11 articles about docker.
Your php docker ffmpeg image installs a media decoder that reads user uploads. Which version apt gives you, which CVEs apt can fix, and how to contain it.
The n8n security update patch landed Oct 14, 2026. If your Docker image has FFmpeg baked in, docker compose pull won't patch it. The rebuild, in order.
n8n 3.0 breaking changes kill the npx + host ffmpeg video step. Here's the Docker Compose and distroless Dockerfile that work, and the HTTP alternative.
FFmpeg CVE-2026-96611 affects every build before 9.0. How to check the version your pipeline actually runs, who's exposed, and how to patch a container.
Most FFmpeg n8n Docker recipes break on n8n 2.x. Compare three working paths: the runners image plus fonts, a static-ffmpeg copy, and an HTTP call on Cloud.
The official n8n Docker image is distroless, so apk add fails. Two working n8n distroless ffmpeg fixes: build a custom image, or move the encode off-box.
"n8n ffmpeg not found" means FFmpeg isn't inside your n8n Docker container. Diagnose it in three commands, then pick a Dockerfile, image, or an API call.
FFmpeg's "unknown encoder libx264" error means your binary was compiled without --enable-libx264, not that FFmpeg is broken. Diagnose it in one command.
The FFmpeg fontconfig error is a warning, not a failure: the job exits 0 and ships the wrong font. Fix it in Alpine, Debian slim, and distroless images.
A working ffmpeg docker setup: an Alpine Dockerfile, a multi-stage build, real image sizes, and the pitfalls (exit 137, fonts, codecs) nobody warns you about.