← All images

flinkCaches, Queues & Messaging

Hardened Apache Flink stream processing engine with a custom jlink JRE.

Size 375 MBArch x86_64, aarch64User flink (65532)Updated 14 days agoUpstream flink.apache.org

Pull this image

docker pull ghcr.io/rtvkiz/minimal-flink:latest

Details

Repository
ghcr.io/rtvkiz/minimal-flink
Size (compressed)
375 MB
Built
2026-10-19T05:45:27Z (14 days ago)
Architectures
x86_64, aarch64
Primary package
flink
Entrypoint
/usr/bin/flink-entrypoint.sh
User
flink (65532)
Working dir
/opt/flink
Architectures
x86_64, aarch64
Environment
PATH=/usr/bin:/binJAVA_HOME=/usr/lib/jvm/java-21-minimalFLINK_HOME=/opt/flinkFLINK_LOG_DIR=/tmp/flink-logs
Labels
org.opencontainers.image.titleminimal-flink
org.opencontainers.image.descriptionHardened Apache Flink stream processing engine with a custom jlink JRE
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/flink
org.opencontainers.image.licensesApache-2.0
TagPullPublished
2ghcr.io/rtvkiz/minimal-flink:22026-10-27
2.3ghcr.io/rtvkiz/minimal-flink:2.32026-10-27
2.3.0-r0ghcr.io/rtvkiz/minimal-flink:2.3.0-r02026-10-27
2.3.0-r0-20261027ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610272026-10-27
latestghcr.io/rtvkiz/minimal-flink:latest2026-10-27
2-devghcr.io/rtvkiz/minimal-flink:2-dev2026-10-27
2.3-devghcr.io/rtvkiz/minimal-flink:2.3-dev2026-10-27
2.3.0-r0-20261027-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261027-dev2026-10-27
2.3.0-r0-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-dev2026-10-27
latest-devghcr.io/rtvkiz/minimal-flink:latest-dev2026-10-27
2.3.0-r0-20261026ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610262026-10-26
2.3.0-r0-20261026-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261026-dev2026-10-26
2.3.0-r0-20261025ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610252026-10-25
2.3.0-r0-20261025-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261025-dev2026-10-25
2.3.0-r0-20261024ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610242026-10-24
2.3.0-r0-20261024-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261024-dev2026-10-24
2.3.0-r0-20261023ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610232026-10-23
2.3.0-r0-20261023-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261023-dev2026-10-23
2.3.0-r0-20261022-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261022-dev2026-10-22
2.3.0-r0-20261022ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610222026-10-22
2.3.0-r0-20261021ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610212026-10-21
2.3.0-r0-20261021-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261021-dev2026-10-21
2.3.0-r0-20261020ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610202026-10-20
2.3.0-r0-20261020-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261020-dev2026-10-20
2.3.0-r0-20261019ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610192026-10-19
2.3.0-r0-20261019-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261019-dev2026-10-19
2.3.0-r0-20261018ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610182026-10-18
2.3.0-r0-20261018-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261018-dev2026-10-18
2.3.0-r0-20261017-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261017-dev2026-10-17
2.3.0-r0-20261017ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610172026-10-17
2.3.0-r0-20261016ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610162026-10-16
2.3.0-r0-20261016-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261016-dev2026-10-16
2.3.0-r0-20261015ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610152026-10-15
2.3.0-r0-20261015-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261015-dev2026-10-15
2.3.0-r0-20261014ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610142026-10-14
2.3.0-r0-20261014-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261014-dev2026-10-14
2.3.0-r0-20261013ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610132026-10-13
2.3.0-r0-20261013-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261013-dev2026-10-13
2.3.0-r0-20261012ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610122026-10-12
2.3.0-r0-20261012-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261012-dev2026-10-12
2.3.0-r0-20261011ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610112026-10-11
2.3.0-r0-20261011-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261011-dev2026-10-11
2.3.0-r0-20261010ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610102026-10-10
2.3.0-r0-20261010-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261010-dev2026-10-10
2.3.0-r0-20261009ghcr.io/rtvkiz/minimal-flink:2.3.0-r0-202610092026-10-09
2.3.0-r0-20261009-devghcr.io/rtvkiz/minimal-flink:2.3.0-r0-20261009-dev2026-10-09

144 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20260909MPL-2.0 AND MIT
alsa-lib1.2.16.1-r3LGPL-2.1-or-later
alsa-libv1.2.16.1LGPL-2.1-or-later
alsa-lib1.2.16.1-r3LGPL-2.1-or-later
alsa-lib1.2.16.1-r3—
alsa-lib.yaml60b1cc82a72fd620d5efea140cea3ce5094c02daApache-2.0
bash5.3-r14GPL-3.0-or-later
bash5.3-r14GPL-3.0-or-later
bash5.3-r14—
bash.yamlac7b15dc2695924986372a27cd7d6c4e029c5efaApache-2.0
brotliv1.2.0MIT
brotli.yaml2f5fe6ea87b357ddadf67308e9bf236db5a38797Apache-2.0
busybox1.38.0-r3GPL-2.0-only
busybox1.38.0-r3GPL-2.0-only
busybox1.38.0-r3—
busybox_mirror1_38_0GPL-2.0-only
busybox.yaml59d45eb49286129d8d21b2469befa3b55be4719bApache-2.0
bzip2.yamlf63bbdf9d614e097d69406526de00c3d32240bfbApache-2.0
ca-certificates-bundle20260909-r2MPL-2.0 AND MIT
ca-certificates-bundle20260909-r2(MPL-2.0 AND MIT)
ca-certificates-bundle20260909-r2—
ca-certificates.yamlf47c125470a19db0f450c2e4928a0db14f933d91Apache-2.0
flink2.3.0-r0Apache-2.0
freetype2.14.3-r7FTL OR GPL-2.0-or-later
freetype2.14.3-r7(FTL OR GPL-2.0-or-later)
freetype2.14.3-r7—
freetype.yaml6ff29abe842715e2edb5412c279fa078916c86deApache-2.0
freetype/freetypeVER-2-14-3FTL OR GPL-2.0-or-later
gcc.yaml794cf72f88e1b408eca5da0dbf5c5ed25543606dApache-2.0
giflib6.1.3-r2MIT
giflib6.1.3-r2MIT
giflib6.1.3-r2—
giflib.yaml4383d44f50cd6d32a3c23772086d916e5ec23aa0Apache-2.0
git/bashbash-5.3GPL-3.0-or-later
git/bzip2bzip2-1.0.8MPL-2.0 AND MIT
git/glibc34106fee698c83eb0af71d4d0381e66b399be746LGPL-2.1-or-later
glibc-2.442.44-r8LGPL-2.1-or-later
glibc-2.442.44-r8LGPL-2.1-or-later
glibc-2.442.44-r8—
glibc-2.44-locale-posix2.44-r8LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r8LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r8—
glibc-2.44.yaml3f73ace7dd5a203b7d080fd633d056d763e6760cApache-2.0
gnutools/gccreleases/gcc-16.2.0GPL-3.0-or-later WITH GCC-exception-3.1
images/flink/melange.yaml001386b4ef79e497dbc4aad04fd553dd7200d834—
lcms22.19.1-r3MIT AND GPL-3.0-only
lcms22.19.1-r3(MIT AND GPL-3.0-only)
lcms22.19.1-r3—
lcms2.yaml5ef459bc707fe91d3280ef097b9b6f5daf10421dApache-2.0
ld-linux-2.442.44-r8LGPL-2.1-or-later
ld-linux-2.442.44-r8LGPL-2.1-or-later
ld-linux-2.442.44-r8—
libbrotlicommon11.2.0-r6MIT
libbrotlicommon11.2.0-r6MIT
libbrotlicommon11.2.0-r6—
libbrotlidec11.2.0-r6MIT
libbrotlidec11.2.0-r6MIT
libbrotlidec11.2.0-r6—
libbz2-11.0.8-r25MPL-2.0 AND MIT
libbz2-11.0.8-r25(MPL-2.0 AND MIT)
libbz2-11.0.8-r25—
libcrypt1-2.442.44-r8LGPL-2.1-or-later
libcrypt1-2.442.44-r8LGPL-2.1-or-later
libcrypt1-2.442.44-r8—
libgcc16.2.0-r1GPL-3.0-or-later WITH GCC-exception-3.1
libgcc16.2.0-r1(GPL-3.0-or-later WITH GCC-exception-3.1)
libgcc16.2.0-r1—
libjpeg-turbo3.2.0-r5BSD-3-Clause AND IJG AND Zlib
libjpeg-turbo3.2.0BSD-3-Clause AND IJG AND Zlib
libjpeg-turbo3.2.0-r5(BSD-3-Clause AND IJG AND Zlib)
libjpeg-turbo3.2.0-r5—
libjpeg-turbo.yamldbe2414d714910c6e85ce4b235a1aa03db634394Apache-2.0
libpng1.6.59-r0libpng-2.0
libpngv1.6.59libpng-2.0
libpng1.6.59-r0libpng-2.0
libpng1.6.59-r0—
libpng.yaml5bb7c8fcf3fec1ac35944cf359043d18cc9afcccApache-2.0
libx111.8.14-r0XFree86-1.1
libx111.8.14-r0XFree86-1.1
libx111.8.14-r0—
libx11.yaml6ec407e65a7618036fe94ddbd4a9d0e1ab37eafdApache-2.0
libxau1.0.12-r9MIT
libxau1.0.12-r9MIT
libxau1.0.12-r9—
libxau.yaml0987ebc548bc183b3b15c94d7a33044b625ce00aApache-2.0
libxcb1.17.0-r17MIT
libxcb1.17.0-r17MIT
libxcb1.17.0-r17—
libxcb.yamle5b60e1537873ba325d9dc7ba63b5a32bfcc9593Apache-2.0
libxcrypt4.5.2-r6GPL-2.0-or-later AND LGPL-2.1-or-later
libxcryptv4.5.2GPL-2.0-or-later AND LGPL-2.1-or-later
libxcrypt4.5.2-r6(GPL-2.0-or-later AND LGPL-2.1-or-later)
libxcrypt4.5.2-r6—
libxcrypt.yaml94bc25975ca5bfdca755b5b507276667124bdf1fApache-2.0
libxdmcp1.1.5-r12MIT
libxdmcp1.1.5-r12MIT
libxdmcp1.1.5-r12—
libxdmcp.yamlf8b7bcd6378ac00c40c0e4c191b9689bd481e042Apache-2.0
libxext1.3.7-r4MIT
libxext1.3.7-r4MIT
libxext1.3.7-r4—
libxext.yamleaa0798c552da6cb966db38f2f95830946696554Apache-2.0
libxi1.8.4-r0MIT AND X11
libxi1.8.4-r0(MIT AND X11)
libxi1.8.4-r0—
libxi.yaml62afbe3e21e98073c96170fce2340b4bf8fbadadApache-2.0
libxrender0.9.13-r0XFree86-1.1
libxrender0.9.13-r0XFree86-1.1
libxrender0.9.13-r0—
libxrender.yamlbdf56362f206ff46c396fb13f35bb4f0eee7cf5bApache-2.0
libxtst1.2.6-r0XFree86-1.1
libxtst1.2.6-r0XFree86-1.1
libxtst1.2.6-r0—
libxtst.yamlb616101484a9fc0bdbbad4292c8c0e4632552f93Apache-2.0
Little-CMSlcms2.19.1MIT AND GPL-3.0-only
ncurses6.6.20261010-r0MIT
ncurses6.6.20261010-r0MIT
ncurses6.6.20261010-r0—
ncurses-snapshotsv6_6_20261010MIT
ncurses-terminfo-base6.6.20261010-r0MIT
ncurses-terminfo-base6.6.20261010-r0MIT
ncurses-terminfo-base6.6.20261010-r0—
ncurses.yamla8ea2f5f5980ccf40a6f6f34c6aeb358dfccc815Apache-2.0
p/giflib/code6.1.3MIT
sha256:643b61fc1512c21db1ebf93f1c6c17f37a5d621b413c801cb187c204b5095d94sha256:643b61fc1512c21db1ebf93f1c6c17f37a5d621b413c801cb187c204b5095d94—
sha256:fd0d41f73691b47dd94991c50b2f5617a466c7807a6c29f5ee847b1ee279e4b620230201—
wolfi20230201—
wolfi-baselayout20230201-r30MIT
wolfi-baselayout20230201-r30MIT
wolfi-baselayout20230201-r30—
wolfi-baselayout.yamla4472f6292a5e48d6d611bf24c6e119b1a483e66Apache-2.0
xorg/lib/libx11libX11-1.8.14XFree86-1.1
xorg/lib/libxaulibXau-1.0.12MIT
xorg/lib/libxcblibxcb-1.17.0MIT
xorg/lib/libxdmcplibXdmcp-1.1.5MIT
xorg/lib/libxextlibXext-1.3.7MIT
xorg/lib/libxilibXi-1.8.4MIT AND X11
xorg/lib/libxrenderlibXrender-0.9.13XFree86-1.1
xorg/lib/libxtstlibXtst-1.2.6XFree86-1.1
zlib1.3.2.1_rc20260921-r0MPL-2.0 AND MIT
zlib767c4c947852e143f582c85f14cf573411df1b35MPL-2.0 AND MIT
zlib1.3.2.1_rc20260921-r0(MPL-2.0 AND MIT)
zlib1.3.2.1_rc20260921-r0—
zlib.yaml75278be0abfe311aedfbf7c3933f6f0b819980e6Apache-2.0
3 medium0 fixable
CVESeverityPackageInstalledFixed in
CVE-2026-90781Mediumalsa-lib1.2.16.1-r3—
CVE-2026-96674Mediumalsa-lib1.2.16.1-r3—
CVE-2026-96675Mediumalsa-lib1.2.16.1-r3—

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-flink:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-flink:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-flink:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Caches, Queues & Messaging images

Weighing this against another provider? Thecomparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read themigration guide for what actually breaks when you switch.