag_last_pulled","tag_last_pushed","tag_status","v2","tagImages",[73],{"_40":41,"_31":32,"_42":43,"_44":45,"_46":47,"_74":75,"_48":49,"_50":43,"_51":-5,"_52":34,"_53":54,"_55":-5},"layers",[76,80,83],{"_31":77,"_52":34,"_78":79},"sha256:e59d7938d88f7f6910a0d8f5c48e63d2c792272917e0a04db54941ec602777e9","instruction","COPY / / # buildkit",{"_52":81,"_78":82,"_31":43},0,"LABEL maintainer=Mattias Wadman mattias.wadman@gmail.com",{"_52":81,"_78":84,"_31":43},"ENTRYPOINT [\"/ffmpeg\"]","layerOrdinals","packageName","cveId","sbom","scoutSummary","staticSummary","isScoutPaymentRequired","canSeeVulnerabilities",{"_94":95,"_96":97,"_98":99,"_100":101,"_102":11,"_56":103,"_104":105,"_106":107,"_63":109,"_110":60,"_111":112,"_113":28,"_114":115,"_53":116,"_117":54,"_118":-5,"_119":81,"_120":121,"_122":11,"_123":60,"_124":125,"_130":17,"_131":132,"_136":60,"_137":138},"categories",[],"content_types",[28],"date_registered","2018-04-17T21:48:37.260071Z","description","Multi-arch docker image with ffmpeg/ffprobe binaries built as hardened static PIE binaries","is_private","2026-09-15T10:19:15.770527Z","last_modified","2026-08-05T20:20:44.451555Z","media_types",[62,108],"application/vnd.docker.distribution.manifest.list.v2+json","static-ffmpeg","namespace","pull_count",2392237,"repository_type","star_count",43,1,"status_description","source","collaborator_count","full_description","## static-ffmpeg\n\nDocker image with\n[ffmpeg](https://ffmpeg.org/ffmpeg.html) and\n[ffprobe](https://ffmpeg.org/ffprobe.html)\nbuilt as hardened static PIE binaries with no external dependencies that can be\nused with any base image.\n\nSee [Dockerfile](Dockerfile) for versions used. In general, master **should** have the\nlatest stable version of ffmpeg and below libraries.\nVersions are kept up to date automatically using [bump](https://github.com/wader/bump).\n\n### Usage\n\nUse `mwader/static-ffmpeg` from [Docker Hub](https://hub.docker.com/r/mwader/static-ffmpeg) or build the image yourself.\n\nIn Dockerfile\n```Dockerfile\nCOPY --from=mwader/static-ffmpeg:9.0 /ffmpeg /usr/local/bin/\nCOPY --from=mwader/static-ffmpeg:9.0 /ffprobe /usr/local/bin/\n```\n\nRun directly\n```sh\ndocker run -i --rm -u $UID:$GROUPS -v \"$PWD:$PWD\" -w \"$PWD\" mwader/static-ffmpeg:9.0 -i file.wav file.mp3\ndocker run -i --rm -u $UID:$GROUPS -v \"$PWD:$PWD\" -w \"$PWD\" --entrypoint=/ffprobe mwader/static-ffmpeg:9.0 -i file.wav\n```\n\nAs shell alias\n```sh\nalias ffmpeg='docker run -i --rm -u $UID:$GROUPS -v \"$PWD:$PWD\" -w \"$PWD\" mwader/static-ffmpeg:9.0'\nalias ffprobe='docker run -i --rm -u $UID:$GROUPS -v \"$PWD:$PWD\" -w \"$PWD\" --entrypoint=/ffprobe mwader/static-ffmpeg:9.0'\n```\n\n### Libraries\n\n- [fontconfig](https://www.freedesktop.org/wiki/Software/fontconfig/)\n- gray (full grayscale support)\n- iconv (from musl)\n- [lcms2](https://www.littlecms.com/)\n- [libaom](https://aomedia.googlesource.com/aom/)\n- [libaribb24](https://github.com/nkoriyama/aribb24)\n- [libass](https://github.com/libass/libass)\n- [libbluray](https://www.videolan.org/developers/libbluray.html)\n- [libdav1d](https://code.videolan.org/videolan/dav1d)\n- [libdavs2](https://github.com/pkuvcl/davs2)\n- [libfdk-aac](https://github.com/mstorsjo/fdk-aac) (only if explicitly enabled during build, [see below](#libfdk-aac))\n- [libfreetype](https://freetype.org/)\n- [libfribidi](https://github.com/fribidi/fribidi)\n- [libgme](https://github.com/mcfiredrill/libgme)\n- [libgsm](https://github.com/timothytylee/libgsm)\n- [libharfbuzz](https://github.com/harfbuzz/harfbuzz)\n- [libjxl](https://github.com/libjxl/libjxl)\n- [libkvazaar](https://github.com/ultravideo/kvazaar)\n- [libmodplug](https://github.com/Konstanty/libmodplug)\n- [libmp3lame](https://lame.sourceforge.io/)\n- [libmysofa](https://github.com/hoene/libmysofa)\n- [libopencore](https://sourceforge.net/projects/opencore-amr/)\n- [libopenjpeg](https://www.openjpeg.org)\n- [libopus](https://opus-codec.org)\n- [librabbitmq](https://github.com/alanxz/rabbitmq-c)\n- [librav1e](https://github.com/xiph/rav1e)\n- [librsvg](https://gitlab.gnome.org/GNOME/librsvg)\n- [librtmp](https://rtmpdump.mplayerhq.hu/)\n- [librubberband](https://breakfastquay.com/rubberband/)\n- [libshine](https://github.com/toots/shine)\n- [libsnappy](https://google.github.io/snappy/)\n- [libsoxr](https://sourceforge.net/projects/soxr/)\n- [libspeex](https://github.com/xiph/speex)\n- [libsrt](https://github.com/Haivision/srt)\n- [libssh](https://gitlab.com/libssh/libssh-mirror)\n- [libsvtav1](https://gitlab.com/AOMediaCodec/SVT-AV1)\n- [libtheora](https://github.com/xiph/theora)\n- [libtwolame](https://github.com/njh/twolame)\n- [libuavs3d](https://github.com/uavs3/uavs3d)\n- [libva](https://github.com/intel/libva)\n- [libvidstab](https://github.com/georgmartius/vid.stab)\n- [libvmaf](https://github.com/Netflix/vmaf)\n- [libvo-amrwbenc](https://github.com/mstorsjo/vo-amrwbenc)\n- [libvorbis](https://github.com/xiph/vorbis)\n- [libvpl](https://github.com/intel/libvpl)\n- [libvpx](https://github.com/webmproject/libvpx)\n- [libvvenc](https://github.com/fraunhoferhhi/vvenc)\n- [libwebp](https://chromium.googlesource.com/webm/libwebp)\n- [libx264](https://www.videolan.org/developers/x264.html)\n- [libx265](https://www.videolan.org/developers/x265.html) (multilib with support for 10 and 12 bits)\n- [libxavs2](https://github.com/pkuvcl/xavs2)\n- [libxevd](https://github.com/mpeg5/xevd)\n- [libxeve](https://github.com/mpeg5/xeve)\n- [libxml2](https://gitlab.gnome.org/GNOME/libxml2)\n- [libxvid](https://labs.xvid.com)\n- [libzimg](https://github.com/sekrit-twc/zimg)\n- [libzmq](https://github.com/zeromq/libzmq)\n- [openssl](https://openssl.org)\n- and all native ffmpeg codecs, formats, filters etc.\n\n### Files in the image\n\n- `/ffmpeg` ffmpeg binary\n- `/ffprobe` ffprobe binary\n- `/doc` Documentation\n- `/versions.json` JSON file with build versions of ffmpeg and libraries.\n- `/etc/ssl/cert.pem` CA certs to make `-tls_verify 1 -ca_file /etc/ssl/cert.pem` work if running image directly\n- Fonts, fontconfig config and pre-populated cache:\n - `/etc/fonts`\n - `/usr/share/fonts`\n - `/usr/share/consolefonts`\n - `/var/cache/fontconfig`\n\n### Tags\n\n`latest` Latest master build.\n\n`MAJOR.MINOR.PATCH[-BUILD]` Specific version of FFmpeg with the features that was in master at the time of tagging.\n`-BUILD` means that was an additional build with that version to add of fix something.\n\n### Security\n\nBinaries are built with various hardening features but it's *still a good idea to run them\nas non-root even when used inside a container*, especially so if running on input files that\nyou don't control.\n\n### libfdk-aac\nDue to license issues the docker image does not include libfdk-aac by default. A docker image including libfdk-aac can be built by passing a non empty value to the build-arg `ENABLE_FDKAAC`, example below.\n```\ndocker build --build-arg ENABLE_FDKAAC=1 . -t my-ffmpeg-static:latest\n```\n\n### Fonts usage with SVG or draw text filters etc\n\nThe image ships with some basic fonts (`font-terminus font-inconsolata font-dejavu font-awesome`) that can be used when running the image directly. If your copying the binaries into some image you have to install fonts somehow. How to do this depends a bit on distributions but in general look for font packages and how to make [fontconfig](https://www.freedesktop.org/wiki/Software/fontconfig/) know about them.\n\n- Alpine Linux see https://wiki.alpinelinux.org/wiki/Fonts\n- Debian/Ubuntu see https://wiki.debian.org/Fonts\n\n#### Custom fonts directory\n\nLet's say you're building a docker image for your application that requires the `ffmpeg` and `ffprobe` binaries, and want to have a dedicated directory for storing fonts, e.g. `/app/fonts`. In order to achieve this, let's take a look at the following steps.\n\n1. A custom config file containing the fonts directory you want to use has to be added to the image. Here, a file `50-custom.conf` will be added to the `/etc/fonts/conf.d` directory, containing an additional `/app/fonts` directory for Fontconfig to use.\n\n```Dockerfile\nCOPY <\n\n\n /app/fonts\n\nEOF\n```\n\n> [!TIP]\n> Check the [Fontconfig User Documentation](https://fontconfig.pages.freedesktop.org/fontconfig/fontconfig-user.html) for examples and available options for your custom fontconfig file.\n\n2. Copy the `ffmpeg` (and `ffprobe`) binaries.\n\n```Dockerfile\nCOPY --from=mwader/static-ffmpeg:9.0 /ffmpeg /usr/bin/\nCOPY --from=mwader/static-ffmpeg:9.0 /ffprobe /usr/bin/\n```\n\n3. Make sure the `/app/fonts` directory exist in your image.\n\n```Dockerfile\nWORKDIR /app\n\nRUN <\n\n\n /app/fonts\n\nEOF\n\nFROM base as ffmpeg\n\nCOPY --from=mwader/static-ffmpeg:9.0 /ffmpeg /usr/bin/\nCOPY --from=mwader/static-ffmpeg:9.0 /ffprobe /usr/bin/\n\nFROM ffmpeg AS app\n\nWORKDIR /app\n\nRUN < [!NOTE]\n> The volume mount for `/var/cache/fontconfig` is optional. If you run the container as a non-root user, just make sure the cache directory exists on host before mounting, else it will still show the debug message `Fontconfig error: No writable cache directories`. This error does *not* further impact Fontconfig in locating the appropriate fonts.\n\n### TLS\n\nBinaries are built with TLS support but, by default, ffmpeg currently do\nnot do certificate verification. To enable verification you need to run\nffmpeg with `-tls_verify 1` and `-ca_file /path/to/cert.pem`.\n\n- Alpine Linux at `/etc/ssl/cert.pem`\n- Debian/Ubuntu install the `ca-certificates` package at it will be available at `/etc/ssl/certs/ca-certificates.crt`.\n\n### Known issues and tricks\n\n#### Multi-arch and arm64\n\nSince version 5.0.1-3 dockerhub images are multi-arch amd64 and arm64 images.\n\n#### Copy out binaries from image\n\nThis will copy `ffmpeg` and `ffprobe` to the current directory:\n```\ndocker run --rm -v \"$PWD:/out\" $(echo -e 'FROM alpine\\nCOPY --from=mwader/static-ffmpeg:7.1 /ff* /\\nENTRYPOINT cp /ff* /out' | docker build -q -)\n```\n\n#### Quickly see what versions an image was built with\n\n```\ndocker run --rm mwader/static-ffmpeg -v quiet -f data -i versions.json -map 0 -c copy -f data -\n```\n\n#### I see `Name does not resolve` errors for hosts that should resolve\n\nThis could happen if the hostname resolve to more IP-addresses than can fit in [DNS UDP packet](https://www.rfc-editor.org/rfc/rfc791) (probably 512 bytes) causing the response to be truncated. Usually clients should then switch to TCP and redo the query.\nThis should only be a problem with version 6.0-1 or earlier of this image that uses [musl libc](https://www.musl-libc.org) 1.2.3 or older.\n\n#### I see `[tls @ 0x7f80c8ec3800] error:030000A9:digital envelope routines::unknown option` errors\n\nThis could be because the statically linked openssl version in the static-ffmpeg binaries are not compatible with the (possibly distro modified openssl) configuration files found in the filesystem. The error is about openssl encountering an option that it does not know about.\n\nPossible workarounds:\n- Add `config_diagnostics = 0` to the openssl config to ignore unknown options with the risk of ignoring real problems.\n- Use ffmpeg option `-reconnect_on_network_error true` to ignore the error but will still warn.\n\nSee these references for further discussion and workarounds:\n- [First call to SSL_CTX_new is failing on AL2023 (3.0.12)\n](https://github.com/openssl/openssl/discussions/23016)\n- [OpenSSL issue with binary outside container (RedHat/Fedora specific)](https://github.com/wader/static-ffmpeg/issues/462)\n\n### Thanks\n\n- [@pyldin601](https://github.com/pyldin601) for working on multi arch builds\n\n### Contribute\n\nFeel free to create issues or PRs if you have any improvements or encounter any problems.\nPlease also consider making a [donation to the FFmpeg project](https://ffmpeg.org/donations.html)\nor to other projects used by this image if you find it useful.\n\nPlease also be mindful of the license limitations used by libraries this project uses and your own\nusage and potential distribution of such.\n\n### TODOs and possible things to add\n\n- Add libopenapv\n- Add libplacebo, chromaprint, etc. ...\n- Add acceleration support (GPU, CUDA, ...)\n- Add *.a *.so libraries, headers and pkg-config somehow\n\n","has_starred","hub_user","immutable_tags_settings",{"_126":11,"_127":128},"enabled","rules",[129],".*","is_automated","permissions",{"_133":17,"_134":11,"_135":11},"read","write","admin","user","storage_size",115195633091,"isOrg","reponame","tag","canDeleteTags","isHubSbxKitsEnabled","currentTab","tagAttestations","displaySecurityMetadata","routes/_layout.layers.$namespace.$reponame.$tag.(images).($imageUrlDigest)._index",{"_23":24,"_87":-7,"_85":-7,"_86":-7,"_25":149,"_31":32,"_152":153,"_158":11},{"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":150,"_56":57,"_58":30,"_59":60,"_61":62,"_63":64,"_65":66,"_67":45,"_68":57,"_69":54,"_70":17},[151],{"_40":41,"_31":32,"_42":43,"_44":45,"_46":47,"_48":49,"_50":43,"_51":-5,"_52":34,"_53":54,"_55":-5},"imageWithLayers",{"_40":41,"_31":32,"_42":43,"_44":45,"_46":47,"_74":154,"_48":49,"_50":43,"_51":-5,"_52":34,"_53":54,"_55":-5},[155,156,157],{"_31":77,"_52":34,"_78":79},{"_52":81,"_78":82,"_31":43},{"_52":81,"_78":84,"_31":43},"hasPermissionToViewRepoSettings","actionData","errors"]

mwader/static-ffmpeg:8.1.1-amd64