cleanstart/nats repository overview

Verified NATS Container Image

A hardened, minimal NATS container image built from source with verifiable software provenance and an SBOM, designed for secure production deployments.

For additional versions including FIPS support, explore CleanStart Images — secure, hardened container images⁠

⁠Pull Commands

docker pull ghcr.io/cleanstart-containers/nats:latest
docker pull ghcr.io/cleanstart-containers/nats:latest-dev

⁠Interactive Development

Start interactive session for development:

docker run --rm -it --entrypoint /bin/sh ghcr.io/cleanstart-containers/nats:latest-dev

⁠Container Start

Start the NATS server with proper configuration:

docker run -d \
  --name nats-server \
  -p 4222:4222 \
  -p 8222:8222 \
  ghcr.io/cleanstart-containers/nats:latest

⁠Access URLs

• NATS Client Port: nats://localhost:4222 - For client connections
• HTTP Monitoring: http://localhost:8222 - Server monitoring and stats
• Server Info: http://localhost:8222/varz - Detailed server information

⁠Container Management

# Check container status

docker ps | grep nats

# View logs

docker logs nats-server

# Follow logs in real-time

docker logs -f nats-server

# Stop container

docker stop nats-server

# Remove container

docker rm nats-server

Why Use CleanStart Images⁠

• Verified — Built from source with verifiable software provenance
• Hardened — Minimal software footprint designed for secure deployment
• Transparent — SBOM available for visibility into image contents
• Production-ready — Built for modern container environments