Docker packaging for Apache Flink

Clone this repo:
  1. 874083e [readme] explicitly mention that the full GPG fingerprint is required by David Anderson · 5 weeks ago master
  2. 7d39879 Update key for 1.15.1 to use full fingerprint (#123) by David Anderson · 6 weeks ago
  3. ac7054c Update Dockerfiles for 1.15.1 release by David Anderson · 6 weeks ago
  4. bf3014d Update Dockerfiles for 1.14.5 release (#119) by HuangXingBo · 8 weeks ago
  5. 300276d [FLINK-27671][ci] Publish SNAPSHOT images to GHCR by Alexander Fedulov · 3 months ago

Apache Flink Docker Images

This repo contains Dockerfiles for building Docker images for Apache Flink, and are used to build the “official” flink images hosted on Docker Hub (reviewed and build by Docker), as well as the images published on apache/flink DockerHub (maintained by Flink committers).

These Dockerfiles are maintained by the Apache Flink community, but the Docker community is responsible for building and hosting the images on Docker Hub.

Build Status

Flink Docker image lifecycle

Development workflow

The master branch of this repository serves as a pure publishing area for releases.

Development happens on the various dev-X branches.

Pull requests for a specific version should be opened against the respective dev-<version> branch. Pull requests for all versions, or for the next major Flink release, should be opened against the dev-master branch.


The dev-master branch is tested against nightly Flink snapshots for the next major Flink version. This allows us to develop features in tandem with Flink.

The dev-1.x branches are tested against the latest corresponding minor Flink release, to ensure any changes we make are compatible with the currently used Flink version.

Workflow for new Flink releases

Notes for new Flink major (x.y.0) releases

There are additional steps required when a new Flink major version (x.y.0) is released.

  • Since only the current and previous major versions of Flink are supported, the Dockerfiles for older versions must be removed when adding the new version to this repo
  • The new images should be given the latest tag, so the aliases array in must be updated

Release workflow

When a new release of Flink is available, the Dockerfiles in the master branch should be updated and a new manifest sent to the Docker Library official-images repo.

The Dockerfiles are generated on the respective dev-<version> branches, and copied over to the master branch for publishing.

Updating the Dockerfiles involves the following steps:

  1. Generate the Dockerfiles
    • Checkout the dev-x.y(minor release)/dev-master(major release) branch of the respective release, e.g., dev-1.9
    • Update with the GPG key ID of the key used to sign the new release
      • Be sure to use the full fingerprint of the GPG key (as shown in the example below), as the official images require this.
      • Commit this change with message Add GPG key for x.y.z release [example]
    • (minor only) Update testing/ to test against the new minor version.
    • Create a pull request against the dev-x.y/dev-master branch containing these commits.
    • Run with the appropriate arguments (-r flink-major-version -f flink-full-version)
      • e.g. ./ -r 1.2 -f 1.2.1
  2. Update Dockerfiles on the the master branch
    • Remove any existing Dockerfiles from the same major version
      • e.g. rm -r 1.2, if the new Flink version is 1.2.1
    • Copy the generated Dockerfiles from the dev-x.y/dev-master branch to master
    • Commit the changes with message Update Dockerfiles for x.y.z release [example]
    • Create a pull request against the master branch containing this commit.

Once the pull request has been merged, we can release the new docker images:

For publishing to DockerHub: apache/flink , you need to perform the following steps:

  1. Make sure that you are authenticated with your Docker ID, and that your Docker ID has access to apache/flink. If not, request access by INFRA (see also: docker login -u <username>.
  2. Generate and upload the new images: ./ (Do not execute on the arm platform machine, such as Apple Silicon)

For publishing as an official image, a new manifest should be generated and a pull request opened on the Docker Library official-images repo.

  1. Run ./ to output the new manifest (see note below regarding usage of this script)
  2. In a clone of the official-images repo, overwrite the file library/flink with the new manifest
  3. Commit this change with message Update to Flink x.y.z [example]

A pull request can then be opened on the official-images repo with the new manifest. [example]

Once the pull request has been merged (often within 1 business day), the new images will be available shortly thereafter.

For new major Flink releases, once the new image is available, the dev-x.y branch must be created:

  1. Create the branch based on dev-master
  2. update testing/
    • replace usage of ./ with ./ -r x.y -f x.y.0
    • replace references to dev-master with dev-x.y

Release checklist

Checklist for the dev branch:

  • [ ] The GPG key ID of the key used to sign the release has been added to and committed with the message Add GPG key for x.y.z release
  • [ ] ./ -r x.y -f x.y.z has been run on the respective dev branch

Checklist for the master branch:

  • [ ] (new major releases only) any unsupported Flink major version Dockerfiles have been removed (only two x.y/ directories should be present)
  • [ ] (new minor releases only) any existing generated files for the same major version have been removed
  • [ ] The updated Dockerfiles have been committed with the message Update Dockerfiles for x.y.z release
  • [ ] (new major releases only) the aliases array in has been updated with [x.y]='latest' and committed with the message Update latest image tag to x.y
  • [ ] A pull request with the above changes has been opened on this repo and merged
  • [ ] The new library manifest has been generated with and a pull request opened on the official-images repo with commit message Update to Flink x.y.z

Stackbrew Manifest is used to generate the library manifest file required for official Docker Hub images.

When the Dockerfiles in this repo are updated, the output of this script should replace the contents of library/flink in the Docker official-images repo via a pull request.

Note: Since this script requires the bashbrew binary and a compatible version of Bash, the script can be used to invoke the script in a Docker container with the necessary dependencies.


./ > /path/to/official-images/library/flink


Licensed under the Apache License, Version 2.0:

Apache Flink, Flink®, Apache®, the squirrel logo, and the Apache feather logo are either registered trademarks or trademarks of The Apache Software Foundation.