mariadb Databases

MariaDB LTS built from source via melange.

Size 95 MB Arch x86_64, aarch64 User mysql (65532) Updated today Upstream mariadb.org

Pull this image

docker pull ghcr.io/rtvkiz/minimal-mariadb:latest

Details

Repository: ghcr.io/rtvkiz/minimal-mariadb
Size (compressed): 95 MB
Built: 2026-09-29T00:29:40Z (today)
Architectures: x86_64, aarch64
Primary package: mariadb

Entrypoint

/usr/bin/docker-entrypoint.sh

User

mysql (65532)

Working dir

Architectures

x86_64, aarch64

Environment

Labels

org.opencontainers.image.title	minimal-mariadb
org.opencontainers.image.description	Hardened MariaDB LTS image built from source via melange with daily CVE patches
org.opencontainers.image.url	https://github.com/rtvkiz/minimal
org.opencontainers.image.source	https://github.com/rtvkiz/minimal/tree/main/images/mariadb
org.opencontainers.image.licenses	Apache-2.0

Tag	Pull	Published
11	ghcr.io/rtvkiz/minimal-mariadb:11	2026-09-29
11.4	ghcr.io/rtvkiz/minimal-mariadb:11.4	2026-09-29
11.4.13-r0	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0	2026-09-29
11.4.13-r0-20260929	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260929	2026-09-29
latest	ghcr.io/rtvkiz/minimal-mariadb:latest	2026-09-29
11-dev	ghcr.io/rtvkiz/minimal-mariadb:11-dev	2026-09-29
11.4-dev	ghcr.io/rtvkiz/minimal-mariadb:11.4-dev	2026-09-29
11.4.13-r0-20260929-dev	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260929-dev	2026-09-29
11.4.13-r0-dev	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-dev	2026-09-29
latest-dev	ghcr.io/rtvkiz/minimal-mariadb:latest-dev	2026-09-29
11.4.13-r0-20260928	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260928	2026-09-28
11.4.13-r0-20260928-dev	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260928-dev	2026-09-28
11.4.13-r0-20260927	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260927	2026-09-27
11.4.13-r0-20260927-dev	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260927-dev	2026-09-27
11.4.13-r0-20260926	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260926	2026-09-26
11.4.13-r0-20260926-dev	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260926-dev	2026-09-26
11.4.13-r0-20260925	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260925	2026-09-25
11.4.13-r0-20260925-dev	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260925-dev	2026-09-25
11.4.13-r0-20260924	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260924	2026-09-24
11.4.13-r0-20260924-dev	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260924-dev	2026-09-24
11.4.13-r0-20260923	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260923	2026-09-23
11.4.13-r0-20260923-dev	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260923-dev	2026-09-23
11.4.13-r0-20260922	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260922	2026-09-22
11.4.13-r0-20260922-dev	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260922-dev	2026-09-22
11.4.13-r0-20260921	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260921	2026-09-21
11.4.13-r0-20260921-dev	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260921-dev	2026-09-21
11.4.13-r0-20260920	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260920	2026-09-20
11.4.13-r0-20260920-dev	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260920-dev	2026-09-20
11.4.13-r0-20260919	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260919	2026-09-19
11.4.13-r0-20260919-dev	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260919-dev	2026-09-19
11.4.13-r0-20260918	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260918	2026-09-18
11.4.13-r0-20260918-dev	ghcr.io/rtvkiz/minimal-mariadb:11.4.13-r0-20260918-dev	2026-09-18

134 packages in the image, resolved from the SPDX SBOM.

Package	Version	License
alpine/ca-certificates	20260909	MPL-2.0 AND MIT
brotli	v1.2.0	MIT
brotli.yaml	9db3aeed30b6359289528ef564a4909f78faeac9	Apache-2.0
busybox	1.38.0-r2	GPL-2.0-only
busybox	1.38.0-r2	GPL-2.0-only
busybox	1.38.0-r2	—
busybox_mirror	1_38_0	GPL-2.0-only
busybox.yaml	71881f600839f8cdaced7ecf938b4efc90a09c33	Apache-2.0
ca-certificates-bundle	20260909-r1	MPL-2.0 AND MIT
ca-certificates-bundle	20260909-r1	(MPL-2.0 AND MIT)
ca-certificates-bundle	20260909-r1	—
ca-certificates.yaml	ee3eac73dda22e8dd32fa5fb3e3a1712a6e812d7	Apache-2.0
e2fsprogs	v1.47.4	GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT
e2fsprogs.yaml	b99a75e3a9c26fa0720cd2cf394093c19d279152	Apache-2.0
gcc.yaml	794cf72f88e1b408eca5da0dbf5c5ed25543606d	Apache-2.0
git/glibc	b4f51887c48ac82acfdb13f96d9eab5d120cb2b7	LGPL-2.1-or-later
glibc-2.44	2.44-r7	LGPL-2.1-or-later
glibc-2.44	2.44-r7	LGPL-2.1-or-later
glibc-2.44	2.44-r7	—
glibc-2.44-locale-posix	2.44-r7	LGPL-2.1-or-later
glibc-2.44-locale-posix	2.44-r7	LGPL-2.1-or-later
glibc-2.44-locale-posix	2.44-r7	—
glibc-2.44.yaml	2f4fbb70b55156f2d4cabff471b50dab0e75aa89	Apache-2.0
gnutools/gcc	releases/gcc-16.2.0	GPL-3.0-or-later WITH GCC-exception-3.1
images/mariadb/melange.yaml	1bce6e63ea891bcced1fda6bdc6813ced3474c4e	—
keyutils-libs	1.6.3-r40	GPL-2.0-or-later OR LGPL-2.0-or-later
keyutils-libs	1.6.3-r40	(GPL-2.0-or-later OR LGPL-2.0-or-later)
keyutils-libs	1.6.3-r40	—
keyutils.yaml	2e53452a8c1a05c81d7beb0148e1b8d73fd088c3	Apache-2.0
krb5	krb5-1.22.2-final	MIT
krb5-conf	1.0-r9	MIT
krb5-conf	1.0-r9	MIT
krb5-conf	1.0-r9	—
krb5-conf.yaml	bb37bc90f076f9eb2a12980e43c3f12673133835	Apache-2.0
krb5-libs	1.22.2-r4	MIT
krb5-libs	1.22.2-r4	MIT
krb5-libs	1.22.2-r4	—
krb5.yaml	9a7875e9cfcbd59186154753bceb1d973e939c32	Apache-2.0
ld-linux-2.44	2.44-r7	LGPL-2.1-or-later
ld-linux-2.44	2.44-r7	LGPL-2.1-or-later
ld-linux-2.44	2.44-r7	—
libbrotlicommon1	1.2.0-r5	MIT
libbrotlicommon1	1.2.0-r5	MIT
libbrotlicommon1	1.2.0-r5	—
libbrotlidec1	1.2.0-r5	MIT
libbrotlidec1	1.2.0-r5	MIT
libbrotlidec1	1.2.0-r5	—
libbrotlienc1	1.2.0-r5	MIT
libbrotlienc1	1.2.0-r5	MIT
libbrotlienc1	1.2.0-r5	—
libcom_err	1.47.4-r2	GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT
libcom_err	1.47.4-r2	(GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT)
libcom_err	1.47.4-r2	—
libcrypt1-2.44	2.44-r7	LGPL-2.1-or-later
libcrypt1-2.44	2.44-r7	LGPL-2.1-or-later
libcrypt1-2.44	2.44-r7	—
libcrypto3	3.6.4-r8	Apache-2.0
libcrypto3	3.6.4-r8	Apache-2.0
libcrypto3	3.6.4-r8	—
libgcc	16.2.0-r1	GPL-3.0-or-later WITH GCC-exception-3.1
libgcc	16.2.0-r1	(GPL-3.0-or-later WITH GCC-exception-3.1)
libgcc	16.2.0-r1	—
liblz4-1	1.10.0-r10	BSD-2-Clause AND GPL-2.0-only
liblz4-1	1.10.0-r10	(BSD-2-Clause AND GPL-2.0-only)
liblz4-1	1.10.0-r10	—
libpcre2-8-0	10.49-r0	BSD-3-Clause
libpcre2-8-0	10.49-r0	BSD-3-Clause
libpcre2-8-0	10.49-r0	—
libssl3	3.6.4-r8	Apache-2.0
libssl3	3.6.4-r8	Apache-2.0
libssl3	3.6.4-r8	—
libstdc++	16.2.0-r1	GPL-3.0-or-later WITH GCC-exception-3.1
libstdc++	16.2.0-r1	(GPL-3.0-or-later WITH GCC-exception-3.1)
libstdc++	16.2.0-r1	—
libverto	0.3.2-r8	MIT
libverto	0.3.2	MIT
libverto	0.3.2-r8	MIT
libverto	0.3.2-r8	—
libverto.yaml	12f50f8d25640a0ca5ce3ac4cb6a2b8c472ab7a6	Apache-2.0
libxcrypt	4.5.2-r5	GPL-2.0-or-later AND LGPL-2.1-or-later
libxcrypt	v4.5.2	GPL-2.0-or-later AND LGPL-2.1-or-later
libxcrypt	4.5.2-r5	(GPL-2.0-or-later AND LGPL-2.1-or-later)
libxcrypt	4.5.2-r5	—
libxcrypt.yaml	e199a2ea58e2f64dce226ac5edb148fa8ff72664	Apache-2.0
libzstd1	1.5.7-r10	BSD-2-Clause AND GPL-2.0-only
libzstd1	1.5.7-r10	(BSD-2-Clause AND GPL-2.0-only)
libzstd1	1.5.7-r10	—
lz4	v1.10.0	BSD-2-Clause AND GPL-2.0-only
lz4.yaml	5aa675252319732c629e6b61526a86c452f6a81a	Apache-2.0
mariadb	11.4.13-r0	GPL-2.0-only
ncurses	6.6.20260926-r0	MIT
ncurses	6.6.20260926-r0	MIT
ncurses	6.6.20260926-r0	—
ncurses-snapshots	v6_6_20260926	MIT
ncurses-terminfo-base	6.6.20260926-r0	MIT
ncurses-terminfo-base	6.6.20260926-r0	MIT
ncurses-terminfo-base	6.6.20260926-r0	—
ncurses.yaml	49af4fd909fca8f288f9ca88f700cbb6bd987f33	Apache-2.0
openssl	openssl-4.0.2	Apache-2.0
openssl	openssl-3.6.4	Apache-2.0
openssl-4.0-libcrypto	4.0.2-r2	Apache-2.0
openssl-4.0-libcrypto	4.0.2-r2	Apache-2.0
openssl-4.0-libcrypto	4.0.2-r2	—
openssl-4.0-libssl	4.0.2-r2	Apache-2.0
openssl-4.0-libssl	4.0.2-r2	Apache-2.0
openssl-4.0-libssl	4.0.2-r2	—
openssl-4.0.yaml	b8f04118437fbbf25bbaad575ccb9f2ed62b8503	Apache-2.0
openssl-provider-legacy-allowed	4.0.2-r3	Apache-2.0
openssl-provider-legacy-allowed	4.0.2-r3	Apache-2.0
openssl-provider-legacy-allowed	4.0.2-r3	—
openssl-provider-legacy-allowed.yaml	b8f04118437fbbf25bbaad575ccb9f2ed62b8503	Apache-2.0
openssl.yaml	be56cfaac075e77bffb92439e0438bb31a21a2c7	Apache-2.0
pcre2	pcre2-10.49	BSD-3-Clause
pcre2.yaml	12446114fe264503593128d308520875edaca797	Apache-2.0
pub/scm/linux/kernel/git/dhowells/keyutils	v1.6.3	GPL-2.0-or-later OR LGPL-2.0-or-later
sha256:c68a81b2cc9b56fb9407f277bad06353b0c7f1d3fbc25033aff8c21156b588a7	sha256:c68a81b2cc9b56fb9407f277bad06353b0c7f1d3fbc25033aff8c21156b588a7	—
sha256:e6d459b1ff046a971422535b4c80e9995d3adf02cc574f9465c637f297155ac8	20230201	—
wolfi	20230201	—
wolfi-baselayout	20230201-r30	MIT
wolfi-baselayout	20230201-r30	MIT
wolfi-baselayout	20230201-r30	—
wolfi-baselayout.yaml	a4472f6292a5e48d6d611bf24c6e119b1a483e66	Apache-2.0
xz	5.8.4-r0	GPL-3.0-or-later
xz	v5.8.4	GPL-3.0-or-later
xz	5.8.4-r0	GPL-3.0-or-later
xz	5.8.4-r0	—
xz.yaml	3976a1f9c66f7243a9af8522d471a9b10a99b75f	Apache-2.0
zlib	1.3.2.1_rc20260601-r0	MPL-2.0 AND MIT
zlib	e3dc0a85b7032e98380dec011bc8f2c2ee0d8fca	MPL-2.0 AND MIT
zlib	1.3.2.1_rc20260601-r0	(MPL-2.0 AND MIT)
zlib	1.3.2.1_rc20260601-r0	—
zlib.yaml	f2ad881d0053f3f3b6b639e041b171fc0e5b7244	Apache-2.0
zstd	v1.5.7	BSD-2-Clause AND GPL-2.0-only
zstd.yaml	df31c4c7ec10ae6f41a9433c0cb7ab03deabcf06	Apache-2.0

4 medium 0 fixable

CVE	Severity	Package	Installed	Fixed in
CVE-2026-77117	Medium	glibc-2.44	2.44-r7	—
CVE-2026-80489	Medium	glibc-2.44	2.44-r7	—
CVE-2026-8674	Medium	glibc-2.44	2.44-r7	—
CVE-2026-89092	Medium	glibc-2.44	2.44-r7	—

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-mariadb:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-mariadb:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-mariadb:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Databases images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.

org.opencontainers.image.title	minimal-mariadb-dev
org.opencontainers.image.description	Dev variant of minimal-mariadb: same server + shell + mariadb client + curl/socat/jq. Not for production.
org.opencontainers.image.url	https://github.com/rtvkiz/minimal
org.opencontainers.image.source	https://github.com/rtvkiz/minimal/tree/main/images/mariadb
org.opencontainers.image.licenses	Apache-2.0
dev.minimal.variant	dev