A minimal, CIS-hardened Docker base image for ROS 2 Humble — pinned rosdep cache, signed SBOM, and a rootless runtime profile. The foundation layer for every other RosLab package.
ROS 2 Humble Hardened Base Image
CIS-hardened ROS 2 Humble container with rosdep cache and SBOM.
A minimal, CIS-hardened Docker base image for ROS 2 Humble — pinned rosdep cache, signed SBOM, and a rootless runtime profile. The foundation layer for every other RosLab package.
- Base layer for custom robot images
- Air-gapped lab deployments
- Compliance-driven fleets
Use the hardened ROS 2 Humble image as the FROM line of your own robot Docker images.
- Docker 24+ on the build host
- cosign installed if you want to verify the image signature
- 01Pull the image
docker pull ghcr.io/roslab-ai/ros2-humble-hardened:1.0.0 - 02Verify the cosign signature (optional)
cosign verify ghcr.io/roslab-ai/ros2-humble-hardened:1.0.0 \ --certificate-identity-regexp 'roslab-ai' \ --certificate-oidc-issuer https://token.actions.githubusercontent.com - 03Use it in your Dockerfile
FROM ghcr.io/roslab-ai/ros2-humble-hardened:1.0.0 COPY src/ /ros2_ws/src/ RUN . /opt/ros/humble/setup.sh && colcon build - 04Run rootless
docker run --rm --user 1000:1000 -it ghcr.io/roslab-ai/ros2-humble-hardened:1.0.0 ros2 doctor
`ros2 doctor` reports all checks pass and the image exposes a CycloneDX SBOM at /sbom.json.
docker run --rm ghcr.io/roslab-ai/ros2-humble-hardened:1.0.0 cat /sbom.json | jq '.metadata.component.name'A hardened ROS 2 Nav2 distribution with behavior-tree recoveries, multi-floor map switching, costmap plugins for dynamic obstacles, and Foxglove-ready telemetry. One-command deploy to any ROS 2 Humble or Jazzy robot.
Production-tuned ROS 2 Nav2 stack with BT-based recovery and multi-floor maps.
A library of MoveIt 2 task plans for bin picking, kitting and machine tending. Ships with calibration routines for Franka FR3, UR-series and legacy OEM arms, plus a skill-runner that exposes each routine as a ROS 2 action.
Drop-in MoveIt 2 skills: bin picking, kitting, machine tending — calibrated per arm.
A pre-integrated Isaac ROS perception graph — ESS depth, segmentation, AprilTag pose, and pedestrian detection — packaged as a single Docker image with sample launch files for Jetson AGX Orin and IGX.
NVIDIA Isaac ROS perception bundle: depth, segmentation, AprilTag, person detection.