valkey

Valkey in-memory data store, the BSD-licensed Redis fork. Built from upstream source, shell-less, cosign-signed and rebuilt daily against CVE fixes.

Vulnerabilities
None
Compressed size
14 MB
Architectures
amd64, arm64
Default user
valkey (65532)
Last built
today
Upstream
valkey.io

Pull this image

docker pull ghcr.io/rtvkiz/minimal-valkey:latest
Repository
ghcr.io/rtvkiz/minimal-valkey
Digest
sha256:509fe5296a0ad0fd2131cb42e2d43a9564696e85f08c70957ac7f59493542a1b
Built at
2026-11-12T08:04:01Z
Primary package
valkey
Entrypoint
/usr/bin/valkey-server
User
valkey (65532)
Working dir
/
Architectures
x86_64, aarch64
Environment
PATH=/usr/bin:/bin
Labels
org.opencontainers.image.titleminimal-valkey
org.opencontainers.image.descriptionHardened shell-less Valkey image built from source via melange with daily CVE patches
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/valkey
org.opencontainers.image.licensesBSD-3-Clause
TagPullPublished
9 ghcr.io/rtvkiz/minimal-valkey:9 2026-11-12
9.1 ghcr.io/rtvkiz/minimal-valkey:9.1 2026-11-12
9.1.3-r0 ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0 2026-11-12
9.1.3-r0-20261112 ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261112 2026-11-12
latest ghcr.io/rtvkiz/minimal-valkey:latest 2026-11-12
9-dev ghcr.io/rtvkiz/minimal-valkey:9-dev 2026-11-12
9.1-dev ghcr.io/rtvkiz/minimal-valkey:9.1-dev 2026-11-12
9.1.3-r0-20261112-dev ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261112-dev 2026-11-12
9.1.3-r0-dev ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-dev 2026-11-12
latest-dev ghcr.io/rtvkiz/minimal-valkey:latest-dev 2026-11-12
9.1.3-r0-20261111-dev ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261111-dev 2026-11-11
9.1.3-r0-20261111 ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261111 2026-11-11
9.1.3-r0-20261110 ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261110 2026-11-10
9.1.3-r0-20261110-dev ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261110-dev 2026-11-10
9.1.3-r0-20261109 ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261109 2026-11-09
9.1.3-r0-20261109-dev ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261109-dev 2026-11-09
9.1.3-r0-20261108 ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261108 2026-11-08
9.1.3-r0-20261108-dev ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261108-dev 2026-11-08
9.1.3-r0-20261107 ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261107 2026-11-07
9.1.3-r0-20261107-dev ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261107-dev 2026-11-07
9.1.3-r0-20261106 ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261106 2026-11-06
9.1.3-r0-20261106-dev ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261106-dev 2026-11-06
9.1.3-r0-20261105 ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261105 2026-11-05
9.1.3-r0-20261105-dev ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261105-dev 2026-11-05
9.1.3-r0-20261104 ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261104 2026-11-04
9.1.3-r0-20261104-dev ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261104-dev 2026-11-04
9.1.3-r0-20261027 ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261027 2026-10-27
9.1.3-r0-20261027-dev ghcr.io/rtvkiz/minimal-valkey:9.1.3-r0-20261027-dev 2026-10-27
9.1.2-r0 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0 2026-10-27
9.1.2-r0-20261027 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261027 2026-10-27
9.1.2-r0-20261027-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261027-dev 2026-10-27
9.1.2-r0-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-dev 2026-10-27
9.1.2-r0-20261026 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261026 2026-10-26
9.1.2-r0-20261026-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261026-dev 2026-10-26
9.1.2-r0-20261025 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261025 2026-10-25
9.1.2-r0-20261025-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261025-dev 2026-10-25
9.1.2-r0-20261024 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261024 2026-10-24
9.1.2-r0-20261024-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261024-dev 2026-10-24
9.1.2-r0-20261023 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261023 2026-10-23
9.1.2-r0-20261023-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261023-dev 2026-10-23
9.1.2-r0-20261022 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261022 2026-10-22
9.1.2-r0-20261022-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261022-dev 2026-10-22
9.1.2-r0-20261021 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261021 2026-10-21
9.1.2-r0-20261021-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261021-dev 2026-10-21
9.1.2-r0-20261020 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261020 2026-10-20
9.1.2-r0-20261020-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261020-dev 2026-10-20
9.1.2-r0-20261019 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261019 2026-10-19
9.1.2-r0-20261019-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261019-dev 2026-10-19
9.1.2-r0-20261018 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261018 2026-10-18
9.1.2-r0-20261018-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261018-dev 2026-10-18
9.1.2-r0-20261016 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261016 2026-10-16
9.1.2-r0-20261017 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261017 2026-10-16
9.1.2-r0-20261016-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261016-dev 2026-10-16
9.1.2-r0-20261017-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261017-dev 2026-10-16
9.1.2-r0-20261015 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261015 2026-10-15
9.1.2-r0-20261015-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261015-dev 2026-10-15
9.1.2-r0-20261014 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261014 2026-10-14
9.1.2-r0-20261014-dev ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261014-dev 2026-10-14
9.1.2-r0-20261013 ghcr.io/rtvkiz/minimal-valkey:9.1.2-r0-20261013 2026-10-13

70 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20261020MPL-2.0 AND MIT
brotliv1.2.1MIT
brotli.yamlf5ef816d1cb2bd0e165a402c4e8a4c4622464bf3Apache-2.0
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0(MPL-2.0 AND MIT)
ca-certificates-bundle20261020-r0—
ca-certificates.yaml8061afafa65af5a9026707a8880e14120dd6f4a0Apache-2.0
gcc.yaml4d188060cbd00821a95f1ef60605da4817e781bbApache-2.0
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16—
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16—
glibc-2.44.yaml69c2b75e0711c38be3c5881e3a141667ccf54341Apache-2.0
gnutools/gccreleases/gcc-16.2.0GPL-3.0-or-later WITH GCC-exception-3.1
gnutools/glibc47e2b570410fab606de29f550534a721184852c3LGPL-2.1-or-later
images/valkey/melange.yaml862101ee7af52b6dfb7db319fbf7c11793a3d433—
jemalloc5.4.0BSD-2-Clause
jemalloc.yaml0d1cb8462683e2c06d7591b8b4ad4d1f2797a0f7Apache-2.0
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16—
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3—
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3—
libbrotlienc11.2.1-r3MIT
libbrotlienc11.2.1-r3MIT
libbrotlienc11.2.1-r3—
libgcc16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libgcc16.2.0-r3(GPL-3.0-or-later WITH GCC-exception-3.1)
libgcc16.2.0-r3—
libjemalloc25.4.0-r3BSD-2-Clause
libjemalloc25.4.0-r3BSD-2-Clause
libjemalloc25.4.0-r3—
libstdc++16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libstdc++16.2.0-r3(GPL-3.0-or-later WITH GCC-exception-3.1)
libstdc++16.2.0-r3—
opensslopenssl-4.1.0Apache-2.0
opensslopenssl-4.0.3Apache-2.0
opensslopenssl-3.6.5Apache-2.0
openssl-3.6-libcrypto3.6.5-r6Apache-2.0
openssl-3.6-libcrypto3.6.5-r6Apache-2.0
openssl-3.6-libcrypto3.6.5-r6—
openssl-3.6-libssl3.6.5-r6Apache-2.0
openssl-3.6-libssl3.6.5-r6Apache-2.0
openssl-3.6-libssl3.6.5-r6—
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-4.0-libcrypto4.0.3-r8—
openssl-4.0-libssl4.0.3-r8Apache-2.0
openssl-4.0-libssl4.0.3-r8Apache-2.0
openssl-4.0-libssl4.0.3-r8—
openssl-4.0.yaml53fb2f6751f832fa61ddba06cb8a40dbba5f409fApache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0—
openssl-provider-legacy-allowed.yamlaeae4801330be6fd269d5ed5640dc37b58ccab09Apache-2.0
openssl.yaml106006908276f73e5d13ceca9bc7038ea2d46446Apache-2.0
sha256:ac0655fd85f7ef8704d083fa5ccacf1df149566aca1b827f252746caf3d1d707sha256:ac0655fd85f7ef8704d083fa5ccacf1df149566aca1b827f252746caf3d1d707—
sha256:bc6a1f5e00f35dda899f65c9fbdf0be58e289f3aa020c1d20f252c0b8d1e8d4020230201—
valkey9.1.3-r0BSD-3-Clause
wolfi20230201—
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31—
wolfi-baselayout.yamled415005c84750f03c4a9252137813734a224ae7Apache-2.0

Clean   No known vulnerabilities in the latest scan.

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-valkey:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-valkey:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-valkey:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Caches, Queues & Messaging images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.