← All images

opensearch Databases

OpenSearch 3.x on Wolfi with OpenJDK 21.

Size 451 MB Arch x86_64, aarch64 User opensearch (65532) Updated today Upstream opensearch.org

Pull this image

docker pull ghcr.io/rtvkiz/minimal-opensearch:latest

Details

Repository
ghcr.io/rtvkiz/minimal-opensearch
Size (compressed)
451 MB
Built
2026-09-29T00:41:30Z (today)
Architectures
x86_64, aarch64
Primary package
opensearch
Entrypoint
/usr/share/opensearch/bin/opensearch
User
opensearch (65532)
Working dir
/
Architectures
x86_64, aarch64
Environment
OPENSEARCH_HOME=/usr/share/opensearchOPENSEARCH_PATH_CONF=/usr/share/opensearch/configOPENSEARCH_JAVA_HOME=/usr/lib/jvm/java-21-openjdkOPENSEARCH_JAVA_OPTS=-Xms512m -Xmx512mLANG=C.UTF-8
Labels
org.opencontainers.image.titleminimal-opensearch
org.opencontainers.image.descriptionHardened OpenSearch 3.x image on Wolfi with OpenJDK 21, daily CVE patches
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/opensearch
org.opencontainers.image.licensesApache-2.0
TagPullPublished
3 ghcr.io/rtvkiz/minimal-opensearch:3 2026-09-29
3.8 ghcr.io/rtvkiz/minimal-opensearch:3.8 2026-09-29
3.8.0-r0 ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0 2026-09-29
3.8.0-r0-20260929 ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260929 2026-09-29
latest ghcr.io/rtvkiz/minimal-opensearch:latest 2026-09-29
3-dev ghcr.io/rtvkiz/minimal-opensearch:3-dev 2026-09-29
3.8-dev ghcr.io/rtvkiz/minimal-opensearch:3.8-dev 2026-09-29
3.8.0-r0-20260929-dev ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260929-dev 2026-09-29
3.8.0-r0-dev ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-dev 2026-09-29
latest-dev ghcr.io/rtvkiz/minimal-opensearch:latest-dev 2026-09-29
3.8.0-r0-20260928 ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260928 2026-09-28
3.8.0-r0-20260928-dev ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260928-dev 2026-09-28
3.8.0-r0-20260927 ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260927 2026-09-27
3.8.0-r0-20260927-dev ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260927-dev 2026-09-27
3.8.0-r0-20260926 ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260926 2026-09-26
3.8.0-r0-20260926-dev ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260926-dev 2026-09-26
3.8.0-r0-20260925 ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260925 2026-09-25
3.8.0-r0-20260925-dev ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260925-dev 2026-09-25
3.8.0-r0-20260924 ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260924 2026-09-24
3.8.0-r0-20260924-dev ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260924-dev 2026-09-24
3.8.0-r0-20260923 ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260923 2026-09-23
3.8.0-r0-20260923-dev ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260923-dev 2026-09-23
3.8.0-r0-20260922 ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260922 2026-09-22
3.8.0-r0-20260922-dev ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260922-dev 2026-09-22
3.8.0-r0-20260921 ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260921 2026-09-21
3.8.0-r0-20260921-dev ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260921-dev 2026-09-21
3.8.0-r0-20260920 ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260920 2026-09-20
3.8.0-r0-20260920-dev ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260920-dev 2026-09-20
3.8.0-r0-20260919 ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260919 2026-09-19
3.8.0-r0-20260919-dev ghcr.io/rtvkiz/minimal-opensearch:3.8.0-r0-20260919-dev 2026-09-19

314 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20260909MPL-2.0 AND MIT
alsa-lib1.2.16.1-r2LGPL-2.1-or-later
alsa-libv1.2.16.1LGPL-2.1-or-later
alsa-lib1.2.16.1-r2LGPL-2.1-or-later
alsa-lib1.2.16.1-r2—
alsa-lib.yamlaf3540137e3e64182f21b81fd7497d503c8adc04Apache-2.0
bash5.3-r13GPL-3.0-or-later
bash5.3-r13GPL-3.0-or-later
bash5.3-r13—
bash.yaml3fbd93992a9e8250d081c485578f6e738a02f60fApache-2.0
brotliv1.2.0MIT
brotli.yaml9db3aeed30b6359289528ef564a4909f78faeac9Apache-2.0
busybox1.38.0-r2GPL-2.0-only
busybox1.38.0-r2GPL-2.0-only
busybox1.38.0-r2—
busybox_mirror1_38_0GPL-2.0-only
busybox.yaml71881f600839f8cdaced7ecf938b4efc90a09c33Apache-2.0
bzip2.yaml8867ad015582e91734eb840c4363388869f71fc5Apache-2.0
ca-certificates20260909-r1MPL-2.0 AND MIT
ca-certificates20260909-r1(MPL-2.0 AND MIT)
ca-certificates20260909-r1—
ca-certificates-bundle20260909-r1MPL-2.0 AND MIT
ca-certificates-bundle20260909-r1(MPL-2.0 AND MIT)
ca-certificates-bundle20260909-r1—
ca-certificates.yamlee3eac73dda22e8dd32fa5fb3e3a1712a6e812d7Apache-2.0
curlcurl-8_22_0MIT
curl8.22.0-r3MIT
curl8.22.0-r3MIT
curl8.22.0-r3—
curl.yamlc5048fcb3198115fb098c0a28f813517e4a1261bApache-2.0
cyrus-saslcyrus-sasl-2.1.28BSD-3-Clause
cyrus-sasl-heimdal-libs2.1.28-r57BSD-3-Clause
cyrus-sasl-heimdal-libs2.1.28-r57BSD-3-Clause
cyrus-sasl-heimdal-libs2.1.28-r57—
cyrus-sasl-heimdal.yamlee3eac73dda22e8dd32fa5fb3e3a1712a6e812d7Apache-2.0
dejavu-fontsversion_2_37Bitstream-Vera
e2fsprogsv1.47.4GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT
e2fsprogs.yamlb99a75e3a9c26fa0720cd2cf394093c19d279152Apache-2.0
expat.yamldab6a75a661461bd0df375aac57d6c62655d076fApache-2.0
fontconfig-config2.18.3-r2MIT
fontconfig-config2.18.3-r2MIT
fontconfig-config2.18.3-r2—
fontconfig.yaml21a273fc3e4496b4a1be08300bf995eb7c200134Apache-2.0
fontconfig/fontconfig2.18.3MIT
freetype2.14.3-r6FTL OR GPL-2.0-or-later
freetype2.14.3-r6(FTL OR GPL-2.0-or-later)
freetype2.14.3-r6—
freetype.yaml79fbc3c9f8c7d24ebc59fe262c2578f975387c2dApache-2.0
freetype/freetypeVER-2-14-3FTL OR GPL-2.0-or-later
gcc.yaml794cf72f88e1b408eca5da0dbf5c5ed25543606dApache-2.0
gdbm1.26-r6GPL-3.0-or-later
gdbm1.26-r6GPL-3.0-or-later
gdbm1.26-r6—
gdbm.yamlf003022285365e5de3bee7aa44caafa602eca04bApache-2.0
giflib6.1.3-r1MIT
giflib6.1.3-r1MIT
giflib6.1.3-r1—
giflib.yamlcb7b2d42f6aec4553036e8deccdbe896eb73bd20Apache-2.0
git/bashbash-5.3GPL-3.0-or-later
git/bzip2bzip2-1.0.8MPL-2.0 AND MIT
git/gdbmv1.26GPL-3.0-or-later
git/glibcb4f51887c48ac82acfdb13f96d9eab5d120cb2b7LGPL-2.1-or-later
git/libunistringv1.4.2GPL-2.0-or-later OR LGPL-3.0-or-later
git/readlinereadline-8.3GPL-3.0-or-later
glibc-2.442.44-r7LGPL-2.1-or-later
glibc-2.442.44-r7LGPL-2.1-or-later
glibc-2.442.44-r7—
glibc-2.44-locale-posix2.44-r7LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r7LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r7—
glibc-2.44.yaml2f4fbb70b55156f2d4cabff471b50dab0e75aa89Apache-2.0
gnutls/libtasn1v4.21.0LGPL-2.1-or-later
gnutools/gccreleases/gcc-16.2.0GPL-3.0-or-later WITH GCC-exception-3.1
heimdalheimdal-7.8.0BSD-3-Clause
heimdal-libs7.8.0-r52BSD-3-Clause
heimdal-libs7.8.0-r52BSD-3-Clause
heimdal-libs7.8.0-r52—
heimdal.yaml16b770d73d6c8d3601394aa2d9f71d15b074a8dbApache-2.0
images/opensearch/melange.yaml1bce6e63ea891bcced1fda6bdc6813ced3474c4e—
java-cacerts20260909-r1MPL-2.0 AND MIT
java-cacerts20260909-r1(MPL-2.0 AND MIT)
java-cacerts20260909-r1—
java-common-jre0.2-r3GPL-2.0-or-later
java-common-jre0.2-r3GPL-2.0-or-later
java-common-jre0.2-r3—
java-common.yaml828ef8a1f016990fae89f60c094c494eaeaff654Apache-2.0
jdk21ujdk-21.0.12.1-gaGPL-2.0 WITH Classpath-exception-2.0
jrt-fs21.0.12.1—
keyutils-libs1.6.3-r40GPL-2.0-or-later OR LGPL-2.0-or-later
keyutils-libs1.6.3-r40(GPL-2.0-or-later OR LGPL-2.0-or-later)
keyutils-libs1.6.3-r40—
keyutils.yaml2e53452a8c1a05c81d7beb0148e1b8d73fd088c3Apache-2.0
krb5krb5-1.22.2-finalMIT
krb5-conf1.0-r9MIT
krb5-conf1.0-r9MIT
krb5-conf1.0-r9—
krb5-conf.yamlbb37bc90f076f9eb2a12980e43c3f12673133835Apache-2.0
krb5-libs1.22.2-r4MIT
krb5-libs1.22.2-r4MIT
krb5-libs1.22.2-r4—
krb5.yaml9a7875e9cfcbd59186154753bceb1d973e939c32Apache-2.0
lcms22.19.1-r2MIT AND GPL-3.0-only
lcms22.19.1-r2(MIT AND GPL-3.0-only)
lcms22.19.1-r2—
lcms2.yaml3be4812b7c852b960fb73933eb247e2bd972298dApache-2.0
ld-linux-2.442.44-r7LGPL-2.1-or-later
ld-linux-2.442.44-r7LGPL-2.1-or-later
ld-linux-2.442.44-r7—
libbrotlicommon11.2.0-r5MIT
libbrotlicommon11.2.0-r5MIT
libbrotlicommon11.2.0-r5—
libbrotlidec11.2.0-r5MIT
libbrotlidec11.2.0-r5MIT
libbrotlidec11.2.0-r5—
libbrotlienc11.2.0-r5MIT
libbrotlienc11.2.0-r5MIT
libbrotlienc11.2.0-r5—
libbz2-11.0.8-r24MPL-2.0 AND MIT
libbz2-11.0.8-r24(MPL-2.0 AND MIT)
libbz2-11.0.8-r24—
libcom_err1.47.4-r2GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT
libcom_err1.47.4-r2(GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT)
libcom_err1.47.4-r2—
libcrypt1-2.442.44-r7LGPL-2.1-or-later
libcrypt1-2.442.44-r7LGPL-2.1-or-later
libcrypt1-2.442.44-r7—
libcrypto33.6.4-r8Apache-2.0
libcrypto33.6.4-r8Apache-2.0
libcrypto33.6.4-r8—
libcurl-openssl48.22.0-r3MIT
libcurl-openssl48.22.0-r3MIT
libcurl-openssl48.22.0-r3—
libexpatR_2_8_5MIT
libexpat12.8.5-r0MIT
libexpat12.8.5-r0MIT
libexpat12.8.5-r0—
libffi3.8.0-r1MIT
libffiv3.8.0MIT
libffi3.8.0-r1MIT
libffi3.8.0-r1—
libffi.yaml719d64d3fcaaae77a969bee96bbd6c1bbba9d9ddApache-2.0
libfontconfig12.18.3-r2MIT
libfontconfig12.18.3-r2MIT
libfontconfig12.18.3-r2—
libgcc16.2.0-r1GPL-3.0-or-later WITH GCC-exception-3.1
libgcc16.2.0-r1(GPL-3.0-or-later WITH GCC-exception-3.1)
libgcc16.2.0-r1—
libidn/libidn2v2.3.8GPL-2.0-or-later AND LGPL-3.0-or-later
libidn22.3.8-r9GPL-2.0-or-later AND LGPL-3.0-or-later
libidn22.3.8-r9(GPL-2.0-or-later AND LGPL-3.0-or-later)
libidn22.3.8-r9—
libidn2.yaml515b608d6ada311d2f8d873090ee6e9ab1b0e270Apache-2.0
libjpeg-turbo3.2.0-r4BSD-3-Clause AND IJG AND Zlib
libjpeg-turbo3.2.0BSD-3-Clause AND IJG AND Zlib
libjpeg-turbo3.2.0-r4(BSD-3-Clause AND IJG AND Zlib)
libjpeg-turbo3.2.0-r4—
libjpeg-turbo.yaml203e65dd274965582cb0226c6aa7ca368c2e684eApache-2.0
libldap-2.72.7.1-r1OLDAP-2.8
libldap-2.72.7.1-r1OLDAP-2.8
libldap-2.72.7.1-r1—
libnghttp2-141.70.0-r4MIT
libnghttp2-141.70.0-r4MIT
libnghttp2-141.70.0-r4—
libpng1.6.59-r0libpng-2.0
libpngv1.6.59libpng-2.0
libpng1.6.59-r0libpng-2.0
libpng1.6.59-r0—
libpng.yaml5bb7c8fcf3fec1ac35944cf359043d18cc9afcccApache-2.0
libpsl0.23.3-r1MIT
libpsl0.23.3MIT
libpsl0.23.3-r1MIT
libpsl0.23.3-r1—
libpsl.yamlf5315bacaee7e38f785cf4506595b8a03d29e5c0Apache-2.0
libssl33.6.4-r8Apache-2.0
libssl33.6.4-r8Apache-2.0
libssl33.6.4-r8—
libtasn14.21.0-r6LGPL-2.1-or-later
libtasn14.21.0-r6LGPL-2.1-or-later
libtasn14.21.0-r6—
libtasn1.yaml3c7af87f8ce2048650267adce8430bc50a4cfeeeApache-2.0
libunistring1.4.2-r3GPL-2.0-or-later OR LGPL-3.0-or-later
libunistring1.4.2-r3(GPL-2.0-or-later OR LGPL-3.0-or-later)
libunistring1.4.2-r3—
libunistring.yaml7ef46f8f31c30c8b2ad450cc071debf618da28f5Apache-2.0
libverto0.3.2-r8MIT
libverto0.3.2MIT
libverto0.3.2-r8MIT
libverto0.3.2-r8—
libverto.yaml12f50f8d25640a0ca5ce3ac4cb6a2b8c472ab7a6Apache-2.0
libx111.8.13-r7XFree86-1.1
libx111.8.13-r7XFree86-1.1
libx111.8.13-r7—
libx11.yamleecac56ac7fa8eefdc88c3ce28b8d61d30a21109Apache-2.0
libxau1.0.12-r8MIT
libxau1.0.12-r8MIT
libxau1.0.12-r8—
libxau.yaml1e34086426b21c24ee80c9a7bf6ba146f3cba960Apache-2.0
libxcb1.17.0-r16MIT
libxcb1.17.0-r16MIT
libxcb1.17.0-r16—
libxcb.yamlec0f4c229323164654714800ce9a332169fd3aceApache-2.0
libxcrypt4.5.2-r5GPL-2.0-or-later AND LGPL-2.1-or-later
libxcryptv4.5.2GPL-2.0-or-later AND LGPL-2.1-or-later
libxcrypt4.5.2-r5(GPL-2.0-or-later AND LGPL-2.1-or-later)
libxcrypt4.5.2-r5—
libxcrypt.yamle199a2ea58e2f64dce226ac5edb148fa8ff72664Apache-2.0
libxdmcp1.1.5-r11MIT
libxdmcp1.1.5-r11MIT
libxdmcp1.1.5-r11—
libxdmcp.yaml8c878070babf1de9996bf309b5b54dacd4ee8c1eApache-2.0
libxext1.3.7-r3MIT
libxext1.3.7-r3MIT
libxext1.3.7-r3—
libxext.yaml62088639a77e30bc4df60efce5e26c65128f4f95Apache-2.0
libxi1.8.3-r1MIT AND X11
libxi1.8.3-r1(MIT AND X11)
libxi1.8.3-r1—
libxi.yaml77c836474e6514dd0e511ced277b2549063b5618Apache-2.0
libxrender0.9.12-r9XFree86-1.1
libxrender0.9.12-r9XFree86-1.1
libxrender0.9.12-r9—
libxrender.yaml81dde3ec6cd2859447fea166b956502e0e0ed467Apache-2.0
libxtst1.2.5-r8XFree86-1.1
libxtst1.2.5-r8XFree86-1.1
libxtst1.2.5-r8—
libxtst.yaml1c8fdc57fe28006c25d9994c0701534b1c762ef5Apache-2.0
Little-CMSlcms2.19.1MIT AND GPL-3.0-only
ncurses6.6.20260926-r0MIT
ncurses6.6.20260926-r0MIT
ncurses6.6.20260926-r0—
ncurses-snapshotsv6_6_20260926MIT
ncurses-terminfo-base6.6.20260926-r0MIT
ncurses-terminfo-base6.6.20260926-r0MIT
ncurses-terminfo-base6.6.20260926-r0—
ncurses.yaml49af4fd909fca8f288f9ca88f700cbb6bd987f33Apache-2.0
nghttp2v1.70.0MIT
nghttp2.yaml88d034c8a90ab9303114c4a82765cd63372ec5f3Apache-2.0
nghttp31.18.0-r1MIT
nghttp3v1.18.0MIT
nghttp31.18.0-r1MIT
nghttp31.18.0-r1—
nghttp3.yaml0956f7ab8259acb3cad0885e4537ed6b1779d818Apache-2.0
ngtcp21.25.0-r4MIT
ngtcp2v1.25.0MIT
ngtcp21.25.0-r4MIT
ngtcp21.25.0-r4—
ngtcp2.yamlecc58ee4fc1a3a0734bbd164bc518a4ac0ed371cApache-2.0
openjdk-21-default-jvm21.0.12.1-r2GPL-2.0 WITH Classpath-exception-2.0
openjdk-21-default-jvm21.0.12.1-r2(GPL-2.0 WITH Classpath-exception-2.0)
openjdk-21-default-jvm21.0.12.1-r2—
openjdk-21-jre21.0.12.1-r2GPL-2.0 WITH Classpath-exception-2.0
openjdk-21-jre21.0.12.1-r2(GPL-2.0 WITH Classpath-exception-2.0)
openjdk-21-jre21.0.12.1-r2—
openjdk-21.yaml81aa858938061827a71cda7442420336ac4fda46Apache-2.0
openldapOPENLDAP_REL_ENG_2_7_1OLDAP-2.8
openldap-2.7.yaml0bec60b2e47ce757adc2340f526da8e90046e0b8Apache-2.0
opensearch3.8.0-r0Apache-2.0
opensslopenssl-4.0.2Apache-2.0
opensslopenssl-3.6.4Apache-2.0
openssl-4.0-libcrypto4.0.2-r2Apache-2.0
openssl-4.0-libcrypto4.0.2-r2Apache-2.0
openssl-4.0-libcrypto4.0.2-r2—
openssl-4.0-libssl4.0.2-r2Apache-2.0
openssl-4.0-libssl4.0.2-r2Apache-2.0
openssl-4.0-libssl4.0.2-r2—
openssl-4.0.yamlb8f04118437fbbf25bbaad575ccb9f2ed62b8503Apache-2.0
openssl-provider-legacy-allowed4.0.2-r3Apache-2.0
openssl-provider-legacy-allowed4.0.2-r3Apache-2.0
openssl-provider-legacy-allowed4.0.2-r3—
openssl-provider-legacy-allowed.yamlb8f04118437fbbf25bbaad575ccb9f2ed62b8503Apache-2.0
openssl.yamlbe56cfaac075e77bffb92439e0438bb31a21a2c7Apache-2.0
p/giflib/code6.1.3MIT
p11-kit0.26.5-r1BSD-3-Clause
p11-kit0.26.5BSD-3-Clause
p11-kit0.26.5-r1BSD-3-Clause
p11-kit0.26.5-r1—
p11-kit-trust0.26.5-r1BSD-3-Clause
p11-kit-trust0.26.5-r1BSD-3-Clause
p11-kit-trust0.26.5-r1—
p11-kit.yamlbdffd583c7ad7461ce9e15af532507f0ddb30960Apache-2.0
pub/scm/linux/kernel/git/dhowells/keyutilsv1.6.3GPL-2.0-or-later OR LGPL-2.0-or-later
readline8.3-r3GPL-3.0-or-later
readline8.3-r3GPL-3.0-or-later
readline8.3-r3—
readline.yaml20a5359ac0a7a6aca23efa343f0f29c8d3ea1453Apache-2.0
sha256:08532b7f10fc695a394af60550e14acde17c59c4e81d9f6f481949f363b48f4420230201—
sha256:1d0505bd1eabf023123c271f320672edc64d62ddf88adc8eb80b74c77d6bff35sha256:1d0505bd1eabf023123c271f320672edc64d62ddf88adc8eb80b74c77d6bff35—
sqlite3.53.4—
sqlite-libs3.53.4-r2blessing
sqlite-libs3.53.4-r2blessing
sqlite-libs3.53.4-r2—
sqlite.yaml89df0d1a31c1a22d7d67ddf690145ffc5b9f759dApache-2.0
ttf-dejavu2.37-r9Bitstream-Vera
ttf-dejavu2.37-r9Bitstream-Vera
ttf-dejavu2.37-r9—
ttf-dejavu.yaml8bfd02b0cdce1c72d50ced1814f1d78c5616c836Apache-2.0
wolfi20230201—
wolfi-baselayout20230201-r30MIT
wolfi-baselayout20230201-r30MIT
wolfi-baselayout20230201-r30—
wolfi-baselayout.yamla4472f6292a5e48d6d611bf24c6e119b1a483e66Apache-2.0
xorg/lib/libx11libX11-1.8.13XFree86-1.1
xorg/lib/libxaulibXau-1.0.12MIT
xorg/lib/libxcblibxcb-1.17.0MIT
xorg/lib/libxdmcplibXdmcp-1.1.5MIT
xorg/lib/libxextlibXext-1.3.7MIT
xorg/lib/libxilibXi-1.8.3MIT AND X11
xorg/lib/libxrenderlibXrender-0.9.12XFree86-1.1
xorg/lib/libxtstlibXtst-1.2.5XFree86-1.1
zlib1.3.2.1_rc20260601-r0MPL-2.0 AND MIT
zlibe3dc0a85b7032e98380dec011bc8f2c2ee0d8fcaMPL-2.0 AND MIT
zlib1.3.2.1_rc20260601-r0(MPL-2.0 AND MIT)
zlib1.3.2.1_rc20260601-r0—
zlib.yamlf2ad881d0053f3f3b6b639e041b171fc0e5b7244Apache-2.0
5 medium 0 fixable
CVESeverityPackageInstalledFixed in
CVE-2026-77117 Medium glibc-2.44 2.44-r7 —
CVE-2026-80489 Medium glibc-2.44 2.44-r7 —
CVE-2026-8674 Medium glibc-2.44 2.44-r7 —
CVE-2026-89092 Medium glibc-2.44 2.44-r7 —
CVE-2026-90781 Medium alsa-lib 1.2.16.1-r2 —

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-opensearch:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-opensearch:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-opensearch:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Databases images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.