← All images

Postgres Databases

PostgreSQL built on Wolfi.

Size 365 MB Arch x86_64, aarch64 User postgres (70) Updated today Publishes as minimal-postgres-slim Upstream www.postgresql.org

Pull this image

docker pull ghcr.io/rtvkiz/minimal-postgres-slim:latest

Details

Repository
ghcr.io/rtvkiz/minimal-postgres-slim
Size (compressed)
365 MB
Built
2026-09-28T23:21:05Z (today)
Architectures
x86_64, aarch64
Primary package
postgresql
Entrypoint
/usr/bin/postgres
User
postgres (70)
Working dir
/
Architectures
x86_64, aarch64
Environment
PGDATA=/var/lib/postgresql/dataLANG=en_US.UTF-8PATH=/usr/lib/postgresql18/bin:/usr/bin:/bin
Labels
org.opencontainers.image.titleminimal-postgres-slim
org.opencontainers.image.descriptionHardened PostgreSQL image built on Wolfi with daily CVE patches
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/postgres-slim
org.opencontainers.image.licensesApache-2.0
TagPullPublished
18 ghcr.io/rtvkiz/minimal-postgres-slim:18 2026-09-28
18.6 ghcr.io/rtvkiz/minimal-postgres-slim:18.6 2026-09-28
18.6-r3 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r3 2026-09-28
18.6-r3-20260928 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r3-20260928 2026-09-28
latest ghcr.io/rtvkiz/minimal-postgres-slim:latest 2026-09-28
18-dev ghcr.io/rtvkiz/minimal-postgres-slim:18-dev 2026-09-28
18.6-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-dev 2026-09-28
18.6-r3-20260928-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r3-20260928-dev 2026-09-28
18.6-r3-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r3-dev 2026-09-28
latest-dev ghcr.io/rtvkiz/minimal-postgres-slim:latest-dev 2026-09-28
18.6-r3-20260927 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r3-20260927 2026-09-27
18.6-r3-20260927-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r3-20260927-dev 2026-09-27
18.6-r3-20260926 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r3-20260926 2026-09-26
18.6-r3-20260926-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r3-20260926-dev 2026-09-26
18.6-r3-20260925 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r3-20260925 2026-09-25
18.6-r3-20260925-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r3-20260925-dev 2026-09-25
18.6-r3-20260924 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r3-20260924 2026-09-24
18.6-r3-20260924-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r3-20260924-dev 2026-09-24
18.6-r2 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2 2026-09-24
18.6-r2-20260924 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260924 2026-09-24
18.6-r2-20260924-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260924-dev 2026-09-24
18.6-r2-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-dev 2026-09-24
18.6-r2-20260923 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260923 2026-09-23
18.6-r2-20260923-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260923-dev 2026-09-23
18.6-r2-20260922 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260922 2026-09-22
18.6-r2-20260922-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260922-dev 2026-09-22
18.6-r2-20260921 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260921 2026-09-21
18.6-r2-20260921-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260921-dev 2026-09-21
18.6-r2-20260920 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260920 2026-09-20
18.6-r2-20260920-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260920-dev 2026-09-20
18.6-r2-20260919 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260919 2026-09-19
18.6-r2-20260919-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260919-dev 2026-09-19
18.6-r2-20260918 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260918 2026-09-18
18.6-r2-20260918-dev ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260918-dev 2026-09-18
18.6-r2-20260917 ghcr.io/rtvkiz/minimal-postgres-slim:18.6-r2-20260917 2026-09-17

252 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20260909MPL-2.0 AND MIT
brotliv1.2.0MIT
brotli.yaml9db3aeed30b6359289528ef564a4909f78faeac9Apache-2.0
busybox1.38.0-r2GPL-2.0-only
busybox1.38.0-r2GPL-2.0-only
busybox1.38.0-r2—
busybox_mirror1_38_0GPL-2.0-only
busybox.yaml71881f600839f8cdaced7ecf938b4efc90a09c33Apache-2.0
ca-certificates-bundle20260909-r1MPL-2.0 AND MIT
ca-certificates-bundle20260909-r1(MPL-2.0 AND MIT)
ca-certificates-bundle20260909-r1—
ca-certificates.yamlee3eac73dda22e8dd32fa5fb3e3a1712a6e812d7Apache-2.0
cyrus-saslcyrus-sasl-2.1.28BSD-3-Clause
cyrus-sasl-heimdal2.1.28-r57BSD-3-Clause
cyrus-sasl-heimdal2.1.28-r57BSD-3-Clause
cyrus-sasl-heimdal2.1.28-r57—
cyrus-sasl-heimdal-libs2.1.28-r57BSD-3-Clause
cyrus-sasl-heimdal-libs2.1.28-r57BSD-3-Clause
cyrus-sasl-heimdal-libs2.1.28-r57—
cyrus-sasl-heimdal.yamlee3eac73dda22e8dd32fa5fb3e3a1712a6e812d7Apache-2.0
e2fsprogsv1.47.4GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT
e2fsprogs.yamlb99a75e3a9c26fa0720cd2cf394093c19d279152Apache-2.0
ecpg-1818.6-r3BSD-3-Clause
ecpg-1818.6-r3BSD-3-Clause
ecpg-1818.6-r3—
gcc.yaml794cf72f88e1b408eca5da0dbf5c5ed25543606dApache-2.0
gdbm1.26-r6GPL-3.0-or-later
gdbm1.26-r6GPL-3.0-or-later
gdbm1.26-r6—
gdbm.yamlf003022285365e5de3bee7aa44caafa602eca04bApache-2.0
git/gdbmv1.26GPL-3.0-or-later
git/glibcb4f51887c48ac82acfdb13f96d9eab5d120cb2b7LGPL-2.1-or-later
git/readlinereadline-8.3GPL-3.0-or-later
glibc-2.442.44-r7LGPL-2.1-or-later
glibc-2.442.44-r7LGPL-2.1-or-later
glibc-2.442.44-r7—
glibc-2.44-locale-en2.44-r7LGPL-2.1-or-later
glibc-2.44-locale-en2.44-r7LGPL-2.1-or-later
glibc-2.44-locale-en2.44-r7—
glibc-2.44-locale-posix2.44-r7LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r7LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r7—
glibc-2.44.yaml2f4fbb70b55156f2d4cabff471b50dab0e75aa89Apache-2.0
GNOME/libxml2v2.15.4MIT
GNOME/libxsltv1.1.45MIT
gnutools/gccreleases/gcc-16.2.0GPL-3.0-or-later WITH GCC-exception-3.1
heimdalheimdal-7.8.0BSD-3-Clause
heimdal-libs7.8.0-r52BSD-3-Clause
heimdal-libs7.8.0-r52BSD-3-Clause
heimdal-libs7.8.0-r52—
heimdal.yaml16b770d73d6c8d3601394aa2d9f71d15b074a8dbApache-2.0
icurelease-78.3MIT
icu.yamle063c48b03e28f3eb5a854375fbfd4284eaab2f6Apache-2.0
icu78-data-full78.3-r3MIT
icu78-data-full78.3-r3MIT
icu78-data-full78.3-r3—
keyutils-libs1.6.3-r40GPL-2.0-or-later OR LGPL-2.0-or-later
keyutils-libs1.6.3-r40(GPL-2.0-or-later OR LGPL-2.0-or-later)
keyutils-libs1.6.3-r40—
keyutils.yaml2e53452a8c1a05c81d7beb0148e1b8d73fd088c3Apache-2.0
krb5krb5-1.22.2-finalMIT
krb5-conf1.0-r9MIT
krb5-conf1.0-r9MIT
krb5-conf1.0-r9—
krb5-conf.yamlbb37bc90f076f9eb2a12980e43c3f12673133835Apache-2.0
krb5-libs1.22.2-r4MIT
krb5-libs1.22.2-r4MIT
krb5-libs1.22.2-r4—
krb5.yaml9a7875e9cfcbd59186154753bceb1d973e939c32Apache-2.0
ld-linux-2.442.44-r7LGPL-2.1-or-later
ld-linux-2.442.44-r7LGPL-2.1-or-later
ld-linux-2.442.44-r7—
libbrotlicommon11.2.0-r5MIT
libbrotlicommon11.2.0-r5MIT
libbrotlicommon11.2.0-r5—
libbrotlidec11.2.0-r5MIT
libbrotlidec11.2.0-r5MIT
libbrotlidec11.2.0-r5—
libbrotlienc11.2.0-r5MIT
libbrotlienc11.2.0-r5MIT
libbrotlienc11.2.0-r5—
libcom_err1.47.4-r2GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT
libcom_err1.47.4-r2(GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT)
libcom_err1.47.4-r2—
libcrypt1-2.442.44-r7LGPL-2.1-or-later
libcrypt1-2.442.44-r7LGPL-2.1-or-later
libcrypt1-2.442.44-r7—
libcrypto33.6.4-r8Apache-2.0
libcrypto33.6.4-r8Apache-2.0
libcrypto33.6.4-r8—
libedit3.1-r19BSD-3-Clause
libedit3.1—
libedit3.1-r19BSD-3-Clause
libedit3.1-r19—
libedit.yaml1574edbac19725d56d4ab152307a824888f0eee3Apache-2.0
libffi3.8.0-r1MIT
libffiv3.8.0MIT
libffi3.8.0-r1MIT
libffi3.8.0-r1—
libffi.yaml719d64d3fcaaae77a969bee96bbd6c1bbba9d9ddApache-2.0
libgcc16.2.0-r1GPL-3.0-or-later WITH GCC-exception-3.1
libgcc16.2.0-r1(GPL-3.0-or-later WITH GCC-exception-3.1)
libgcc16.2.0-r1—
libicu7878.3-r3MIT
libicu7878.3-r3MIT
libicu7878.3-r3—
libldap-2.62.6.14-r0OLDAP-2.8
libldap-2.62.6.14-r0OLDAP-2.8
libldap-2.62.6.14-r0—
libLLVM-1919.1.7-r28Apache-2.0
libLLVM-1919.1.7-r28Apache-2.0
libLLVM-1919.1.7-r28—
liblz4-11.10.0-r10BSD-2-Clause AND GPL-2.0-only
liblz4-11.10.0-r10(BSD-2-Clause AND GPL-2.0-only)
liblz4-11.10.0-r10—
libpcre2-8-010.49-r0BSD-3-Clause
libpcre2-8-010.49-r0BSD-3-Clause
libpcre2-8-010.49-r0—
libpq-1818.6-r3BSD-3-Clause
libpq-1818.6-r3BSD-3-Clause
libpq-1818.6-r3—
libselinux3.11-r2libselinux-1.0
libselinux3.11-r2libselinux-1.0
libselinux3.11-r2—
libselinux.yaml7c655233085e1d8dec7fac1996f808f33b0e96cbApache-2.0
libsepol3.11-r3LGPL-2.1
libsepol3.11-r3LGPL-2.1-only
libsepol3.11-r3—
libsepol.yaml203e65dd274965582cb0226c6aa7ca368c2e684eApache-2.0
libssl33.6.4-r8Apache-2.0
libssl33.6.4-r8Apache-2.0
libssl33.6.4-r8—
libstdc++16.2.0-r1GPL-3.0-or-later WITH GCC-exception-3.1
libstdc++16.2.0-r1(GPL-3.0-or-later WITH GCC-exception-3.1)
libstdc++16.2.0-r1—
libuuid2.42.4-r0GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC
libuuid2.42.4-r0(GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC)
libuuid2.42.4-r0—
libverto0.3.2-r8MIT
libverto0.3.2MIT
libverto0.3.2-r8MIT
libverto0.3.2-r8—
libverto.yaml12f50f8d25640a0ca5ce3ac4cb6a2b8c472ab7a6Apache-2.0
libxcrypt4.5.2-r5GPL-2.0-or-later AND LGPL-2.1-or-later
libxcryptv4.5.2GPL-2.0-or-later AND LGPL-2.1-or-later
libxcrypt4.5.2-r5(GPL-2.0-or-later AND LGPL-2.1-or-later)
libxcrypt4.5.2-r5—
libxcrypt.yamle199a2ea58e2f64dce226ac5edb148fa8ff72664Apache-2.0
libxml2-162.15.4-r0MIT
libxml2-162.15.4-r0MIT
libxml2-162.15.4-r0—
libxml2.yaml085cfa69d2148afb7dedc8ed1273e176609be241Apache-2.0
libxslt1.1.45-r4MIT
libxslt1.1.45-r4MIT
libxslt1.1.45-r4—
libxslt.yamlbd120881708a44597d42e210696a08a5dba6e4ddApache-2.0
libzstd11.5.7-r10BSD-2-Clause AND GPL-2.0-only
libzstd11.5.7-r10(BSD-2-Clause AND GPL-2.0-only)
libzstd11.5.7-r10—
linux-pam1.7.3-r0BSD-3-Clause
linux-pamv1.7.3BSD-3-Clause
linux-pam1.7.3-r0BSD-3-Clause
linux-pam1.7.3-r0—
linux-pam.yamld506f9cbfb4cb161680cff0766f824744e568eebApache-2.0
llvm-19.yaml1877cea9027254040d8ea66099dd76419ff9f422Apache-2.0
llvm-projectllvmorg-19.1.7Apache-2.0
localedef-2.442.44-r7LGPL-2.1-or-later
localedef-2.442.44-r7LGPL-2.1-or-later
localedef-2.442.44-r7—
lz4v1.10.0BSD-2-Clause AND GPL-2.0-only
lz4.yaml5aa675252319732c629e6b61526a86c452f6a81aApache-2.0
ncurses6.6.20260926-r0MIT
ncurses6.6.20260926-r0MIT
ncurses6.6.20260926-r0—
ncurses-snapshotsv6_6_20260926MIT
ncurses-terminfo-base6.6.20260926-r0MIT
ncurses-terminfo-base6.6.20260926-r0MIT
ncurses-terminfo-base6.6.20260926-r0—
ncurses.yaml49af4fd909fca8f288f9ca88f700cbb6bd987f33Apache-2.0
openldap-2.6.yaml90bc5eeb4e3dd4e21c12479853d33abd5497061fApache-2.0
openldap/openldapOPENLDAP_REL_ENG_2_6_14OLDAP-2.8
opensslopenssl-4.0.2Apache-2.0
opensslopenssl-3.6.4Apache-2.0
openssl-4.0-libcrypto4.0.2-r2Apache-2.0
openssl-4.0-libcrypto4.0.2-r2Apache-2.0
openssl-4.0-libcrypto4.0.2-r2—
openssl-4.0-libssl4.0.2-r2Apache-2.0
openssl-4.0-libssl4.0.2-r2Apache-2.0
openssl-4.0-libssl4.0.2-r2—
openssl-4.0.yamlb8f04118437fbbf25bbaad575ccb9f2ed62b8503Apache-2.0
openssl-provider-legacy-allowed4.0.2-r3Apache-2.0
openssl-provider-legacy-allowed4.0.2-r3Apache-2.0
openssl-provider-legacy-allowed4.0.2-r3—
openssl-provider-legacy-allowed.yamlb8f04118437fbbf25bbaad575ccb9f2ed62b8503Apache-2.0
openssl.yamlbe56cfaac075e77bffb92439e0438bb31a21a2c7Apache-2.0
pcre2pcre2-10.49BSD-3-Clause
pcre2.yaml12446114fe264503593128d308520875edaca797Apache-2.0
pgaudit18.0BSD-3-Clause
pgaudit-1818.0-r5BSD-3-Clause
pgaudit-1818.0-r5BSD-3-Clause
pgaudit-1818.0-r5—
pgaudit-18.yaml15754fea79c5dc653fa96f7544835d513b72464cApache-2.0
postgresREL_18_6BSD-3-Clause
postgresql-1818.6-r3BSD-3-Clause
postgresql-1818.6-r3BSD-3-Clause
postgresql-1818.6-r3—
postgresql-18-base18.6-r3BSD-3-Clause
postgresql-18-base18.6-r3BSD-3-Clause
postgresql-18-base18.6-r3—
postgresql-18-client18.6-r3BSD-3-Clause
postgresql-18-client18.6-r3BSD-3-Clause
postgresql-18-client18.6-r3—
postgresql-18-client-base18.6-r3BSD-3-Clause
postgresql-18-client-base18.6-r3BSD-3-Clause
postgresql-18-client-base18.6-r3—
postgresql-18-contrib18.6-r3BSD-3-Clause
postgresql-18-contrib18.6-r3BSD-3-Clause
postgresql-18-contrib18.6-r3—
postgresql-18.yamle862a73c47010bbdd0ba5376a84c7020e56c34a0Apache-2.0
pub/scm/linux/kernel/git/dhowells/keyutilsv1.6.3GPL-2.0-or-later OR LGPL-2.0-or-later
readline8.3-r3GPL-3.0-or-later
readline8.3-r3GPL-3.0-or-later
readline8.3-r3—
readline.yaml20a5359ac0a7a6aca23efa343f0f29c8d3ea1453Apache-2.0
selinuxlibsepol-3.11LGPL-2.1
selinuxlibselinux-3.11libselinux-1.0
sha256:bc11ef83773b2609895bd5c532107db97aa5f4ee1a0994602fc2431ea602998c20230201—
sha256:dc1e8ceef51a38b7e48acc45c689e2db390488144d0aef836170f79b82e44891sha256:dc1e8ceef51a38b7e48acc45c689e2db390488144d0aef836170f79b82e44891—
sqlite3.53.4—
sqlite-libs3.53.4-r2blessing
sqlite-libs3.53.4-r2blessing
sqlite-libs3.53.4-r2—
sqlite.yaml89df0d1a31c1a22d7d67ddf690145ffc5b9f759dApache-2.0
tz2026dCC-PDDC
tzdata2026d-r0CC-PDDC
tzdata2026d-r0CC-PDDC
tzdata2026d-r0—
tzdata.yamlb12f667056022524e4a3c00ed5f336783f4fea98Apache-2.0
util-linuxv2.42.4GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC
util-linux.yamladae743872184acfea818f26f89967f7d8bd1d91Apache-2.0
wolfi20230201—
wolfi-baselayout20230201-r30MIT
wolfi-baselayout20230201-r30MIT
wolfi-baselayout20230201-r30—
wolfi-baselayout.yamla4472f6292a5e48d6d611bf24c6e119b1a483e66Apache-2.0
zlib1.3.2.1_rc20260601-r0MPL-2.0 AND MIT
zlibe3dc0a85b7032e98380dec011bc8f2c2ee0d8fcaMPL-2.0 AND MIT
zlib1.3.2.1_rc20260601-r0(MPL-2.0 AND MIT)
zlib1.3.2.1_rc20260601-r0—
zlib.yamlf2ad881d0053f3f3b6b639e041b171fc0e5b7244Apache-2.0
zstdv1.5.7BSD-2-Clause AND GPL-2.0-only
zstd.yamldf31c4c7ec10ae6f41a9433c0cb7ab03deabcf06Apache-2.0
4 medium 0 fixable
CVESeverityPackageInstalledFixed in
CVE-2026-77117 Medium glibc-2.44 2.44-r7 —
CVE-2026-80489 Medium glibc-2.44 2.44-r7 —
CVE-2026-8674 Medium glibc-2.44 2.44-r7 —
CVE-2026-89092 Medium glibc-2.44 2.44-r7 —

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-postgres-slim:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-postgres-slim:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-postgres-slim:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Databases images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.