MinIO + Admin Console Docker Image

A production-ready Docker image that combines the latest MinIO server with the full-featured MinIO Admin Console — including Site Replication support. Everything you need for object storage with a complete web interface, built from source.

What's Included

• MinIO Server — Built from source (latest)
• MinIO Admin Console — Full-featured web UI including Site Replication
• MinIO Client (mc) — Command-line tools, minisign-verified

Image Tags

Tag	Console Version	When Updated
latest	v1.7.6	Every push to main + weekly (Monday)
1.7.3	v1.7.3 (Site Replication)	Every push to main + manual dispatch

Both tags are multi-arch OCI manifests — Docker automatically selects the right binary for your platform (linux/amd64 or linux/arm64). No need to specify an architecture tag.

Quick Start

Docker Run

docker run -d --name minio \
  -p 9000:9000 \
  -p 9001:9001 \
  -p 9002:9002 \
  -v ./data:/data \
  -e MINIO_ROOT_USER=your-access-key \
  -e MINIO_ROOT_PASSWORD=your-secret-key \
  firstfinger/minio:latest

Docker Compose

docker compose up -d

The included docker-compose.yml uses firstfinger/minio:latest and works on both amd64 and arm64 without any extra configuration.

Access Points

Service	URL	Purpose
MinIO API	http://localhost:9000	S3-compatible API
MinIO Console	http://localhost:9001	Built-in UI
MinIO Admin Console	http://localhost:9002	Full-featured admin UI (Site Replication, etc.)

Environment Variables

Required

Variable	Description
MINIO_ROOT_USER	S3 access key / root username
MINIO_ROOT_PASSWORD	S3 secret key / root password

Optional

Variable	Default	Description
MINIO_REGION	us-east-1	AWS S3 region string
MINIO_CERTS_DIR	/data/.minio/certs	TLS certificate directory
MINIO_API_PORT	9000	Override API port
MINIO_CONSOLE_PORT	9001	Override built-in console port
MINIO_ADMIN_CONSOLE_PORT	9002	Override admin console port
CONSOLE_PBKDF_PASSPHRASE	auto-generated	Admin console session passphrase
CONSOLE_PBKDF_SALT	auto-generated	Admin console session salt

Using MinIO Client (mc)

# Configure alias
docker exec minio mc alias set local http://localhost:9000 your-access-key your-secret-key

# Create bucket
docker exec minio mc mb local/mybucket

# Upload file
docker exec minio mc cp /path/to/file local/mybucket/

# List buckets
docker exec minio mc ls local

Enabling TLS

Place your certificates inside the container at ${MINIO_CERTS_DIR} (default /data/.minio/certs):

data/.minio/certs/
├── public.crt    # Full certificate chain (leaf + intermediates)
├── private.key   # Private key
└── CAs/          # Optional: additional CA certs to trust
    └── ca.crt

The entrypoint auto-detects public.crt + private.key and switches MinIO and the health probe to HTTPS automatically. No extra flags needed.

docker run -d --name minio \
  -v $(pwd)/data:/data \
  -p 9000:9000 -p 9001:9001 -p 9002:9002 \
  -e MINIO_ROOT_USER=admin \
  -e MINIO_ROOT_PASSWORD=SecurePass123! \
  firstfinger/minio:latest

Validate after startup:

curl -k https://localhost:9000/minio/health/live

For self-signed certificates, ensure the SAN covers every hostname/IP you access (e.g. localhost, 192.168.1.10). Mount the issuing CA into CAs/ so MinIO trusts it internally.

Troubleshooting

Port conflict: Use custom port env vars — e.g. -e MINIO_API_PORT=8000

Service not starting: docker logs minio

Region errors: Set MINIO_REGION to match your client config (e.g. us-east-1, ap-south-1)

Site Replication not visible: Use the 1.7.3 tag — firstfinger/minio:1.7.3

License

You just DO WHAT THE FUCK YOU WANT TO.