blackbox-exporter

Prometheus Blackbox Exporter probing endpoints over HTTP, TCP, DNS and ICMP. Shell-less, cosign-signed and SBOM-attested, rebuilt daily against CVE fixes.

Vulnerabilities
None
Compressed size
9.2 MB
Architectures
amd64, arm64
Default user
blackbox-exporter (65532)
Last built
today

Pull this image

docker pull ghcr.io/rtvkiz/minimal-blackbox-exporter:latest
Repository
ghcr.io/rtvkiz/minimal-blackbox-exporter
Digest
sha256:3502d3cbd659038ba87a433bac13f2be570121740414d36cf4e4d9795e764552
Built at
2026-11-12T08:49:57Z
Primary package
blackbox-exporter
Entrypoint
/usr/bin/blackbox_exporter
Cmd
--config.file=/etc/blackbox_exporter/config.yml
User
blackbox-exporter (65532)
Working dir
/
Architectures
x86_64, aarch64
Environment
PATH=/usr/bin:/bin
Labels
org.opencontainers.image.titleminimal-blackbox-exporter
org.opencontainers.image.descriptionHardened shell-less Prometheus blackbox_exporter (endpoint probing) built from source via melange with daily CVE patches
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/blackbox-exporter
org.opencontainers.image.licensesApache-2.0
TagPullPublished
0.29 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29 2026-11-12
0.29.1-r0 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0 2026-11-12
0.29.1-r0-20261112 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261112 2026-11-12
latest ghcr.io/rtvkiz/minimal-blackbox-exporter:latest 2026-11-12
0.29-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29-dev 2026-11-12
0.29.1-r0-20261112-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261112-dev 2026-11-12
0.29.1-r0-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-dev 2026-11-12
latest-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:latest-dev 2026-11-12
0.29.1-r0-20261111 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261111 2026-11-11
0.29.1-r0-20261111-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261111-dev 2026-11-11
0.29.1-r0-20261110 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261110 2026-11-10
0.29.1-r0-20261110-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261110-dev 2026-11-10
0.29.1-r0-20261109 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261109 2026-11-09
0.29.1-r0-20261108 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261108 2026-11-08
0.29.1-r0-20261108-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261108-dev 2026-11-08
0.29.1-r0-20261107 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261107 2026-11-07
0.29.1-r0-20261107-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261107-dev 2026-11-07
0.29.1-r0-20261106 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261106 2026-11-06
0.29.1-r0-20261106-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261106-dev 2026-11-06
0.29.1-r0-20261105 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261105 2026-11-05
0.29.1-r0-20261105-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261105-dev 2026-11-05
0.29.1-r0-20261104 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261104 2026-11-04
0.29.1-r0-20261104-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261104-dev 2026-11-04
0.29.1-r0-20261029 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261029 2026-10-29
0.29.1-r0-20261029-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261029-dev 2026-10-29
0.29.1-r0-20261027 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261027 2026-10-27
0.29.1-r0-20261027-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261027-dev 2026-10-27
0.29.1-r0-20261026 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261026 2026-10-26
0.29.1-r0-20261026-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261026-dev 2026-10-26
0.29.1-r0-20261025 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261025 2026-10-25
0.29.1-r0-20261025-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261025-dev 2026-10-25
0.29.1-r0-20261024 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261024 2026-10-24
0.29.1-r0-20261024-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261024-dev 2026-10-24
0.29.1-r0-20261023 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261023 2026-10-23
0.29.1-r0-20261023-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261023-dev 2026-10-23
0.29.1-r0-20261022 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261022 2026-10-22
0.29.1-r0-20261022-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.1-r0-20261022-dev 2026-10-22
0.29.0-r0 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0 2026-10-22
0.29.0-r0-20261022 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261022 2026-10-22
0.29.0-r0-20261022-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261022-dev 2026-10-22
0.29.0-r0-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-dev 2026-10-22
0.29.0-r0-20261021 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261021 2026-10-21
0.29.0-r0-20261021-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261021-dev 2026-10-21
0.29.0-r0-20261020 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261020 2026-10-20
0.29.0-r0-20261020-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261020-dev 2026-10-20
0.29.0-r0-20261019 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261019 2026-10-19
0.29.0-r0-20261019-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261019-dev 2026-10-19
0.29.0-r0-20261018 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261018 2026-10-18
0.29.0-r0-20261018-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261018-dev 2026-10-18
0.29.0-r0-20261017 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261017 2026-10-17
0.29.0-r0-20261017-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261017-dev 2026-10-17
0.29.0-r0-20261016 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261016 2026-10-16
0.29.0-r0-20261016-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261016-dev 2026-10-16
0.29.0-r0-20261015 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261015 2026-10-15
0.29.0-r0-20261015-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261015-dev 2026-10-15
0.29.0-r0-20261014 ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261014 2026-10-14
0.29.0-r0-20261014-dev ghcr.io/rtvkiz/minimal-blackbox-exporter:0.29.0-r0-20261014-dev 2026-10-14

14 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20261020MPL-2.0 AND MIT
blackbox-exporter0.29.1-r0Apache-2.0
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0(MPL-2.0 AND MIT)
ca-certificates-bundle20261020-r0—
ca-certificates.yaml8061afafa65af5a9026707a8880e14120dd6f4a0Apache-2.0
images/blackbox-exporter/melange.yaml862101ee7af52b6dfb7db319fbf7c11793a3d433—
sha256:8c62377ec7b57f791b202cb812151217b7db3fa471ffd2d27644dc4b24caff34sha256:8c62377ec7b57f791b202cb812151217b7db3fa471ffd2d27644dc4b24caff34—
sha256:b762895309c571824a6b81049aad832fcc7f17b70d2d6c0bb14bbccb6d23cdb520230201—
wolfi20230201—
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31—
wolfi-baselayout.yamled415005c84750f03c4a9252137813734a224ae7Apache-2.0

Clean   No known vulnerabilities in the latest scan.

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-blackbox-exporter:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-blackbox-exporter:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-blackbox-exporter:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Observability images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.