minimal
GitHub
  1. Images
  2. Databases
  3. mysql

mysql

MySQL LTS relational database server. Compiled from upstream source against current Wolfi libraries, signed and SBOM-attested, rebuilt daily.

Vulnerabilities
None
Compressed size
65 MB
Architectures
amd64, arm64
Default user
mysql (65532)
Last built
today
Upstream
www.mysql.com

Pull this image

docker pull ghcr.io/rtvkiz/minimal-mysql:latest
Repository
ghcr.io/rtvkiz/minimal-mysql
Digest
sha256:b0cc3e45cbac08ef1085f88a7206fe68559e8ab533cf04bec81209f32d72e4c7
Built at
2026-11-12T08:03:00Z
Primary package
mysql
Entrypoint
/usr/bin/docker-entrypoint.sh
User
mysql (65532)
Working dir
/
Architectures
x86_64, aarch64
Environment
PATH=/usr/bin:/bin
Labels
org.opencontainers.image.titleminimal-mysql
org.opencontainers.image.descriptionHardened MySQL LTS image built from source via melange with daily CVE patches
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/mysql
org.opencontainers.image.licensesGPL-2.0-only
TagPullPublished
8 ghcr.io/rtvkiz/minimal-mysql:8 2026-11-12
8.4 ghcr.io/rtvkiz/minimal-mysql:8.4 2026-11-12
8.4.13-r0 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0 2026-11-12
8.4.13-r0-20261112 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261112 2026-11-12
latest ghcr.io/rtvkiz/minimal-mysql:latest 2026-11-12
8-dev ghcr.io/rtvkiz/minimal-mysql:8-dev 2026-11-12
8.4-dev ghcr.io/rtvkiz/minimal-mysql:8.4-dev 2026-11-12
8.4.13-r0-20261112-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261112-dev 2026-11-12
8.4.13-r0-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-dev 2026-11-12
latest-dev ghcr.io/rtvkiz/minimal-mysql:latest-dev 2026-11-12
8.4.13-r0-20261111-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261111-dev 2026-11-11
8.4.13-r0-20261111 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261111 2026-11-11
8.4.13-r0-20261110 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261110 2026-11-10
8.4.13-r0-20261110-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261110-dev 2026-11-10
8.4.13-r0-20261109-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261109-dev 2026-11-09
8.4.13-r0-20261109 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261109 2026-11-09
8.4.13-r0-20261108-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261108-dev 2026-11-08
8.4.13-r0-20261108 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261108 2026-11-08
8.4.13-r0-20261107 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261107 2026-11-07
8.4.13-r0-20261107-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261107-dev 2026-11-07
8.4.13-r0-20261106 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261106 2026-11-06
8.4.13-r0-20261106-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261106-dev 2026-11-06
8.4.13-r0-20261105 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261105 2026-11-05
8.4.13-r0-20261105-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261105-dev 2026-11-05
8.4.13-r0-20261104 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261104 2026-11-04
8.4.13-r0-20261104-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261104-dev 2026-11-04
8.4.13-r0-20261027 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261027 2026-10-27
8.4.13-r0-20261027-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261027-dev 2026-10-27
8.4.13-r0-20261026 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261026 2026-10-26
8.4.13-r0-20261026-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261026-dev 2026-10-26
8.4.13-r0-20261025 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261025 2026-10-25
8.4.13-r0-20261025-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261025-dev 2026-10-25
8.4.13-r0-20261024 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261024 2026-10-24
8.4.13-r0-20261024-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261024-dev 2026-10-24
8.4.13-r0-20261023 ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261023 2026-10-23
8.4.13-r0-20261023-dev ghcr.io/rtvkiz/minimal-mysql:8.4.13-r0-20261023-dev 2026-10-23
8.4.11-r0 ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0 2026-10-23
8.4.11-r0-20261023 ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261023 2026-10-23
8.4.11-r0-20261023-dev ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261023-dev 2026-10-23
8.4.11-r0-dev ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-dev 2026-10-23
8.4.11-r0-20261022 ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261022 2026-10-22
8.4.11-r0-20261022-dev ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261022-dev 2026-10-22
8.4.11-r0-20261021 ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261021 2026-10-21
8.4.11-r0-20261021-dev ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261021-dev 2026-10-21
8.4.11-r0-20261020 ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261020 2026-10-20
8.4.11-r0-20261020-dev ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261020-dev 2026-10-20
8.4.11-r0-20261019 ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261019 2026-10-19
8.4.11-r0-20261019-dev ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261019-dev 2026-10-19
8.4.11-r0-20261018 ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261018 2026-10-18
8.4.11-r0-20261018-dev ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261018-dev 2026-10-18
8.4.11-r0-20261016 ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261016 2026-10-16
8.4.11-r0-20261017 ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261017 2026-10-16
8.4.11-r0-20261016-dev ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261016-dev 2026-10-16
8.4.11-r0-20261017-dev ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261017-dev 2026-10-16
8.4.11-r0-20261015 ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261015 2026-10-15
8.4.11-r0-20261015-dev ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261015-dev 2026-10-15
8.4.11-r0-20261014 ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261014 2026-10-14
8.4.11-r0-20261014-dev ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261014-dev 2026-10-14
8.4.11-r0-20261013 ghcr.io/rtvkiz/minimal-mysql:8.4.11-r0-20261013 2026-10-13

120 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20261020MPL-2.0 AND MIT
brotliv1.2.1MIT
brotli.yamlf5ef816d1cb2bd0e165a402c4e8a4c4622464bf3Apache-2.0
busybox1.38.0-r3GPL-2.0-only
busybox1.38.0-r3GPL-2.0-only
busybox1.38.0-r3—
busybox_mirror1_38_0GPL-2.0-only
busybox.yaml59d45eb49286129d8d21b2469befa3b55be4719bApache-2.0
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0(MPL-2.0 AND MIT)
ca-certificates-bundle20261020-r0—
ca-certificates.yaml8061afafa65af5a9026707a8880e14120dd6f4a0Apache-2.0
e2fsprogsv1.47.4GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT
e2fsprogs.yamlb89fefe984e6541788116bd15d4f8dce3dc021a9Apache-2.0
gcc.yaml4d188060cbd00821a95f1ef60605da4817e781bbApache-2.0
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16—
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16—
glibc-2.44.yaml69c2b75e0711c38be3c5881e3a141667ccf54341Apache-2.0
gnutools/gccreleases/gcc-16.2.0GPL-3.0-or-later WITH GCC-exception-3.1
gnutools/glibc47e2b570410fab606de29f550534a721184852c3LGPL-2.1-or-later
images/mysql/melange.yaml862101ee7af52b6dfb7db319fbf7c11793a3d433—
keyutils-libs1.6.3-r41GPL-2.0-or-later OR LGPL-2.0-or-later
keyutils-libs1.6.3-r41(GPL-2.0-or-later OR LGPL-2.0-or-later)
keyutils-libs1.6.3-r41—
keyutils.yaml014624f79627768df6f5ff49f4265a7057c2e206Apache-2.0
krb5krb5-1.22.2-finalMIT
krb5-conf1.0-r10MIT
krb5-conf1.0-r10MIT
krb5-conf1.0-r10—
krb5-conf.yamlf0f4cc5b0d900deaf94dfdcd841e289db97111e1Apache-2.0
krb5-libs1.22.2-r6MIT
krb5-libs1.22.2-r6MIT
krb5-libs1.22.2-r6—
krb5.yamld8c1739b8ac0376433f810660cfe5c19987e66d2Apache-2.0
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16—
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3—
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3—
libbrotlienc11.2.1-r3MIT
libbrotlienc11.2.1-r3MIT
libbrotlienc11.2.1-r3—
libcom_err1.47.4-r5GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT
libcom_err1.47.4-r5(GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT)
libcom_err1.47.4-r5—
libcrypt1-2.442.44-r16LGPL-2.1-or-later
libcrypt1-2.442.44-r16LGPL-2.1-or-later
libcrypt1-2.442.44-r16—
libevent2.1.13-r3BSD-3-Clause
libeventrelease-2.1.13-stableBSD-3-Clause
libevent2.1.13-r3BSD-3-Clause
libevent2.1.13-r3—
libevent.yamlf61209149f5e7a9aa0bb993ce5153bba6ed47ae3Apache-2.0
libgcc16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libgcc16.2.0-r3(GPL-3.0-or-later WITH GCC-exception-3.1)
libgcc16.2.0-r3—
libstdc++16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libstdc++16.2.0-r3(GPL-3.0-or-later WITH GCC-exception-3.1)
libstdc++16.2.0-r3—
libtirpc1.3.8-r0BSD-3-Clause
libtirpc1.3.8—
libtirpc1.3.8-r0BSD-3-Clause
libtirpc1.3.8-r0—
libtirpc.yaml4fa8c26f05d103b2efbfbed2458b46a58db00a95Apache-2.0
libverto0.3.2-r11MIT
libverto0.3.2MIT
libverto0.3.2-r11MIT
libverto0.3.2-r11—
libverto.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
libxcrypt4.5.2-r8GPL-2.0-or-later AND LGPL-2.1-or-later
libxcryptv4.5.2GPL-2.0-or-later AND LGPL-2.1-or-later
libxcrypt4.5.2-r8(GPL-2.0-or-later AND LGPL-2.1-or-later)
libxcrypt4.5.2-r8—
libxcrypt.yamlb9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518Apache-2.0
mysql8.4.13-r0GPL-2.0-only
ncurses6.6.20261107-r0MIT
ncurses6.6.20261107-r0MIT
ncurses6.6.20261107-r0—
ncurses-snapshotsv6_6_20261107MIT
ncurses-terminfo-base6.6.20261107-r0MIT
ncurses-terminfo-base6.6.20261107-r0MIT
ncurses-terminfo-base6.6.20261107-r0—
ncurses.yaml57b90c0084b0bc101663cdfcaa44f4ce83312443Apache-2.0
opensslopenssl-4.1.0Apache-2.0
opensslopenssl-4.0.3Apache-2.0
opensslopenssl-3.6.5Apache-2.0
openssl-3.6-libcrypto3.6.5-r6Apache-2.0
openssl-3.6-libcrypto3.6.5-r6Apache-2.0
openssl-3.6-libcrypto3.6.5-r6—
openssl-3.6-libssl3.6.5-r6Apache-2.0
openssl-3.6-libssl3.6.5-r6Apache-2.0
openssl-3.6-libssl3.6.5-r6—
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-4.0-libcrypto4.0.3-r8—
openssl-4.0-libssl4.0.3-r8Apache-2.0
openssl-4.0-libssl4.0.3-r8Apache-2.0
openssl-4.0-libssl4.0.3-r8—
openssl-4.0.yaml53fb2f6751f832fa61ddba06cb8a40dbba5f409fApache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0—
openssl-provider-legacy-allowed.yamlaeae4801330be6fd269d5ed5640dc37b58ccab09Apache-2.0
openssl.yaml106006908276f73e5d13ceca9bc7038ea2d46446Apache-2.0
pub/scm/linux/kernel/git/dhowells/keyutilsv1.6.3GPL-2.0-or-later OR LGPL-2.0-or-later
sha256:3b69f1df1c74feeddb5a6ae2b94e0c14537ed19e180efe2dd2a734f84c5a0080sha256:3b69f1df1c74feeddb5a6ae2b94e0c14537ed19e180efe2dd2a734f84c5a0080—
sha256:a53e7e8ac497b64f11622ff118c694c267a1b4526cb31fa2a599ac37dc06b96a20230201—
wolfi20230201—
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31—
wolfi-baselayout.yamled415005c84750f03c4a9252137813734a224ae7Apache-2.0

Clean   No known vulnerabilities in the latest scan.

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-mysql:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-mysql:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-mysql:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Databases images

cassandracloudnative-pgtimescaledbmariadbmeilisearchopensearchpatronipgbouncer

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.