minimal
GitHub
  1. Images
  2. Databases
  3. pgpool

pgpool

Pgpool-II connection pooler, load balancer and failover manager for PostgreSQL. Shell-less, non-root, built from source, signed, rebuilt daily.

Vulnerabilities
None
Compressed size
14 MB
Architectures
amd64, arm64
Default user
nonroot (65532)
Last built
today
Upstream
www.pgpool.net

Pull this image

docker pull ghcr.io/rtvkiz/minimal-pgpool:latest
Repository
ghcr.io/rtvkiz/minimal-pgpool
Digest
sha256:02beefe38c23c678828392e413f8ef2f7ada080887b8c9877cc2bd7c75cb3e21
Built at
2026-11-12T08:48:52Z
Primary package
pgpool
Entrypoint
/usr/bin/pgpool
Cmd
-n -f /etc/pgpool/pgpool.conf
User
nonroot (65532)
Working dir
/tmp
Architectures
x86_64, aarch64
Environment
PATH=/usr/bin:/binHOME=/tmp
Labels
org.opencontainers.image.titleminimal-pgpool
org.opencontainers.image.descriptionHardened shell-less Pgpool-II built from source via melange with CVE patches on every rebuild
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/pgpool
org.opencontainers.image.licensesHPND
TagPullPublished
4 ghcr.io/rtvkiz/minimal-pgpool:4 2026-11-12
4.7 ghcr.io/rtvkiz/minimal-pgpool:4.7 2026-11-12
4.7.3-r0 ghcr.io/rtvkiz/minimal-pgpool:4.7.3-r0 2026-11-12
4.7.3-r0-20261112 ghcr.io/rtvkiz/minimal-pgpool:4.7.3-r0-20261112 2026-11-12
latest ghcr.io/rtvkiz/minimal-pgpool:latest 2026-11-12
4-dev ghcr.io/rtvkiz/minimal-pgpool:4-dev 2026-11-12
4.7-dev ghcr.io/rtvkiz/minimal-pgpool:4.7-dev 2026-11-12
4.7.3-r0-20261112-dev ghcr.io/rtvkiz/minimal-pgpool:4.7.3-r0-20261112-dev 2026-11-12
4.7.3-r0-dev ghcr.io/rtvkiz/minimal-pgpool:4.7.3-r0-dev 2026-11-12
latest-dev ghcr.io/rtvkiz/minimal-pgpool:latest-dev 2026-11-12
4.7.3-r0-20261111 ghcr.io/rtvkiz/minimal-pgpool:4.7.3-r0-20261111 2026-11-11
4.7.3-r0-20261111-dev ghcr.io/rtvkiz/minimal-pgpool:4.7.3-r0-20261111-dev 2026-11-11
4.7.3-r0-20261110 ghcr.io/rtvkiz/minimal-pgpool:4.7.3-r0-20261110 2026-11-10
4.7.3-r0-20261110-dev ghcr.io/rtvkiz/minimal-pgpool:4.7.3-r0-20261110-dev 2026-11-10

134 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20261020MPL-2.0 AND MIT
brotliv1.2.1MIT
brotli.yamlf5ef816d1cb2bd0e165a402c4e8a4c4622464bf3Apache-2.0
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0(MPL-2.0 AND MIT)
ca-certificates-bundle20261020-r0—
ca-certificates.yaml8061afafa65af5a9026707a8880e14120dd6f4a0Apache-2.0
cyrus-saslcyrus-sasl-2.1.28BSD-3-Clause
cyrus-sasl-heimdal-libs2.1.28-r58BSD-3-Clause
cyrus-sasl-heimdal-libs2.1.28-r58BSD-3-Clause
cyrus-sasl-heimdal-libs2.1.28-r58—
cyrus-sasl-heimdal.yaml6a2a53d0046e82dc1f45ac4a9c9593d8d91aaa78Apache-2.0
e2fsprogsv1.47.4GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT
e2fsprogs.yamlb89fefe984e6541788116bd15d4f8dce3dc021a9Apache-2.0
gcc.yaml4d188060cbd00821a95f1ef60605da4817e781bbApache-2.0
gdbm1.26-r9GPL-3.0-or-later
gdbm1.26-r9GPL-3.0-or-later
gdbm1.26-r9—
gdbm.yamlbdc197227f39597f43727c03854efbb4e834c5efApache-2.0
git/gdbmv1.26GPL-3.0-or-later
git/readlinereadline-8.3GPL-3.0-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16—
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16—
glibc-2.44.yaml69c2b75e0711c38be3c5881e3a141667ccf54341Apache-2.0
gnutools/gccreleases/gcc-16.2.0GPL-3.0-or-later WITH GCC-exception-3.1
gnutools/glibc47e2b570410fab606de29f550534a721184852c3LGPL-2.1-or-later
heimdalheimdal-7.8.0BSD-3-Clause
heimdal-libs7.8.0-r55BSD-3-Clause
heimdal-libs7.8.0-r55BSD-3-Clause
heimdal-libs7.8.0-r55—
heimdal.yaml98d0e0fa47c531020de219448a43d120a8c0360aApache-2.0
images/pgpool/melange.yaml862101ee7af52b6dfb7db319fbf7c11793a3d433—
keyutils-libs1.6.3-r41GPL-2.0-or-later OR LGPL-2.0-or-later
keyutils-libs1.6.3-r41(GPL-2.0-or-later OR LGPL-2.0-or-later)
keyutils-libs1.6.3-r41—
keyutils.yaml014624f79627768df6f5ff49f4265a7057c2e206Apache-2.0
krb5krb5-1.22.2-finalMIT
krb5-conf1.0-r10MIT
krb5-conf1.0-r10MIT
krb5-conf1.0-r10—
krb5-conf.yamlf0f4cc5b0d900deaf94dfdcd841e289db97111e1Apache-2.0
krb5-libs1.22.2-r6MIT
krb5-libs1.22.2-r6MIT
krb5-libs1.22.2-r6—
krb5.yamld8c1739b8ac0376433f810660cfe5c19987e66d2Apache-2.0
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16—
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3—
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3—
libbrotlienc11.2.1-r3MIT
libbrotlienc11.2.1-r3MIT
libbrotlienc11.2.1-r3—
libcom_err1.47.4-r5GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT
libcom_err1.47.4-r5(GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT)
libcom_err1.47.4-r5—
libcrypt1-2.442.44-r16LGPL-2.1-or-later
libcrypt1-2.442.44-r16LGPL-2.1-or-later
libcrypt1-2.442.44-r16—
libgcc16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libgcc16.2.0-r3(GPL-3.0-or-later WITH GCC-exception-3.1)
libgcc16.2.0-r3—
libldap-2.72.7.2-r0OLDAP-2.8
libldap-2.72.7.2-r0OLDAP-2.8
libldap-2.72.7.2-r0—
libpq-1818.7-r0BSD-3-Clause
libpq-1818.7-r0BSD-3-Clause
libpq-1818.7-r0—
libverto0.3.2-r11MIT
libverto0.3.2MIT
libverto0.3.2-r11MIT
libverto0.3.2-r11—
libverto.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
libxcrypt4.5.2-r8GPL-2.0-or-later AND LGPL-2.1-or-later
libxcryptv4.5.2GPL-2.0-or-later AND LGPL-2.1-or-later
libxcrypt4.5.2-r8(GPL-2.0-or-later AND LGPL-2.1-or-later)
libxcrypt4.5.2-r8—
libxcrypt.yamlb9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518Apache-2.0
lmdb0.9.35-r3OLDAP-2.8
lmdbLMDB_0.9.35OLDAP-2.8
lmdb0.9.35-r3OLDAP-2.8
lmdb0.9.35-r3—
lmdb.yamla4a523651db588c0ec27f7880438828e0eefec5aApache-2.0
ncurses6.6.20261107-r0MIT
ncurses6.6.20261107-r0MIT
ncurses6.6.20261107-r0—
ncurses-snapshotsv6_6_20261107MIT
ncurses-terminfo-base6.6.20261107-r0MIT
ncurses-terminfo-base6.6.20261107-r0MIT
ncurses-terminfo-base6.6.20261107-r0—
ncurses.yaml57b90c0084b0bc101663cdfcaa44f4ce83312443Apache-2.0
openldapOPENLDAP_REL_ENG_2_7_2OLDAP-2.8
openldap-2.7.yaml0906e934a58fa878f8d3cfa650c6aab092cc7f26Apache-2.0
opensslopenssl-4.1.0Apache-2.0
opensslopenssl-4.0.3Apache-2.0
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-4.0-libcrypto4.0.3-r8—
openssl-4.0-libssl4.0.3-r8Apache-2.0
openssl-4.0-libssl4.0.3-r8Apache-2.0
openssl-4.0-libssl4.0.3-r8—
openssl-4.0.yaml53fb2f6751f832fa61ddba06cb8a40dbba5f409fApache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0—
openssl-provider-legacy-allowed.yamlaeae4801330be6fd269d5ed5640dc37b58ccab09Apache-2.0
pgpool4.7.3-r0HPND
postgresREL_18_7BSD-3-Clause
postgresql-18.yaml3cc8091ccb1a34f86bca44591e93f1150690469cApache-2.0
pub/scm/linux/kernel/git/dhowells/keyutilsv1.6.3GPL-2.0-or-later OR LGPL-2.0-or-later
readline8.3-r3GPL-3.0-or-later
readline8.3-r3GPL-3.0-or-later
readline8.3-r3—
readline.yaml20a5359ac0a7a6aca23efa343f0f29c8d3ea1453Apache-2.0
sha256:746f8d63fa253b4c73def5fd28d0347c3a4e925ac050b76873bb3c034f77a0fd20230201—
sha256:a2bbab264619b67637db303d68bf8dd545b3581103925f2528aa8dcee939112dsha256:a2bbab264619b67637db303d68bf8dd545b3581103925f2528aa8dcee939112d—
sqlite3.54.1—
sqlite-libs3.54.1-r0blessing
sqlite-libs3.54.1-r0blessing
sqlite-libs3.54.1-r0—
sqlite.yamlb0ca8c95606371be2557980059c10b34df30fa9fApache-2.0
wolfi20230201—
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31—
wolfi-baselayout.yamled415005c84750f03c4a9252137813734a224ae7Apache-2.0

Clean   No known vulnerabilities in the latest scan.

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-pgpool:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-pgpool:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-pgpool:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Databases images

cassandracloudnative-pgtimescaledbmariadbmeilisearchmysqlopensearchpatroni

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.