Home

What is this image?

This is a community-maintained Docker/OCI base image for deploying Nextcloud on container platforms. This image comes in several variants depending on your deployment model, as well as an optional, lighter Alpine-based variant.

This image is part of the Docker Official Images program.

What are "Docker Official Images"?

Docker Official Images are curated images hosted on Docker Hub. The main tenets are:

• Focus on Free and Open-Source software
• Support multiple architectures
• Exemplify Dockerfile best practices
• Actively rebuilt for updates and security fixes
• Adhere to upstream recommendations
• Add minimal quality-of-life features for the container environment where appropriate

See Docker's documentation for a good high-level overview of the program.

This image specifically

While maintained within the Nextcloud project, Docker, Inc. sponsors a dedicated team responsible for reviewing and publishing all content in the Docker Official Images program. This team works in collaboration with upstream software maintainers, security experts, and the broader Docker community.

This image is maintained by Nextcloud community members in collaboration with the broader Nextcloud project. We strive to follow Nextcloud Server’s baseline recommendations for how the software should be consumed. We aim to serve as a reference base image for those designing and maintaining their own Nextcloud stacks and as an example of Dockerfile best practices for those building derived images.

Tip

This image may need to be tuned or customized to your use case. If you are not interested in designing your own Nextcloud stack, consider using the pre-tuned Nextcloud stack known as the Nextcloud All-In-One (AIO) image. AIO is maintained by Nextcloud GmbH and developed in collaboration with the community.

Nextcloud Docker Image Variants

Image channels

Channel	Server Branch	Server Version	Apache	FPM	FPM Alpine
latest (default, Apache)	34	34.0.0	34.0.0-apache	34.0.0-fpm	34.0.0-fpm-alpine
stable / production	33	33.0.5	33.0.5-apache	33.0.5-fpm	33.0.5-fpm-alpine
34 / 34.0	34	34.0.0	34.0.0-apache	34.0.0-fpm	34.0.0-fpm-alpine
33 / 33.0	33	33.0.5	33.0.5-apache	33.0.5-fpm	33.0.5-fpm-alpine
32 / 32.0	32	32.0.11	32.0.11-apache	32.0.11-fpm	32.0.11-fpm-alpine

Updating

Upstream typically publishes new major versions every four months, which are supported for at least one year via roughly monthly maintenance/patch releases. Maintenance releases are published for all supported major versions of Nextcloud and target all known critical bugs and security problems.

Refer to the upstream Currently supported versions page for release schedules and related details.

We typically publish updated images within 72 hours of new Server releases.

Detailed tag families

Nextcloud 34

Variant	Tags	Architectures
Apache	34.0.0-apache, 34.0-apache, 34-apache, apache, 34.0.0, 34.0, 34, latest	amd64, arm32v5, arm32v7, arm64v8, i386, ppc64le, riscv64, s390x
FPM	34.0.0-fpm, 34.0-fpm, 34-fpm, fpm	amd64, arm32v5, arm32v7, arm64v8, i386, ppc64le, riscv64, s390x
FPM Alpine	34.0.0-fpm-alpine, 34.0-fpm-alpine, 34-fpm-alpine, fpm-alpine	amd64, arm32v6, arm32v7, arm64v8, i386, ppc64le, riscv64, s390x

Nextcloud 33

Variant	Tags	Architectures
Apache	33.0.5-apache, 33.0-apache, 33-apache, stable-apache, production-apache, 33.0.5, 33.0, 33, stable, production	amd64, arm32v5, arm32v7, arm64v8, i386, ppc64le, riscv64, s390x
FPM	33.0.5-fpm, 33.0-fpm, 33-fpm, stable-fpm, production-fpm	amd64, arm32v5, arm32v7, arm64v8, i386, ppc64le, riscv64, s390x
FPM Alpine	33.0.5-fpm-alpine, 33.0-fpm-alpine, 33-fpm-alpine, stable-fpm-alpine, production-fpm-alpine	amd64, arm32v6, arm32v7, arm64v8, i386, ppc64le, riscv64, s390x

Nextcloud 32

Variant	Tags	Architectures
Apache	32.0.11-apache, 32.0-apache, 32-apache	amd64, arm32v5, arm32v7, arm64v8, i386, ppc64le, riscv64, s390x
FPM	32.0.11-fpm, 32.0-fpm, 32-fpm	amd64, arm32v5, arm32v7, arm64v8, i386, ppc64le, riscv64, s390x
FPM Alpine	32.0.11-fpm-alpine, 32.0-fpm-alpine, 32-fpm-alpine	amd64, arm32v6, arm32v7, arm64v8, i386, ppc64le, riscv64, s390x

Image tagging and pinning options

To keep your infrastructure stable, choose the tag or reference method that matches your risk tolerance:

Tag type	Example reference (nextcloud{:tag, @hash})	Best for	Description	Resilience level
Highly Deterministic	@sha256:45b23...	Critical Production	Locked to an immutable cryptographic hash. Guarantees reproducible containers/builds. Does not receive base image security fixes from mid-release rebuilds.	🛡️ Maximum (Immutable)
Deterministic	:33.0.5-apache	Standard Production	Locked to a specific Nextcloud Server release version. Human-readable but over-writable. Periodically rebuilt when an underlying base image receives critical updates and security fixes.	🟢 High (Stable)
Rolling minor	:33.0-apache	Standard Production	Tracks backwards-compatible Nextcloud Server maintenance/patch releases (security/critical bug fixes). (e.g., 33.0.5 → 33.0.6). Will need to be adjusted manually as upstream major versions are published or retired.	🟡 Medium (Fluid)
Rolling Major	:33-apache	Staging / QA	Tracks maintenance/patch releases, as well as the rare — and typically backwards-compatible — intermediate minor release. Generally equivalent to Rolling minor. (e.g., 27.0.X → 27.1.X)	🟡 Medium (Fluid)
Rolling Channel	:stable-apache	Staging / QA	Updated based on the Nextcloud Server release cycle and maintainer judgment. Major version upgrades may include breaking changes.	🟡 Medium-to-Low (Fluid)
Default Fallback	:latest (or no tag)	Quick Demos	Points to the Apache variant of the newest published major version. Never use in production.Will include breaking changes during major release transitions.	🔴 None (Unpredictable)

Important

Important Considerations Regarding Immutability and Updates:

• Updates are not automatic: You must always run docker pull (or equivalent) to retrieve newer images; containers will not auto-update themselves.
• Image/tag immutability: All supported tags are periodically rebuilt (typically once or twice a month) when an underlying base image receives critical updates and security fixes. These rebuilds occur independently of Nextcloud Server software releases. For true immutability, use a cryptographic hash reference — though you must update the hash manually to receive security fixes.

Further information

For further usage information, see the the repository README.