etcd

etcd distributed key-value store backing Kubernetes control planes. Built from upstream source, cosign-signed with SBOM attestations, rebuilt daily.

Vulnerabilities
None
Compressed size
22 MB
Architectures
amd64, arm64
Default user
etcd (65532)
Last built
today
Upstream
etcd.io

Pull this image

docker pull ghcr.io/rtvkiz/minimal-etcd:latest
Repository
ghcr.io/rtvkiz/minimal-etcd
Digest
sha256:190b60413fca5560d8bb001c9cc61b65ce0af958291d1494799c1e03de8b13ad
Built at
2026-11-12T08:04:57Z
Primary package
etcd
Entrypoint
/usr/bin/etcd
Cmd
--listen-client-urls=http://0.0.0.0:2379 --advertise-client-urls=http://0.0.0.0:2379 --listen-peer-urls=http://0.0.0.0:2380 --initial-advertise-peer-urls=http://0.0.0.0:2380 --initial-cluster=default=http://0.0.0.0:2380
User
etcd (65532)
Working dir
/
Architectures
x86_64, aarch64
Environment
PATH=/usr/bin:/binETCD_DATA_DIR=/var/lib/etcd
Labels
org.opencontainers.image.titleminimal-etcd
org.opencontainers.image.descriptionHardened etcd distributed KV store built from source via melange
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/etcd
org.opencontainers.image.licensesApache-2.0
TagPullPublished
3 ghcr.io/rtvkiz/minimal-etcd:3 2026-11-12
3.7 ghcr.io/rtvkiz/minimal-etcd:3.7 2026-11-12
3.7.3-r0 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0 2026-11-12
3.7.3-r0-20261112 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261112 2026-11-12
latest ghcr.io/rtvkiz/minimal-etcd:latest 2026-11-12
3-dev ghcr.io/rtvkiz/minimal-etcd:3-dev 2026-11-12
3.7-dev ghcr.io/rtvkiz/minimal-etcd:3.7-dev 2026-11-12
3.7.3-r0-20261112-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261112-dev 2026-11-12
3.7.3-r0-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-dev 2026-11-12
latest-dev ghcr.io/rtvkiz/minimal-etcd:latest-dev 2026-11-12
3.7.3-r0-20261111-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261111-dev 2026-11-11
3.7.3-r0-20261111 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261111 2026-11-11
3.7.3-r0-20261110 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261110 2026-11-10
3.7.3-r0-20261110-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261110-dev 2026-11-10
3.7.3-r0-20261109 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261109 2026-11-09
3.7.3-r0-20261109-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261109-dev 2026-11-09
3.7.3-r0-20261108 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261108 2026-11-08
3.7.3-r0-20261108-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261108-dev 2026-11-08
3.7.3-r0-20261107 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261107 2026-11-07
3.7.3-r0-20261107-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261107-dev 2026-11-07
3.7.3-r0-20261106 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261106 2026-11-06
3.7.3-r0-20261106-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261106-dev 2026-11-06
3.7.3-r0-20261105 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261105 2026-11-05
3.7.3-r0-20261105-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261105-dev 2026-11-05
3.7.3-r0-20261104 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261104 2026-11-04
3.7.3-r0-20261104-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261104-dev 2026-11-04
3.7.3-r0-20261029 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261029 2026-10-29
3.7.3-r0-20261029-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261029-dev 2026-10-29
3.7.3-r0-20261027 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261027 2026-10-27
3.7.3-r0-20261027-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261027-dev 2026-10-27
3.7.3-r0-20261026 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261026 2026-10-26
3.7.3-r0-20261026-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261026-dev 2026-10-26
3.7.3-r0-20261025 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261025 2026-10-25
3.7.3-r0-20261025-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261025-dev 2026-10-25
3.7.3-r0-20261024 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261024 2026-10-24
3.7.3-r0-20261024-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261024-dev 2026-10-24
3.7.3-r0-20261023 ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261023 2026-10-23
3.7.3-r0-20261023-dev ghcr.io/rtvkiz/minimal-etcd:3.7.3-r0-20261023-dev 2026-10-23
3.7.2-r0 ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0 2026-10-23
3.7.2-r0-20261023 ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261023 2026-10-23
3.7.2-r0-20261023-dev ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261023-dev 2026-10-23
3.7.2-r0-dev ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-dev 2026-10-23
3.7.2-r0-20261022 ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261022 2026-10-22
3.7.2-r0-20261022-dev ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261022-dev 2026-10-22
3.7.2-r0-20261021 ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261021 2026-10-21
3.7.2-r0-20261021-dev ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261021-dev 2026-10-21
3.7.2-r0-20261020 ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261020 2026-10-20
3.7.2-r0-20261020-dev ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261020-dev 2026-10-20
3.7.2-r0-20261019 ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261019 2026-10-19
3.7.2-r0-20261019-dev ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261019-dev 2026-10-19
3.7.2-r0-20261018 ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261018 2026-10-18
3.7.2-r0-20261018-dev ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261018-dev 2026-10-18
3.7.2-r0-20261016 ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261016 2026-10-16
3.7.2-r0-20261017 ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261017 2026-10-16
3.7.2-r0-20261016-dev ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261016-dev 2026-10-16
3.7.2-r0-20261017-dev ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261017-dev 2026-10-16
3.7.2-r0-20261015 ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261015 2026-10-15
3.7.2-r0-20261015-dev ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261015-dev 2026-10-15
3.7.2-r0-20261014 ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261014 2026-10-14
3.7.2-r0-20261014-dev ghcr.io/rtvkiz/minimal-etcd:3.7.2-r0-20261014-dev 2026-10-14

14 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20261020MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0(MPL-2.0 AND MIT)
ca-certificates-bundle20261020-r0—
ca-certificates.yaml8061afafa65af5a9026707a8880e14120dd6f4a0Apache-2.0
etcd3.7.3-r0Apache-2.0
images/etcd/melange.yaml862101ee7af52b6dfb7db319fbf7c11793a3d433—
sha256:a01fd97b56a24631430336f138566d680364b6f60cb73116fd8c51d73bb7a4eb20230201—
sha256:dc827cd1dd0105b9363cebb046686a5775a192cd57a6f3fe5592655609dc88edsha256:dc827cd1dd0105b9363cebb046686a5775a192cd57a6f3fe5592655609dc88ed—
wolfi20230201—
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31—
wolfi-baselayout.yamled415005c84750f03c4a9252137813734a224ae7Apache-2.0

Clean   No known vulnerabilities in the latest scan.

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-etcd:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-etcd:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-etcd:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Infrastructure images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.