minimal
GitHub
  1. Images
  2. Infrastructure
  3. openldap

openldap

OpenLDAP slapd directory server with MDB backend, common overlays and LDAP clients. Shell-less, non-root, fail-closed config, signed, rebuilt daily.

Vulnerabilities
Compressed size
13 MB
Architectures
amd64, arm64
Default user
nonroot (65532)
Last built
today
Upstream
www.openldap.org

Pull this image

docker pull ghcr.io/rtvkiz/minimal-openldap:latest
Repository
ghcr.io/rtvkiz/minimal-openldap
Digest
sha256:e42ce93aa55bdbfb0d3ae223c5fa8ee63d3e55f0b05bd7ceb30d9b01f403650d
Built at
2026-11-12T07:10:13Z
Primary package
openldap-2.7
Entrypoint
/usr/bin/slapd
Cmd
-d stats -h ldap://0.0.0.0:1389/ -F /etc/openldap/slapd.d
User
nonroot (65532)
Working dir
/var/lib/openldap
Architectures
x86_64, aarch64
Environment
PATH=/usr/bin:/binHOME=/var/lib/openldap
Labels
org.opencontainers.image.titleminimal-openldap
org.opencontainers.image.descriptionHardened shell-less OpenLDAP slapd built on Wolfi with daily CVE patches
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/openldap
org.opencontainers.image.licensesOLDAP-2.8
TagPullPublished
2-dev ghcr.io/rtvkiz/minimal-openldap:2-dev 2026-11-12
2.7-dev ghcr.io/rtvkiz/minimal-openldap:2.7-dev 2026-11-12
2.7.2-r0-20261112-dev ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-20261112-dev 2026-11-12
2.7.2-r0-dev ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-dev 2026-11-12
latest-dev ghcr.io/rtvkiz/minimal-openldap:latest-dev 2026-11-12
2 ghcr.io/rtvkiz/minimal-openldap:2 2026-11-12
2.7 ghcr.io/rtvkiz/minimal-openldap:2.7 2026-11-12
2.7.2-r0 ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0 2026-11-12
2.7.2-r0-20261112 ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-20261112 2026-11-12
latest ghcr.io/rtvkiz/minimal-openldap:latest 2026-11-12
2.7.2-r0-20261111 ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-20261111 2026-11-11
2.7.2-r0-20261111-dev ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-20261111-dev 2026-11-11
2.7.2-r0-20261110 ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-20261110 2026-11-10
2.7.2-r0-20261110-dev ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-20261110-dev 2026-11-10
2.7.2-r0-20261109 ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-20261109 2026-11-09
2.7.2-r0-20261109-dev ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-20261109-dev 2026-11-09
2.7.2-r0-20261108 ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-20261108 2026-11-08
2.7.2-r0-20261108-dev ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-20261108-dev 2026-11-08
2.7.2-r0-20261107 ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-20261107 2026-11-07
2.7.2-r0-20261107-dev ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-20261107-dev 2026-11-07
2.7.2-r0-20261106 ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-20261106 2026-11-06
2.7.2-r0-20261106-dev ghcr.io/rtvkiz/minimal-openldap:2.7.2-r0-20261106-dev 2026-11-06

146 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20261020MPL-2.0 AND MIT
brotliv1.2.1MIT
brotli.yamlf5ef816d1cb2bd0e165a402c4e8a4c4622464bf3Apache-2.0
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0(MPL-2.0 AND MIT)
ca-certificates-bundle20261020-r0—
ca-certificates.yaml8061afafa65af5a9026707a8880e14120dd6f4a0Apache-2.0
cyrus-saslcyrus-sasl-2.1.28BSD-3-Clause
cyrus-sasl-heimdal-libs2.1.28-r58BSD-3-Clause
cyrus-sasl-heimdal-libs2.1.28-r58BSD-3-Clause
cyrus-sasl-heimdal-libs2.1.28-r58—
cyrus-sasl-heimdal.yaml6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78Apache-2.0
gcc.yaml4d188060cbd00821a95f1ef60605da4817e781bbApache-2.0
gdbm1.26-r9GPL-3.0-or-later
gdbm1.26-r9GPL-3.0-or-later
gdbm1.26-r9—
gdbm.yamlbdc197227f39597f43727c03854efbb4e834c5efApache-2.0
git/gdbmv1.26GPL-3.0-or-later
git/libtoolv2.5.4LGPL-2.0-or-later AND GPL-2.0-or-later
git/readlinereadline-8.3GPL-3.0-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16—
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16—
glibc-2.44.yaml69c2b75e0711c38be3c5881e3a141667ccf54341Apache-2.0
gnutools/gccreleases/gcc-16.2.0GPL-3.0-or-later WITH GCC-exception-3.1
gnutools/glibc47e2b570410fab606de29f550534a721184852c3LGPL-2.1-or-later
heimdalheimdal-7.8.0BSD-3-Clause
heimdal-libs7.8.0-r55BSD-3-Clause
heimdal-libs7.8.0-r55BSD-3-Clause
heimdal-libs7.8.0-r55—
heimdal.yaml98d0e0fa47c531020de219448a43d120a8c0360aApache-2.0
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16—
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3—
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3—
libbrotlienc11.2.1-r3MIT
libbrotlienc11.2.1-r3MIT
libbrotlienc11.2.1-r3—
libcrypt1-2.442.44-r16LGPL-2.1-or-later
libcrypt1-2.442.44-r16LGPL-2.1-or-later
libcrypt1-2.442.44-r16—
libgcc16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libgcc16.2.0-r3(GPL-3.0-or-later WITH GCC-exception-3.1)
libgcc16.2.0-r3—
libldap-2.72.7.2-r0OLDAP-2.8
libldap-2.72.7.2-r0OLDAP-2.8
libldap-2.72.7.2-r0—
libltdl2.5.4-r5LGPL-2.0-or-later AND GPL-2.0-or-later
libltdl2.5.4-r5(LGPL-2.0-or-later AND GPL-2.0-or-later)
libltdl2.5.4-r5—
libsodium1.0.22-r4ISC
libsodium1.0.22-RELEASEISC
libsodium1.0.22-r4ISC
libsodium1.0.22-r4—
libsodium.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
libtool.yaml426049c31e297087f9676e2bacea1bfc0fd2831fApache-2.0
libxcrypt4.5.2-r8GPL-2.0-or-later AND LGPL-2.1-or-later
libxcryptv4.5.2GPL-2.0-or-later AND LGPL-2.1-or-later
libxcrypt4.5.2-r8(GPL-2.0-or-later AND LGPL-2.1-or-later)
libxcrypt4.5.2-r8—
libxcrypt.yamlb9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518Apache-2.0
lmdb0.9.35-r3OLDAP-2.8
lmdbLMDB_0.9.35OLDAP-2.8
lmdb0.9.35-r3OLDAP-2.8
lmdb0.9.35-r3—
lmdb.yamla4a523651db588c0ec27f7880438828e0eefec5aApache-2.0
ncurses6.6.20261107-r0MIT
ncurses6.6.20261107-r0MIT
ncurses6.6.20261107-r0—
ncurses-snapshotsv6_6_20261107MIT
ncurses-terminfo-base6.6.20261107-r0MIT
ncurses-terminfo-base6.6.20261107-r0MIT
ncurses-terminfo-base6.6.20261107-r0—
ncurses.yaml57b90c0084b0bc101663cdfcaa44f4ce83312443Apache-2.0
openldapOPENLDAP_REL_ENG_2_7_2OLDAP-2.8
openldap-2.72.7.2-r0OLDAP-2.8
openldap-2.72.7.2-r0OLDAP-2.8
openldap-2.72.7.2-r0—
openldap-2.7-back-mdb2.7.2-r0OLDAP-2.8
openldap-2.7-back-mdb2.7.2-r0OLDAP-2.8
openldap-2.7-back-mdb2.7.2-r0—
openldap-2.7-clients2.7.2-r0OLDAP-2.8
openldap-2.7-clients2.7.2-r0OLDAP-2.8
openldap-2.7-clients2.7.2-r0—
openldap-2.7-overlay-memberof2.7.2-r0OLDAP-2.8
openldap-2.7-overlay-memberof2.7.2-r0OLDAP-2.8
openldap-2.7-overlay-memberof2.7.2-r0—
openldap-2.7-overlay-ppolicy2.7.2-r0OLDAP-2.8
openldap-2.7-overlay-ppolicy2.7.2-r0OLDAP-2.8
openldap-2.7-overlay-ppolicy2.7.2-r0—
openldap-2.7-overlay-refint2.7.2-r0OLDAP-2.8
openldap-2.7-overlay-refint2.7.2-r0OLDAP-2.8
openldap-2.7-overlay-refint2.7.2-r0—
openldap-2.7-overlay-syncprov2.7.2-r0OLDAP-2.8
openldap-2.7-overlay-syncprov2.7.2-r0OLDAP-2.8
openldap-2.7-overlay-syncprov2.7.2-r0—
openldap-2.7-overlay-unique2.7.2-r0OLDAP-2.8
openldap-2.7-overlay-unique2.7.2-r0OLDAP-2.8
openldap-2.7-overlay-unique2.7.2-r0—
openldap-2.7-passwd-argon22.7.2-r0OLDAP-2.8
openldap-2.7-passwd-argon22.7.2-r0OLDAP-2.8
openldap-2.7-passwd-argon22.7.2-r0—
openldap-2.7-passwd-pbkdf22.7.2-r0OLDAP-2.8
openldap-2.7-passwd-pbkdf22.7.2-r0OLDAP-2.8
openldap-2.7-passwd-pbkdf22.7.2-r0—
openldap-2.7-passwd-sha22.7.2-r0OLDAP-2.8
openldap-2.7-passwd-sha22.7.2-r0OLDAP-2.8
openldap-2.7-passwd-sha22.7.2-r0—
openldap-2.7.yaml0906e934a58fa878f8d3cfa650c6aab092cc7f26Apache-2.0
opensslopenssl-4.1.0Apache-2.0
opensslopenssl-4.0.3Apache-2.0
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-4.0-libcrypto4.0.3-r8—
openssl-4.0-libssl4.0.3-r8Apache-2.0
openssl-4.0-libssl4.0.3-r8Apache-2.0
openssl-4.0-libssl4.0.3-r8—
openssl-4.0.yaml53fb2f6751f832fa61ddba06cb8a40dbba5f409fApache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0—
openssl-provider-legacy-allowed.yamlaeae4801330be6fd269d5ed5640dc37b58ccab09Apache-2.0
readline8.3-r3GPL-3.0-or-later
readline8.3-r3GPL-3.0-or-later
readline8.3-r3—
readline.yaml20a5359ac0a7a6aca23efa343f0f29c8d3ea1453Apache-2.0
sha256:2374ffc2c718e8f6476d1b1dd6c723496f683775d3d2d88916f57046eb73b5bdsha256:2374ffc2c718e8f6476d1b1dd6c723496f683775d3d2d88916f57046eb73b5bd—
sha256:561e2cf73e71fc74ec7953032dafd5c7d4c96aed834f9a43131874fa9c63e1ed20230201—
sqlite3.54.1—
sqlite-libs3.54.1-r0blessing
sqlite-libs3.54.1-r0blessing
sqlite-libs3.54.1-r0—
sqlite.yamlb0ca8c95606371be2557980059c10b34df30fa9fApache-2.0
wolfi20230201—
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31—
wolfi-baselayout.yamled415005c84750f03c4a9252137813734a224ae7Apache-2.0
1 high 0 fixable
CVESeverityPackageInstalledFixed in
CVE-2026-84243 High glibc-2.44 2.44-r16 —

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-openldap:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-openldap:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-openldap:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Infrastructure images

consulcorednsdnsmasqetcdheadscalekeepalivedkeycloakchartmuseum

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.