nats
NATS server for high-throughput cloud-native messaging and JetStream persistence. Shell-less Go binary, signed with SLSA provenance, rebuilt daily.
- Vulnerabilities
- None
- Compressed size
- 7.1 MB
- Architectures
- amd64, arm64
- Default user
- nats (65532)
- Last built
- today
- Upstream
- nats.io
Pull this image
docker pull ghcr.io/rtvkiz/minimal-nats:latestdocker pull ghcr.io/rtvkiz/minimal-nats:latest-devThe -dev variant adds a shell, package manager and build toolchain. For CI and debugging — not production.
- Repository
- ghcr.io/rtvkiz/minimal-nats
- Digest
- sha256:04c09aab0204d265a2b4c1d035f7d9c378c78b96ba63e0596181c588a27565b2
- Built at
- 2026-11-12T08:38:50Z
- Primary package
- nats-server
- Entrypoint
- /usr/bin/nats-server
- User
- nats (65532)
- Working dir
- /
- Architectures
- x86_64, aarch64
- Environment
- Labels
-
org.opencontainers.image.title minimal-nats org.opencontainers.image.description Hardened shell-less NATS Server image built from source via melange with daily CVE patches org.opencontainers.image.url https://github.com/rtvkiz/minimal org.opencontainers.image.source https://github.com/rtvkiz/minimal/tree/main/images/nats org.opencontainers.image.licenses Apache-2.0
- Entrypoint
- /usr/bin/nats-server
- User
- nats (65532)
- Working dir
- /
- Architectures
- x86_64, aarch64
- Environment
- Labels
-
org.opencontainers.image.title minimal-nats-dev org.opencontainers.image.description Dev variant of minimal-nats: same nats-server + shell + curl/socat/jq. Not for production. org.opencontainers.image.url https://github.com/rtvkiz/minimal org.opencontainers.image.source https://github.com/rtvkiz/minimal/tree/main/images/nats org.opencontainers.image.licenses Apache-2.0 dev.minimal.variant dev
| Tag | Pull | Published |
|---|---|---|
| 2 | ghcr.io/rtvkiz/minimal-nats:2 | 2026-11-12 |
| 2.15 | ghcr.io/rtvkiz/minimal-nats:2.15 | 2026-11-12 |
| 2.15.3-r0 | ghcr.io/rtvkiz/minimal-nats:2.15.3-r0 | 2026-11-12 |
| 2.15.3-r0-20261112 | ghcr.io/rtvkiz/minimal-nats:2.15.3-r0-20261112 | 2026-11-12 |
| latest | ghcr.io/rtvkiz/minimal-nats:latest | 2026-11-12 |
| 2-dev | ghcr.io/rtvkiz/minimal-nats:2-dev | 2026-11-12 |
| 2.15-dev | ghcr.io/rtvkiz/minimal-nats:2.15-dev | 2026-11-12 |
| 2.15.3-r0-20261112-dev | ghcr.io/rtvkiz/minimal-nats:2.15.3-r0-20261112-dev | 2026-11-12 |
| 2.15.3-r0-dev | ghcr.io/rtvkiz/minimal-nats:2.15.3-r0-dev | 2026-11-12 |
| latest-dev | ghcr.io/rtvkiz/minimal-nats:latest-dev | 2026-11-12 |
| 2.15.2-r0-20261111-dev | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261111-dev | 2026-11-11 |
| 2.15.2-r0-dev | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-dev | 2026-11-11 |
| 2.15.3-r0-20261111 | ghcr.io/rtvkiz/minimal-nats:2.15.3-r0-20261111 | 2026-11-11 |
| 2.15.3-r0-20261111-dev | ghcr.io/rtvkiz/minimal-nats:2.15.3-r0-20261111-dev | 2026-11-11 |
| 2.15.2-r0 | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0 | 2026-11-11 |
| 2.15.2-r0-20261111 | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261111 | 2026-11-11 |
| 2.15.2-r0-20261110 | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261110 | 2026-11-10 |
| 2.15.2-r0-20261110-dev | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261110-dev | 2026-11-10 |
| 2.15.2-r0-20261108 | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261108 | 2026-11-08 |
| 2.15.2-r0-20261108-dev | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261108-dev | 2026-11-08 |
| 2.15.2-r0-20261107 | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261107 | 2026-11-07 |
| 2.15.2-r0-20261107-dev | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261107-dev | 2026-11-07 |
| 2.15.2-r0-20261106 | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261106 | 2026-11-06 |
| 2.15.2-r0-20261106-dev | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261106-dev | 2026-11-06 |
| 2.15.2-r0-20261105 | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261105 | 2026-11-05 |
| 2.15.2-r0-20261105-dev | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261105-dev | 2026-11-05 |
| 2.15.2-r0-20261104 | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261104 | 2026-11-04 |
| 2.15.2-r0-20261104-dev | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261104-dev | 2026-11-04 |
| 2.15.2-r0-20261029 | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261029 | 2026-10-29 |
| 2.15.2-r0-20261029-dev | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261029-dev | 2026-10-29 |
| 2.15.2-r0-20261027 | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261027 | 2026-10-27 |
| 2.15.2-r0-20261027-dev | ghcr.io/rtvkiz/minimal-nats:2.15.2-r0-20261027-dev | 2026-10-27 |
| 2.15.1-r0 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0 | 2026-10-27 |
| 2.15.1-r0-20261027 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261027 | 2026-10-27 |
| 2.15.1-r0-20261027-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261027-dev | 2026-10-27 |
| 2.15.1-r0-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-dev | 2026-10-27 |
| 2.15.1-r0-20261026-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261026-dev | 2026-10-26 |
| 2.15.1-r0-20261026 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261026 | 2026-10-26 |
| 2.15.1-r0-20261025 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261025 | 2026-10-25 |
| 2.15.1-r0-20261025-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261025-dev | 2026-10-25 |
| 2.15.1-r0-20261024-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261024-dev | 2026-10-24 |
| 2.15.1-r0-20261024 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261024 | 2026-10-24 |
| 2.15.1-r0-20261023 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261023 | 2026-10-23 |
| 2.15.1-r0-20261023-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261023-dev | 2026-10-23 |
| 2.15.1-r0-20261022 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261022 | 2026-10-22 |
| 2.15.1-r0-20261022-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261022-dev | 2026-10-22 |
| 2.15.1-r0-20261021 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261021 | 2026-10-21 |
| 2.15.1-r0-20261021-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261021-dev | 2026-10-21 |
| 2.15.1-r0-20261020 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261020 | 2026-10-20 |
| 2.15.1-r0-20261020-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261020-dev | 2026-10-20 |
| 2.15.1-r0-20261019 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261019 | 2026-10-19 |
| 2.15.1-r0-20261019-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261019-dev | 2026-10-19 |
| 2.15.1-r0-20261018 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261018 | 2026-10-18 |
| 2.15.1-r0-20261018-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261018-dev | 2026-10-18 |
| 2.15.1-r0-20261016 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261016 | 2026-10-16 |
| 2.15.1-r0-20261017 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261017 | 2026-10-16 |
| 2.15.1-r0-20261016-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261016-dev | 2026-10-16 |
| 2.15.1-r0-20261017-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261017-dev | 2026-10-16 |
| 2.15.1-r0-20261015 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261015 | 2026-10-15 |
| 2.15.1-r0-20261015-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261015-dev | 2026-10-15 |
| 2.15.1-r0-20261014 | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261014 | 2026-10-14 |
| 2.15.1-r0-20261014-dev | ghcr.io/rtvkiz/minimal-nats:2.15.1-r0-20261014-dev | 2026-10-14 |
The resolved SBOM isn't available for this build yet — showing the packages requested in the apko build recipe (without resolved versions). The full SBOM appears after the next scheduled build.
Clean No known vulnerabilities in the latest scan.
Everything is verifiable without an account. Copy and run:
Build provenance (SLSA v1.0, Build L2)
gh attestation verify oci://ghcr.io/rtvkiz/minimal-nats:latest --owner rtvkizCosign signature
cosign verify \
--certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
--certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
ghcr.io/rtvkiz/minimal-nats:latestSBOM attestation (SPDX)
cosign verify-attestation --type spdxjson \
--certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
--certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
ghcr.io/rtvkiz/minimal-nats:latest \
| jq -r '.payload | @base64d | fromjson | .predicate'Signatures are logged in the public Rekor transparency log.
More Caches, Queues & Messaging images
Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.