mysqld-exporter

Prometheus MySQL Server Exporter for MySQL and MariaDB metrics. Shell-less static Go binary built from source, signed, SBOM-attested, rebuilt daily.

Vulnerabilities
None
Compressed size
5.6 MB
Architectures
amd64, arm64
Default user
nonroot (65532)
Last built
today

Pull this image

docker pull ghcr.io/rtvkiz/minimal-mysqld-exporter:latest
Repository
ghcr.io/rtvkiz/minimal-mysqld-exporter
Digest
sha256:64e88e1437892a566c1106e23c25b3a82de940d2169c229aa33b89c3321443e9
Built at
2026-11-12T08:48:17Z
Primary package
mysqld-exporter
Entrypoint
/usr/bin/mysqld_exporter
User
nonroot (65532)
Working dir
/tmp
Architectures
x86_64, aarch64
Environment
PATH=/usr/bin:/binHOME=/tmp
Labels
org.opencontainers.image.titleminimal-mysqld-exporter
org.opencontainers.image.descriptionHardened shell-less MySQL Server Exporter built from source via melange with CVE patches on every rebuild
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/mysqld-exporter
org.opencontainers.image.licensesApache-2.0
TagPullPublished
0.21 ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21 2026-11-12
0.21.0-r0 ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0 2026-11-12
0.21.0-r0-20261112 ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0-20261112 2026-11-12
latest ghcr.io/rtvkiz/minimal-mysqld-exporter:latest 2026-11-12
0.21-dev ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21-dev 2026-11-12
0.21.0-r0-20261112-dev ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0-20261112-dev 2026-11-12
0.21.0-r0-dev ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0-dev 2026-11-12
latest-dev ghcr.io/rtvkiz/minimal-mysqld-exporter:latest-dev 2026-11-12
0.21.0-r0-20261111 ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0-20261111 2026-11-11
0.21.0-r0-20261111-dev ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0-20261111-dev 2026-11-11
0.21.0-r0-20261110 ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0-20261110 2026-11-10
0.21.0-r0-20261110-dev ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0-20261110-dev 2026-11-10
0.21.0-r0-20261109-dev ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0-20261109-dev 2026-11-09
0.21.0-r0-20261108 ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0-20261108 2026-11-08
0.21.0-r0-20261108-dev ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0-20261108-dev 2026-11-08
0.21.0-r0-20261107 ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0-20261107 2026-11-07
0.21.0-r0-20261107-dev ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0-20261107-dev 2026-11-07
0.21.0-r0-20261106 ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0-20261106 2026-11-06
0.21.0-r0-20261106-dev ghcr.io/rtvkiz/minimal-mysqld-exporter:0.21.0-r0-20261106-dev 2026-11-06

14 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20261020MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0(MPL-2.0 AND MIT)
ca-certificates-bundle20261020-r0—
ca-certificates.yaml8061afafa65af5a9026707a8880e14120dd6f4a0Apache-2.0
images/mysqld-exporter/melange.yaml862101ee7af52b6dfb7db319fbf7c11793a3d433—
mysqld-exporter0.21.0-r0Apache-2.0
sha256:1afff056e6cd5231491f9b0e7ee879e456a8ef0912ac21c14090b48134847113sha256:1afff056e6cd5231491f9b0e7ee879e456a8ef0912ac21c14090b48134847113—
sha256:c6549594047309fc89607dc27c1762acb75ed970d88388de03f6f201f28f31b320230201—
wolfi20230201—
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31—
wolfi-baselayout.yamled415005c84750f03c4a9252137813734a224ae7Apache-2.0

Clean   No known vulnerabilities in the latest scan.

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-mysqld-exporter:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-mysqld-exporter:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-mysqld-exporter:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Observability images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.