Docker-Warp-Socks

A lightweight Alpine Linux based Docker image, designed for easy connection to CloudFlare WARP, exposing socks5 proxy all together.

Multi-platform: linux/arm, linux/arm64, linux/amd64, linux/ppc64le, linux/s390x and linux/riscv64

---

Usage

Quick Start

docker run --restart=always -itd \
    --name warp-socks \
    -p 9091:9091 \
    ghcr.io/mon-ius/docker-warp-socks

Docker Compose

Run docker-compose up -d with the content for docker-compose.yml.

services:
    warp-socks:
        image: ghcr.io/mon-ius/docker-warp-socks
        container_name: warp-socks
        restart: always
        ports:
            - "9091:9091"
        healthcheck:
            test: ["CMD", "curl", "-x", "socks5h://127.0.0.1:9091", "-fsSL", "https://www.cloudflare.com/cdn-cgi/trace"]
            interval: 30s
            timeout: 10s
            retries: 5
            start_period: 10s

Note

Verify the success, if warp=on shown with curl

curl -x "socks5h://127.0.0.1:9091" -fsSL "https://www.cloudflare.com/cdn-cgi/trace"
curl -x "http://127.0.0.1:9091" -fsSL "https://www.cloudflare.com/cdn-cgi/trace"

Features

V7

• Rich support for most linux family systems, including arm, arm64, ppc64le, s390x and riscv64, etc.
• Light start without NET_ADMIN, SYS_MODULE, /lib/modules, and extra net deps.
• More secure Bootstrap without privileged acquisition in docker container.
• Self-contained WARP registration, no third-party redirector or remote bootstrap script is fetched at runtime.
• Core upgraded to SagerNet/sing-box v1.13.x (stable), built on the WireGuard endpoints and the typed DNS engine.
• Rule-action routing (sniff / hijack-dns / route) with auto_detect_interface and a default_domain_resolver.
• New 1.13.x capabilities: ICMP/ping over the tunnel, optimistic DNS cache (persistent cache_file), bypass rule action, and TLS fragment route options.
• Support for mixed http, https, and socks protocols on the default port 9091
• Light core with alpine linux 3.24.
• Easy networking between containers.
• Used call Google Gemini 3.7 Flash, Google Gemini 3.6 Flash, Google Gemini 3.5 Pro and Google Gemini 3.5 Flash-Lite API.
• Used call OpenAI-GPT-5.6, GPT-5.6 Sol, GPT-5.6 Cyber and OpenAI-Sora 2 API.
• Used call Grok-4.6, and Grok-4.5 API.
• Used call Claude Opus 5, Claude Sonnet 5 and Claude Fable 5 API.
• Used call DeepSeek V4-Pro and DeepSeek V4-Flash API.
• Used call Moonshot Kimi K3 and Moonshot Kimi K2.7 Code API.
• Used call MiniMax M3 and MiniMax M2.7 API.
• Support GHCR for more Security and Flexibility.

Source

• GitHub
• DockerHub

Credits

• WireGuard
• Mon-ius/Docker-Warp-Socks
• Cloudflare WARP
• SagerNet/sing-box
• ViRb3/wgcf
• Neilpang/wgcf-docker
• Wireguard-Socks-Proxy
• WARP exlude config

Notice of Non-Affiliation and Disclaimer

We are not affiliated, associated, authorized, endorsed by, or in any way officially connected with Cloudflare, or any of its subsidiaries or its affiliates. The official Cloudflare website can be found at https://www.cloudflare.com.