consul Infrastructure

Shell-less HashiCorp Consul (BUSL-1.1) built from source via melange.

Size 122 MB Arch x86_64, aarch64 User consul (65532) Updated today Upstream www.consul.io

Pull this image

docker pull ghcr.io/rtvkiz/minimal-consul:latest

Details

Repository: ghcr.io/rtvkiz/minimal-consul
Size (compressed): 122 MB
Built: 2026-09-29T00:31:44Z (today)
Architectures: x86_64, aarch64
Primary package: consul

Entrypoint

/usr/bin/consul

Cmd

agent -dev -client=0.0.0.0

User

consul (65532)

Working dir

Architectures

x86_64, aarch64

Environment

Labels

org.opencontainers.image.title	minimal-consul
org.opencontainers.image.description	Hardened shell-less HashiCorp Consul (BUSL-1.1) built from source via melange with daily CVE patches
org.opencontainers.image.url	https://github.com/rtvkiz/minimal
org.opencontainers.image.source	https://github.com/rtvkiz/minimal/tree/main/images/consul
org.opencontainers.image.licenses	BUSL-1.1

Tag	Pull	Published
2	ghcr.io/rtvkiz/minimal-consul:2	2026-09-29
2.0	ghcr.io/rtvkiz/minimal-consul:2.0	2026-09-29
2.0.4-r0	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0	2026-09-29
2.0.4-r0-20260929	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260929	2026-09-29
latest	ghcr.io/rtvkiz/minimal-consul:latest	2026-09-29
2-dev	ghcr.io/rtvkiz/minimal-consul:2-dev	2026-09-29
2.0-dev	ghcr.io/rtvkiz/minimal-consul:2.0-dev	2026-09-29
2.0.4-r0-20260929-dev	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260929-dev	2026-09-29
2.0.4-r0-dev	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-dev	2026-09-29
latest-dev	ghcr.io/rtvkiz/minimal-consul:latest-dev	2026-09-29
2.0.4-r0-20260928	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260928	2026-09-28
2.0.4-r0-20260928-dev	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260928-dev	2026-09-28
2.0.4-r0-20260927	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260927	2026-09-27
2.0.4-r0-20260927-dev	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260927-dev	2026-09-27
2.0.4-r0-20260926	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260926	2026-09-26
2.0.4-r0-20260926-dev	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260926-dev	2026-09-26
2.0.4-r0-20260925	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260925	2026-09-25
2.0.4-r0-20260925-dev	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260925-dev	2026-09-25
2.0.4-r0-20260924	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260924	2026-09-24
2.0.4-r0-20260924-dev	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260924-dev	2026-09-24
2.0.4-r0-20260923	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260923	2026-09-23
2.0.4-r0-20260923-dev	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260923-dev	2026-09-23
2.0.4-r0-20260922	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260922	2026-09-22
2.0.4-r0-20260922-dev	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260922-dev	2026-09-22
2.0.4-r0-20260921	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260921	2026-09-21
2.0.4-r0-20260921-dev	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260921-dev	2026-09-21
2.0.4-r0-20260920	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260920	2026-09-20
2.0.4-r0-20260920-dev	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260920-dev	2026-09-20
2.0.4-r0-20260919	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260919	2026-09-19
2.0.4-r0-20260919-dev	ghcr.io/rtvkiz/minimal-consul:2.0.4-r0-20260919-dev	2026-09-19

14 packages in the image, resolved from the SPDX SBOM.

Package	Version	License
alpine/ca-certificates	20260909	MPL-2.0 AND MIT
ca-certificates-bundle	20260909-r1	MPL-2.0 AND MIT
ca-certificates-bundle	20260909-r1	(MPL-2.0 AND MIT)
ca-certificates-bundle	20260909-r1	—
ca-certificates.yaml	ee3eac73dda22e8dd32fa5fb3e3a1712a6e812d7	Apache-2.0
consul	2.0.4-r0	BUSL-1.1
images/consul/melange.yaml	1bce6e63ea891bcced1fda6bdc6813ced3474c4e	—
sha256:9ce187e050b211756c600a346e6c4d7a08df2fcf0e100733a434aeebf9e0d623	sha256:9ce187e050b211756c600a346e6c4d7a08df2fcf0e100733a434aeebf9e0d623	—
sha256:dca11df35b8bf9d98f9268fe7e2d21ddf1acb1994e447f29e8895f42febe6bac	20230201	—
wolfi	20230201	—
wolfi-baselayout	20230201-r30	MIT
wolfi-baselayout	20230201-r30	MIT
wolfi-baselayout	20230201-r30	—
wolfi-baselayout.yaml	a4472f6292a5e48d6d611bf24c6e119b1a483e66	Apache-2.0

0 fixable

CVE	Severity	Package	Installed	Fixed in
GO-2026-5932	Unknown	golang.org/x/crypto	v0.57.0	—

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-consul:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-consul:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-consul:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Infrastructure images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.

org.opencontainers.image.title	minimal-consul-dev
org.opencontainers.image.description	Dev variant of minimal-consul (BUSL-1.1): same Consul + shell + curl/openssl/dig/jq. Not for production.
org.opencontainers.image.url	https://github.com/rtvkiz/minimal
org.opencontainers.image.source	https://github.com/rtvkiz/minimal/tree/main/images/consul
org.opencontainers.image.licenses	BUSL-1.1
dev.minimal.variant	dev