fluent-bit

Fluent Bit lightweight log and metrics processor and forwarder for edge and Kubernetes. Built from source, signed and rebuilt daily against CVE fixes.

Vulnerabilities
None
Compressed size
48 MB
Architectures
amd64, arm64
Default user
fluent-bit (65532)
Last built
today
Upstream
fluentbit.io

Pull this image

docker pull ghcr.io/rtvkiz/minimal-fluent-bit:latest
Repository
ghcr.io/rtvkiz/minimal-fluent-bit
Digest
sha256:0d121ff5fac3bbeef5fd7d4f9587f0f981201d5101312a4aa6aad3ea013a1ddf
Built at
2026-11-12T08:42:02Z
Primary package
fluent-bit
Entrypoint
/usr/bin/fluent-bit
Cmd
-c /etc/fluent-bit/fluent-bit.yaml
User
fluent-bit (65532)
Working dir
/
Architectures
x86_64, aarch64
Environment
PATH=/usr/bin:/bin
Labels
org.opencontainers.image.titleminimal-fluent-bit
org.opencontainers.image.descriptionHardened Fluent Bit log processor built from source
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/fluent-bit
org.opencontainers.image.licensesApache-2.0
TagPullPublished
5 ghcr.io/rtvkiz/minimal-fluent-bit:5 2026-11-12
5.2 ghcr.io/rtvkiz/minimal-fluent-bit:5.2 2026-11-12
5.2.0-r0 ghcr.io/rtvkiz/minimal-fluent-bit:5.2.0-r0 2026-11-12
5.2.0-r0-20261112 ghcr.io/rtvkiz/minimal-fluent-bit:5.2.0-r0-20261112 2026-11-12
latest ghcr.io/rtvkiz/minimal-fluent-bit:latest 2026-11-12
5-dev ghcr.io/rtvkiz/minimal-fluent-bit:5-dev 2026-11-12
5.2-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.2-dev 2026-11-12
5.2.0-r0-20261112-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.2.0-r0-20261112-dev 2026-11-12
5.2.0-r0-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.2.0-r0-dev 2026-11-12
latest-dev ghcr.io/rtvkiz/minimal-fluent-bit:latest-dev 2026-11-12
5.2.0-r0-20261111-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.2.0-r0-20261111-dev 2026-11-11
5.2.0-r0-20261111 ghcr.io/rtvkiz/minimal-fluent-bit:5.2.0-r0-20261111 2026-11-11
5.2.0-r0-20261110 ghcr.io/rtvkiz/minimal-fluent-bit:5.2.0-r0-20261110 2026-11-10
5.2.0-r0-20261110-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.2.0-r0-20261110-dev 2026-11-10
5.2.0-r0-20261109 ghcr.io/rtvkiz/minimal-fluent-bit:5.2.0-r0-20261109 2026-11-09
5.2.0-r0-20261109-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.2.0-r0-20261109-dev 2026-11-09
5.1 ghcr.io/rtvkiz/minimal-fluent-bit:5.1 2026-11-09
5.1.5-r0 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0 2026-11-09
5.1.5-r0-20261109 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261109 2026-11-09
5.1.5-r0-20261108 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261108 2026-11-08
5.1-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1-dev 2026-11-08
5.1.5-r0-20261108-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261108-dev 2026-11-08
5.1.5-r0-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-dev 2026-11-08
5.1.5-r0-20261107 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261107 2026-11-07
5.1.5-r0-20261107-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261107-dev 2026-11-07
5.1.5-r0-20261106 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261106 2026-11-06
5.1.5-r0-20261106-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261106-dev 2026-11-06
5.1.5-r0-20261105 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261105 2026-11-05
5.1.5-r0-20261105-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261105-dev 2026-11-05
5.1.5-r0-20261104 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261104 2026-11-04
5.1.5-r0-20261104-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261104-dev 2026-11-04
5.1.5-r0-20261027-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261027-dev 2026-10-27
5.1.5-r0-20261027 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261027 2026-10-27
5.1.5-r0-20261026 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261026 2026-10-26
5.1.5-r0-20261026-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261026-dev 2026-10-26
5.1.5-r0-20261025 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261025 2026-10-25
5.1.5-r0-20261025-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261025-dev 2026-10-25
5.1.5-r0-20261024 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261024 2026-10-24
5.1.5-r0-20261024-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261024-dev 2026-10-24
5.1.5-r0-20261023 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261023 2026-10-23
5.1.5-r0-20261023-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.5-r0-20261023-dev 2026-10-23
5.1.4-r0 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0 2026-10-22
5.1.4-r0-20261022 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261022 2026-10-22
5.1.4-r0-20261022-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261022-dev 2026-10-22
5.1.4-r0-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-dev 2026-10-22
5.1.4-r0-20261021 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261021 2026-10-21
5.1.4-r0-20261021-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261021-dev 2026-10-21
5.1.4-r0-20261020 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261020 2026-10-20
5.1.4-r0-20261020-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261020-dev 2026-10-20
5.1.4-r0-20261019 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261019 2026-10-19
5.1.4-r0-20261019-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261019-dev 2026-10-19
5.1.4-r0-20261018 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261018 2026-10-18
5.1.4-r0-20261018-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261018-dev 2026-10-18
5.1.4-r0-20261016 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261016 2026-10-16
5.1.4-r0-20261017 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261017 2026-10-16
5.1.4-r0-20261016-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261016-dev 2026-10-16
5.1.4-r0-20261017-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261017-dev 2026-10-16
5.1.4-r0-20261015 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261015 2026-10-15
5.1.4-r0-20261015-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.4-r0-20261015-dev 2026-10-15
5.1.3-r0 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.3-r0 2026-10-14
5.1.3-r0-20261014 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.3-r0-20261014 2026-10-14
5.1.3-r0-20261014-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.3-r0-20261014-dev 2026-10-14
5.1.3-r0-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.3-r0-dev 2026-10-14
5.1.3-r0-20261013 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.3-r0-20261013 2026-10-13
5.1.3-r0-20261013-dev ghcr.io/rtvkiz/minimal-fluent-bit:5.1.3-r0-20261013-dev 2026-10-13
5.1.3-r0-20261012 ghcr.io/rtvkiz/minimal-fluent-bit:5.1.3-r0-20261012 2026-10-12

185 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20261020MPL-2.0 AND MIT
brotliv1.2.1MIT
brotli.yamlf5ef816d1cb2bd0e165a402c4e8a4c4622464bf3Apache-2.0
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0(MPL-2.0 AND MIT)
ca-certificates-bundle20261020-r0—
ca-certificates.yaml8061afafa65af5a9026707a8880e14120dd6f4a0Apache-2.0
curlcurl-8_23_0MIT
curl.yaml010cb3d3ce5812142c1ff59d0b260650190c6241Apache-2.0
cyrus-saslcyrus-sasl-2.1.28BSD-3-Clause
cyrus-sasl-heimdal-libs2.1.28-r58BSD-3-Clause
cyrus-sasl-heimdal-libs2.1.28-r58BSD-3-Clause
cyrus-sasl-heimdal-libs2.1.28-r58—
cyrus-sasl-heimdal.yaml6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78Apache-2.0
e2fsprogsv1.47.4GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT
e2fsprogs.yamlb89fefe984e6541788116bd15d4f8dce3dc021a9Apache-2.0
fluent-bit5.2.0-r0Apache-2.0
gcc.yaml4d188060cbd00821a95f1ef60605da4817e781bbApache-2.0
gdbm1.26-r9GPL-3.0-or-later
gdbm1.26-r9GPL-3.0-or-later
gdbm1.26-r9—
gdbm.yamlbdc197227f39597f43727c03854efbb4e834c5efApache-2.0
git/gdbmv1.26GPL-3.0-or-later
git/libunistringv1.5GPL-2.0-or-later OR LGPL-3.0-or-later
git/readlinereadline-8.3GPL-3.0-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16—
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16—
glibc-2.44.yaml69c2b75e0711c38be3c5881e3a141667ccf54341Apache-2.0
gnutools/gccreleases/gcc-16.2.0GPL-3.0-or-later WITH GCC-exception-3.1
gnutools/glibc47e2b570410fab606de29f550534a721184852c3LGPL-2.1-or-later
heimdalheimdal-7.8.0BSD-3-Clause
heimdal-libs7.8.0-r55BSD-3-Clause
heimdal-libs7.8.0-r55BSD-3-Clause
heimdal-libs7.8.0-r55—
heimdal.yaml98d0e0fa47c531020de219448a43d120a8c0360aApache-2.0
images/fluent-bit/melange.yaml862101ee7af52b6dfb7db319fbf7c11793a3d433—
keyutils-libs1.6.3-r41GPL-2.0-or-later OR LGPL-2.0-or-later
keyutils-libs1.6.3-r41(GPL-2.0-or-later OR LGPL-2.0-or-later)
keyutils-libs1.6.3-r41—
keyutils.yaml014624f79627768df6f5ff49f4265a7057c2e206Apache-2.0
krb5krb5-1.22.2-finalMIT
krb5-conf1.0-r10MIT
krb5-conf1.0-r10MIT
krb5-conf1.0-r10—
krb5-conf.yamlf0f4cc5b0d900deaf94dfdcd841e289db97111e1Apache-2.0
krb5-libs1.22.2-r6MIT
krb5-libs1.22.2-r6MIT
krb5-libs1.22.2-r6—
krb5.yamld8c1739b8ac0376433f810660cfe5c19987e66d2Apache-2.0
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16—
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3—
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3—
libbrotlienc11.2.1-r3MIT
libbrotlienc11.2.1-r3MIT
libbrotlienc11.2.1-r3—
libcom_err1.47.4-r5GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT
libcom_err1.47.4-r5(GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT)
libcom_err1.47.4-r5—
libcrypt1-2.442.44-r16LGPL-2.1-or-later
libcrypt1-2.442.44-r16LGPL-2.1-or-later
libcrypt1-2.442.44-r16—
libcurl-openssl48.23.0-r3MIT
libcurl-openssl48.23.0-r3MIT
libcurl-openssl48.23.0-r3—
libgcc16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libgcc16.2.0-r3(GPL-3.0-or-later WITH GCC-exception-3.1)
libgcc16.2.0-r3—
libidn/libidn2v2.3.8GPL-2.0-or-later AND LGPL-3.0-or-later
libidn22.3.8-r12GPL-2.0-or-later AND LGPL-3.0-or-later
libidn22.3.8-r12(GPL-2.0-or-later AND LGPL-3.0-or-later)
libidn22.3.8-r12—
libidn2.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
libldap-2.72.7.2-r0OLDAP-2.8
libldap-2.72.7.2-r0OLDAP-2.8
libldap-2.72.7.2-r0—
libnghttp2-141.71.0-r0MIT
libnghttp2-141.71.0-r0MIT
libnghttp2-141.71.0-r0—
libpsl0.23.3-r4MIT
libpsl0.23.3MIT
libpsl0.23.3-r4MIT
libpsl0.23.3-r4—
libpsl.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
libstdc++16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libstdc++16.2.0-r3(GPL-3.0-or-later WITH GCC-exception-3.1)
libstdc++16.2.0-r3—
libunistring1.5-r1GPL-2.0-or-later OR LGPL-3.0-or-later
libunistring1.5-r1(GPL-2.0-or-later OR LGPL-3.0-or-later)
libunistring1.5-r1—
libunistring.yamld8c1739b8ac0376433f810660cfe5c19987e66d2Apache-2.0
libverto0.3.2-r11MIT
libverto0.3.2MIT
libverto0.3.2-r11MIT
libverto0.3.2-r11—
libverto.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
libxcrypt4.5.2-r8GPL-2.0-or-later AND LGPL-2.1-or-later
libxcryptv4.5.2GPL-2.0-or-later AND LGPL-2.1-or-later
libxcrypt4.5.2-r8(GPL-2.0-or-later AND LGPL-2.1-or-later)
libxcrypt4.5.2-r8—
libxcrypt.yamlb9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518Apache-2.0
libyaml0.2.5MIT
lmdb0.9.35-r3OLDAP-2.8
lmdbLMDB_0.9.35OLDAP-2.8
lmdb0.9.35-r3OLDAP-2.8
lmdb0.9.35-r3—
lmdb.yamla4a523651db588c0ec27f7880438828e0eefec5aApache-2.0
ncurses6.6.20261107-r0MIT
ncurses6.6.20261107-r0MIT
ncurses6.6.20261107-r0—
ncurses-snapshotsv6_6_20261107MIT
ncurses-terminfo-base6.6.20261107-r0MIT
ncurses-terminfo-base6.6.20261107-r0MIT
ncurses-terminfo-base6.6.20261107-r0—
ncurses.yaml57b90c0084b0bc101663cdfcaa44f4ce83312443Apache-2.0
nghttp2v1.71.0MIT
nghttp2.yaml153ee2bd742f744ddedf5c4a97110fa46307574bApache-2.0
nghttp31.19.0-r0MIT
nghttp3v1.19.0MIT
nghttp31.19.0-r0MIT
nghttp31.19.0-r0—
nghttp3.yaml10e9291816e1a18eee8044d5c02177de477e1f29Apache-2.0
ngtcp21.26.0-r0MIT
ngtcp2v1.26.0MIT
ngtcp21.26.0-r0MIT
ngtcp21.26.0-r0—
ngtcp2.yamla3a25ebdd1c3e71a190ca09e4f5a7beb6732dc78Apache-2.0
openldapOPENLDAP_REL_ENG_2_7_2OLDAP-2.8
openldap-2.7.yaml0906e934a58fa878f8d3cfa650c6aab092cc7f26Apache-2.0
opensslopenssl-4.1.0Apache-2.0
opensslopenssl-4.0.3Apache-2.0
opensslopenssl-3.6.5Apache-2.0
openssl-3.6-libcrypto3.6.5-r6Apache-2.0
openssl-3.6-libcrypto3.6.5-r6Apache-2.0
openssl-3.6-libcrypto3.6.5-r6—
openssl-3.6-libssl3.6.5-r6Apache-2.0
openssl-3.6-libssl3.6.5-r6Apache-2.0
openssl-3.6-libssl3.6.5-r6—
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-4.0-libcrypto4.0.3-r8—
openssl-4.0-libssl4.0.3-r8Apache-2.0
openssl-4.0-libssl4.0.3-r8Apache-2.0
openssl-4.0-libssl4.0.3-r8—
openssl-4.0.yaml53fb2f6751f832fa61ddba06cb8a40dbba5f409fApache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0—
openssl-provider-legacy-allowed.yamlaeae4801330be6fd269d5ed5640dc37b58ccab09Apache-2.0
openssl.yaml106006908276f73e5d13ceca9bc7038ea2d46446Apache-2.0
pub/scm/linux/kernel/git/dhowells/keyutilsv1.6.3GPL-2.0-or-later OR LGPL-2.0-or-later
readline8.3-r3GPL-3.0-or-later
readline8.3-r3GPL-3.0-or-later
readline8.3-r3—
readline.yaml20a5359ac0a7a6aca23efa343f0f29c8d3ea1453Apache-2.0
sha256:7ba6d667c8919d9dbaf4c4fdae310eea92d9153bd343280f29d79ee8dab4ab9620230201—
sha256:da68522159c49e7ffc3e4d856a7e657c2de275137383b6bab11e0395aa93631fsha256:da68522159c49e7ffc3e4d856a7e657c2de275137383b6bab11e0395aa93631f—
sqlite3.54.1—
sqlite-libs3.54.1-r0blessing
sqlite-libs3.54.1-r0blessing
sqlite-libs3.54.1-r0—
sqlite.yamlb0ca8c95606371be2557980059c10b34df30fa9fApache-2.0
wolfi20230201—
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31—
wolfi-baselayout.yamled415005c84750f03c4a9252137813734a224ae7Apache-2.0
yaml0.2.5-r12MIT
yaml0.2.5-r12MIT
yaml0.2.5-r12—
yaml.yamla47eef19c8de84e8b2d843ace686da335a870468Apache-2.0
zlib1.3.2.1_rc20260921-r2MPL-2.0 AND MIT
zlib767c4c947852e143f582c85f14cf573411df1b35MPL-2.0 AND MIT
zlib1.3.2.1_rc20260921-r2(MPL-2.0 AND MIT)
zlib1.3.2.1_rc20260921-r2—
zlib.yaml5aeb575ed7ca64fb21dfda042e170d08f1654bbcApache-2.0

Clean   No known vulnerabilities in the latest scan.

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-fluent-bit:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-fluent-bit:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-fluent-bit:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Observability images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.