solr

Apache Solr enterprise search platform built on Lucene. Custom jlink JRE keeps the runtime small; cosign-signed with SBOM attestations and daily rebuilds.

Vulnerabilities
Compressed size
310 MB
Architectures
amd64, arm64
Default user
solr (65532)
Last built
today

Pull this image

docker pull ghcr.io/rtvkiz/minimal-solr:latest
Repository
ghcr.io/rtvkiz/minimal-solr
Digest
sha256:b245f6c844a97a8585f447ef5738bbc24c52ba0f7380f2260ed4c52f21259d28
Built at
2026-11-12T08:04:28Z
Primary package
solr
Entrypoint
/usr/bin/solr-entrypoint.sh
User
solr (65532)
Working dir
/
Architectures
x86_64, aarch64
Environment
PATH=/usr/bin:/binJAVA_HOME=/usr/lib/jvm/java-21-minimalSOLR_HOME=/var/solr/dataSOLR_LOGS_DIR=/var/solr/logsSOLR_HOST_BIND=0.0.0.0
Labels
org.opencontainers.image.titleminimal-solr
org.opencontainers.image.descriptionHardened Apache Solr search server with custom jlink JRE, daily CVE patches
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/solr
org.opencontainers.image.licensesApache-2.0
TagPullPublished
10 ghcr.io/rtvkiz/minimal-solr:10 2026-11-12
10.1 ghcr.io/rtvkiz/minimal-solr:10.1 2026-11-12
10.1.0-r0 ghcr.io/rtvkiz/minimal-solr:10.1.0-r0 2026-11-12
10.1.0-r0-20261112 ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261112 2026-11-12
latest ghcr.io/rtvkiz/minimal-solr:latest 2026-11-12
10-dev ghcr.io/rtvkiz/minimal-solr:10-dev 2026-11-12
10.1-dev ghcr.io/rtvkiz/minimal-solr:10.1-dev 2026-11-12
10.1.0-r0-20261112-dev ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261112-dev 2026-11-12
10.1.0-r0-dev ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-dev 2026-11-12
latest-dev ghcr.io/rtvkiz/minimal-solr:latest-dev 2026-11-12
10.1.0-r0-20261111 ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261111 2026-11-11
10.1.0-r0-20261111-dev ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261111-dev 2026-11-11
10.1.0-r0-20261110 ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261110 2026-11-10
10.1.0-r0-20261110-dev ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261110-dev 2026-11-10
10.1.0-r0-20261109 ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261109 2026-11-09
10.1.0-r0-20261109-dev ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261109-dev 2026-11-09
10.1.0-r0-20261108 ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261108 2026-11-08
10.1.0-r0-20261108-dev ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261108-dev 2026-11-08
10.1.0-r0-20261107 ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261107 2026-11-07
10.1.0-r0-20261107-dev ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261107-dev 2026-11-07
10.1.0-r0-20261106 ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261106 2026-11-06
10.1.0-r0-20261106-dev ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261106-dev 2026-11-06
10.1.0-r0-20261105 ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261105 2026-11-05
10.1.0-r0-20261105-dev ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261105-dev 2026-11-05
10.1.0-r0-20261104 ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261104 2026-11-04
10.1.0-r0-20261104-dev ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261104-dev 2026-11-04
10.1.0-r0-20261029 ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261029 2026-10-29
10.1.0-r0-20261029-dev ghcr.io/rtvkiz/minimal-solr:10.1.0-r0-20261029-dev 2026-10-29
10.0 ghcr.io/rtvkiz/minimal-solr:10.0 2026-10-29
10.0.0-r0 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0 2026-10-29
10.0.0-r0-20261029 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261029 2026-10-29
10.0-dev ghcr.io/rtvkiz/minimal-solr:10.0-dev 2026-10-29
10.0.0-r0-20261029-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261029-dev 2026-10-29
10.0.0-r0-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-dev 2026-10-29
10.0.0-r0-20261027 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261027 2026-10-27
10.0.0-r0-20261027-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261027-dev 2026-10-27
10.0.0-r0-20261026 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261026 2026-10-26
10.0.0-r0-20261026-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261026-dev 2026-10-26
10.0.0-r0-20261025 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261025 2026-10-25
10.0.0-r0-20261025-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261025-dev 2026-10-25
10.0.0-r0-20261024 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261024 2026-10-24
10.0.0-r0-20261024-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261024-dev 2026-10-24
10.0.0-r0-20261023 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261023 2026-10-23
10.0.0-r0-20261023-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261023-dev 2026-10-23
10.0.0-r0-20261022-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261022-dev 2026-10-22
10.0.0-r0-20261022 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261022 2026-10-22
10.0.0-r0-20261021-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261021-dev 2026-10-21
10.0.0-r0-20261021 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261021 2026-10-21
10.0.0-r0-20261020 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261020 2026-10-20
10.0.0-r0-20261020-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261020-dev 2026-10-20
10.0.0-r0-20261019 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261019 2026-10-19
10.0.0-r0-20261019-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261019-dev 2026-10-19
10.0.0-r0-20261018 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261018 2026-10-18
10.0.0-r0-20261018-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261018-dev 2026-10-18
10.0.0-r0-20261017 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261017 2026-10-17
10.0.0-r0-20261017-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261017-dev 2026-10-17
10.0.0-r0-20261016 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261016 2026-10-16
10.0.0-r0-20261016-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261016-dev 2026-10-16
10.0.0-r0-20261015 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261015 2026-10-15
10.0.0-r0-20261015-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261015-dev 2026-10-15
10.0.0-r0-20261014 ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261014 2026-10-14
10.0.0-r0-20261014-dev ghcr.io/rtvkiz/minimal-solr:10.0.0-r0-20261014-dev 2026-10-14

155 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20261020MPL-2.0 AND MIT
alsa-lib1.2.16.1-r5LGPL-2.1-or-later
alsa-libv1.2.16.1LGPL-2.1-or-later
alsa-lib1.2.16.1-r5LGPL-2.1-or-later
alsa-lib1.2.16.1-r5—
alsa-lib.yaml4402560d16452f6def014ce2fd6eccf701ed782cApache-2.0
bash5.3-r14GPL-3.0-or-later
bash5.3-r14GPL-3.0-or-later
bash5.3-r14—
bash.yamlac7b15dc2695924986372a27cd7d6c4e029c5efaApache-2.0
brotliv1.2.1MIT
brotli.yamlf5ef816d1cb2bd0e165a402c4e8a4c4622464bf3Apache-2.0
busybox1.38.0-r3GPL-2.0-only
busybox1.38.0-r3GPL-2.0-only
busybox1.38.0-r3—
busybox_mirror1_38_0GPL-2.0-only
busybox.yaml59d45eb49286129d8d21b2469befa3b55be4719bApache-2.0
bzip2.yaml6ea997c2746016cbc0225ce27cb992c09feefd2aApache-2.0
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0(MPL-2.0 AND MIT)
ca-certificates-bundle20261020-r0—
ca-certificates.yaml8061afafa65af5a9026707a8880e14120dd6f4a0Apache-2.0
freetype2.14.3-r7FTL OR GPL-2.0-or-later
freetype2.14.3-r7(FTL OR GPL-2.0-or-later)
freetype2.14.3-r7—
freetype.yaml6ff29abe842715e2edb5412c279fa078916c86deApache-2.0
freetype/freetypeVER-2-14-3FTL OR GPL-2.0-or-later
gcc.yaml4d188060cbd00821a95f1ef60605da4817e781bbApache-2.0
giflib6.1.3-r4MIT
giflib6.1.3-r4MIT
giflib6.1.3-r4—
giflib.yamlbdc197227f39597f43727c03854efbb4e834c5efApache-2.0
git/bashbash-5.3GPL-3.0-or-later
git/bzip2bzip2-1.0.8bzip2-1.0.6
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16—
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16—
glibc-2.44.yaml69c2b75e0711c38be3c5881e3a141667ccf54341Apache-2.0
gnutools/gccreleases/gcc-16.2.0GPL-3.0-or-later WITH GCC-exception-3.1
gnutools/glibc47e2b570410fab606de29f550534a721184852c3LGPL-2.1-or-later
images/solr/melange.yaml862101ee7af52b6dfb7db319fbf7c11793a3d433—
lcms2.yamle286b020d6a3a526b72944884af2dded31b6363aApache-2.0
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16—
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3—
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3—
libbz2-11.0.8-r31bzip2-1.0.6
libbz2-11.0.8-r31bzip2-1.0.6
libbz2-11.0.8-r31—
libcrypt1-2.442.44-r16LGPL-2.1-or-later
libcrypt1-2.442.44-r16LGPL-2.1-or-later
libcrypt1-2.442.44-r16—
libgcc16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libgcc16.2.0-r3(GPL-3.0-or-later WITH GCC-exception-3.1)
libgcc16.2.0-r3—
libjpeg-turbo3.2.1-r0BSD-3-Clause AND IJG AND Zlib
libjpeg-turbo3.2.1BSD-3-Clause AND IJG AND Zlib
libjpeg-turbo3.2.1-r0(BSD-3-Clause AND IJG AND Zlib)
libjpeg-turbo3.2.1-r0—
libjpeg-turbo.yaml2d92ccc84a18a2e9505e5320d6e31166925aaf65Apache-2.0
liblcms2-22.20-r1MIT AND GPL-3.0-only
liblcms2-22.20-r1(MIT AND GPL-3.0-only)
liblcms2-22.20-r1—
libpngv1.6.59libpng-2.0
libpng.yamlb9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518Apache-2.0
libpng16-161.6.59-r2libpng-2.0
libpng16-161.6.59-r2libpng-2.0
libpng16-161.6.59-r2—
libproc-2-04.0.7-r3GPL-2.0-or-later AND LGPL-2.1-or-later
libproc-2-04.0.7-r3(GPL-2.0-or-later AND LGPL-2.1-or-later)
libproc-2-04.0.7-r3—
libx11-61.8.14-r4XFree86-1.1
libx11-61.8.14-r4XFree86-1.1
libx11-61.8.14-r4—
libx11-data1.8.14-r4XFree86-1.1
libx11-data1.8.14-r4XFree86-1.1
libx11-data1.8.14-r4—
libx11.yamle286b020d6a3a526b72944884af2dded31b6363aApache-2.0
libxau1.0.12-r11MIT
libxau1.0.12-r11MIT
libxau1.0.12-r11—
libxau.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
libxcb1.17.0-r19MIT
libxcb1.17.0-r19MIT
libxcb1.17.0-r19—
libxcb.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
libxcrypt4.5.2-r8GPL-2.0-or-later AND LGPL-2.1-or-later
libxcryptv4.5.2GPL-2.0-or-later AND LGPL-2.1-or-later
libxcrypt4.5.2-r8(GPL-2.0-or-later AND LGPL-2.1-or-later)
libxcrypt4.5.2-r8—
libxcrypt.yamlb9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518Apache-2.0
libxdmcp1.1.5-r14MIT
libxdmcp1.1.5-r14MIT
libxdmcp1.1.5-r14—
libxdmcp.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
libxext.yamlf394a671ec1e336dc4f0b1ed93fca377b7a78c2aApache-2.0
libxext61.3.7-r5MIT
libxext61.3.7-r5MIT
libxext61.3.7-r5—
libxi.yamlf394a671ec1e336dc4f0b1ed93fca377b7a78c2aApache-2.0
libxi61.8.4-r1MIT AND X11
libxi61.8.4-r1(MIT AND X11)
libxi61.8.4-r1—
libxrender.yamlf394a671ec1e336dc4f0b1ed93fca377b7a78c2aApache-2.0
libxrender10.9.13-r1XFree86-1.1
libxrender10.9.13-r1XFree86-1.1
libxrender10.9.13-r1—
libxtst.yamlf394a671ec1e336dc4f0b1ed93fca377b7a78c2aApache-2.0
libxtst61.2.6-r1XFree86-1.1
libxtst61.2.6-r1XFree86-1.1
libxtst61.2.6-r1—
Little-CMSlcms2.20MIT AND GPL-3.0-only
ncurses6.6.20261107-r0MIT
ncurses6.6.20261107-r0MIT
ncurses6.6.20261107-r0—
ncurses-snapshotsv6_6_20261107MIT
ncurses-terminfo-base6.6.20261107-r0MIT
ncurses-terminfo-base6.6.20261107-r0MIT
ncurses-terminfo-base6.6.20261107-r0—
ncurses.yaml57b90c0084b0bc101663cdfcaa44f4ce83312443Apache-2.0
p/giflib/code6.1.3MIT
procps4.0.7—
procps4.0.7-r3GPL-2.0-or-later AND LGPL-2.1-or-later
procps4.0.7-r3(GPL-2.0-or-later AND LGPL-2.1-or-later)
procps4.0.7-r3—
procps.yaml40e94215f5dcd578d6e737bd1b126cdbb5acf9cbApache-2.0
sha256:32258d6561e7300b71728f5949c59653474862f1051d3bd778261124784c7d6csha256:32258d6561e7300b71728f5949c59653474862f1051d3bd778261124784c7d6c—
sha256:af6e9d8cc549c7f81f53acdb87f899f260e17196fc891861571be1b581aff08720230201—
solr10.1.0-r0Apache-2.0
wolfi20230201—
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31—
wolfi-baselayout.yamled415005c84750f03c4a9252137813734a224ae7Apache-2.0
xorg/lib/libx11libX11-1.8.14XFree86-1.1
xorg/lib/libxaulibXau-1.0.12MIT
xorg/lib/libxcblibxcb-1.17.0MIT
xorg/lib/libxdmcplibXdmcp-1.1.5MIT
xorg/lib/libxextlibXext-1.3.7MIT
xorg/lib/libxilibXi-1.8.4MIT AND X11
xorg/lib/libxrenderlibXrender-0.9.13XFree86-1.1
xorg/lib/libxtstlibXtst-1.2.6XFree86-1.1
zlib1.3.2.1_rc20260921-r2MPL-2.0 AND MIT
zlib767c4c947852e143f582c85f14cf573411df1b35MPL-2.0 AND MIT
zlib1.3.2.1_rc20260921-r2(MPL-2.0 AND MIT)
zlib1.3.2.1_rc20260921-r2—
zlib.yaml5aeb575ed7ca64fb21dfda042e170d08f1654bbcApache-2.0
3 medium 0 fixable
CVESeverityPackageInstalledFixed in
CVE-2026-90781 Medium alsa-lib 1.2.16.1-r5 —
CVE-2026-96674 Medium alsa-lib 1.2.16.1-r5 —
CVE-2026-96675 Medium alsa-lib 1.2.16.1-r5 —

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-solr:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-solr:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-solr:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Databases images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.