This repository provides automated, verified, and signed Docker images for Bitcoin Core (bitcoind). Images are built for all official releases starting from v28.0 and pushed to GitHub Container Registry (GHCR). All binaries are verified using the official SHA256SUMS and signed checksums.

The workflow automatically detects new releases from bitcoin/bitcoin and triggers the Docker build. The latest tag is set only for the newest official release.

• Usage
• Configuration
• Environment Variables
• Security
• Automated Build System
• Contributing

Images are published to GHCR and Docker Hub — use whichever you prefer:

docker pull ghcr.io/anym001/docker-bitcoind:<version>
docker pull anym001/docker-bitcoind:<version>      # Docker Hub

Minimal example:

docker run -d \
  --name bitcoind \
  -v /your/data/dir:/home/bitcoin/.bitcoin \
  -p 8333:8333 \
  -p 8332:8332 \
  ghcr.io/anym001/docker-bitcoind:<version>

With permissions mapping and extra args:

docker run -d \
  --name bitcoind \
  -e PUID=1000 \
  -e PGID=1000 \
  -e UMASK=002 \
  -e BITCOIND_EXTRA_ARGS="-txindex=1 -listen=1" \
  -v /your/data/dir:/home/bitcoin/.bitcoin \
  -p 8333:8333 \
  -p 8332:8332 \
  ghcr.io/anym001/docker-bitcoind:<version>

Tags:

• <version> — e.g., 29.2, 30.0 (always built for each release)
• <version>-stable — e.g., 29-stable, 30-stable
• latest — points to the latest official release

If you want custom configuration, place a bitcoin.conf file inside your mounted directory:

/your/data/dir/bitcoin.conf

Inside the container this becomes:

/home/bitcoin/.bitcoin/bitcoin.conf

Example:

server=1
daemon=0

# RPC
listen=1
rpcallowip=0.0.0.0/0
rpcbind=0.0.0.0

# ZMQ
zmqpubrawblock=tcp://0.0.0.0:28332
zmqpubrawtx=tcp://0.0.0.0:28333

If no config exists, Bitcoin Core will run with defaults.

This image is designed with safety in mind:

• Runs as non-root user bitcoin
• Uses minimal base image (debian:stable-slim)
• Binaries are GPG-verified using the official Guix builder keys
• No unnecessary packages installed
• Ensures safe access to the mounted volume using PUID, PGID, and UMASK

1. release-check.yml workflow:

   • Checks all official Bitcoin Core releases
   • Determines which releases are missing in your repo
   • Triggers build-docker.yml for missing releases
   • Passes LATEST=true for the newest release

2. build-docker.yml workflow:

   • Downloads official binaries and verifies SHA256 + PGP signatures
   • Extracts required binaries (bitcoind, bitcoin-cli)
   • Builds and pushes Docker images to GHCR
   • Creates a GitHub Release for each version

PRs are welcome, especially improvements to:

• Docker security hardening
• Improving automated workflows
• Enhancing testing or verification
• Image signing and supply-chain security
• Documentation

The contents of this repository (Dockerfile, scripts, and workflows) are licensed under the MIT License.

This project only packages Bitcoin Core into Docker images; the upstream source code is not modified or redistributed in this repository. Bitcoin Core is distributed under its own MIT license, and all upstream copyrights and trademarks remain with their respective owners.

Built with Claude Code.