zot
Minimal OCI-native container registry (zot) implementing the OCI distribution spec, with the zli client. Shell-less, built from source, rebuilt daily.
- Vulnerabilities
- None
- Compressed size
- 30 MB
- Architectures
- amd64, arm64
- Default user
- nonroot (65532)
- Last built
- today
- Upstream
- zotregistry.dev
Pull this image
docker pull ghcr.io/rtvkiz/minimal-zot:latestdocker pull ghcr.io/rtvkiz/minimal-zot:latest-devThe -dev variant adds a shell, package manager and build toolchain. For CI and debugging — not production.
- Repository
- ghcr.io/rtvkiz/minimal-zot
- Digest
- sha256:59036829bc25adb8326574b48a9224bcd6447017a6fa360bc8d7b2a02ec13110
- Built at
- 2026-11-12T08:51:04Z
- Primary package
- zot
- Entrypoint
- /usr/bin/zot serve /etc/zot/config.json
- User
- nonroot (65532)
- Working dir
- /var/lib/registry
- Architectures
- x86_64, aarch64
- Environment
- Labels
-
org.opencontainers.image.title minimal-zot org.opencontainers.image.description Hardened shell-less zot OCI-native container image registry built on Wolfi with CVE patches on every rebuild org.opencontainers.image.url https://github.com/rtvkiz/minimal org.opencontainers.image.source https://github.com/rtvkiz/minimal/tree/main/images/zot org.opencontainers.image.licenses Apache-2.0
- Entrypoint
- /usr/bin/zot serve /etc/zot/config.json
- User
- nonroot (65532)
- Working dir
- /var/lib/registry
- Architectures
- x86_64, aarch64
- Environment
- Labels
-
org.opencontainers.image.title minimal-zot-dev org.opencontainers.image.description Dev variant of minimal-zot: same zot + shell and curl/jq. Not for production. org.opencontainers.image.url https://github.com/rtvkiz/minimal org.opencontainers.image.source https://github.com/rtvkiz/minimal/tree/main/images/zot org.opencontainers.image.licenses Apache-2.0 dev.minimal.variant dev
| Tag | Pull | Published |
|---|---|---|
| 2 | ghcr.io/rtvkiz/minimal-zot:2 | 2026-11-12 |
| 2.1 | ghcr.io/rtvkiz/minimal-zot:2.1 | 2026-11-12 |
| 2.1.23-r0 | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0 | 2026-11-12 |
| 2.1.23-r0-20261112 | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261112 | 2026-11-12 |
| latest | ghcr.io/rtvkiz/minimal-zot:latest | 2026-11-12 |
| 2-dev | ghcr.io/rtvkiz/minimal-zot:2-dev | 2026-11-12 |
| 2.1-dev | ghcr.io/rtvkiz/minimal-zot:2.1-dev | 2026-11-12 |
| 2.1.23-r0-20261112-dev | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261112-dev | 2026-11-12 |
| 2.1.23-r0-dev | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-dev | 2026-11-12 |
| latest-dev | ghcr.io/rtvkiz/minimal-zot:latest-dev | 2026-11-12 |
| 2.1.23-r0-20261111 | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261111 | 2026-11-11 |
| 2.1.23-r0-20261111-dev | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261111-dev | 2026-11-11 |
| 2.1.23-r0-20261110 | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261110 | 2026-11-10 |
| 2.1.23-r0-20261110-dev | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261110-dev | 2026-11-10 |
| 2.1.23-r0-20261108 | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261108 | 2026-11-08 |
| 2.1.23-r0-20261108-dev | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261108-dev | 2026-11-08 |
| 2.1.23-r0-20261107 | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261107 | 2026-11-07 |
| 2.1.23-r0-20261107-dev | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261107-dev | 2026-11-07 |
| 2.1.23-r0-20261106 | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261106 | 2026-11-06 |
| 2.1.23-r0-20261106-dev | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261106-dev | 2026-11-06 |
| 2.1.23-r0-20261105 | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261105 | 2026-11-05 |
| 2.1.23-r0-20261105-dev | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261105-dev | 2026-11-05 |
| 2.1.23-r0-20261104 | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261104 | 2026-11-04 |
| 2.1.23-r0-20261104-dev | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261104-dev | 2026-11-04 |
| 2.1.23-r0-20261102 | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261102 | 2026-11-02 |
| 2.1.23-r0-20261102-dev | ghcr.io/rtvkiz/minimal-zot:2.1.23-r0-20261102-dev | 2026-11-02 |
| 2.1.22-r0 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0 | 2026-10-29 |
| 2.1.22-r0-20261029 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261029 | 2026-10-29 |
| 2.1.22-r0-20261029-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261029-dev | 2026-10-29 |
| 2.1.22-r0-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-dev | 2026-10-29 |
| 2.1.22-r0-20261027 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261027 | 2026-10-27 |
| 2.1.22-r0-20261027-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261027-dev | 2026-10-27 |
| 2.1.22-r0-20261026 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261026 | 2026-10-26 |
| 2.1.22-r0-20261026-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261026-dev | 2026-10-26 |
| 2.1.22-r0-20261025 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261025 | 2026-10-25 |
| 2.1.22-r0-20261025-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261025-dev | 2026-10-25 |
| 2.1.22-r0-20261024 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261024 | 2026-10-24 |
| 2.1.22-r0-20261024-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261024-dev | 2026-10-24 |
| 2.1.22-r0-20261023 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261023 | 2026-10-23 |
| 2.1.22-r0-20261023-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261023-dev | 2026-10-23 |
| 2.1.22-r0-20261022 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261022 | 2026-10-22 |
| 2.1.22-r0-20261022-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261022-dev | 2026-10-22 |
| 2.1.22-r0-20261021 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261021 | 2026-10-21 |
| 2.1.22-r0-20261021-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261021-dev | 2026-10-21 |
| 2.1.22-r0-20261020 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261020 | 2026-10-20 |
| 2.1.22-r0-20261020-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261020-dev | 2026-10-20 |
| 2.1.22-r0-20261019 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261019 | 2026-10-19 |
| 2.1.22-r0-20261019-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261019-dev | 2026-10-19 |
| 2.1.22-r0-20261018 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261018 | 2026-10-18 |
| 2.1.22-r0-20261018-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261018-dev | 2026-10-18 |
| 2.1.22-r0-20261016 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261016 | 2026-10-16 |
| 2.1.22-r0-20261017 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261017 | 2026-10-16 |
| 2.1.22-r0-20261016-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261016-dev | 2026-10-16 |
| 2.1.22-r0-20261017-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261017-dev | 2026-10-16 |
| 2.1.22-r0-20261015 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261015 | 2026-10-15 |
| 2.1.22-r0-20261015-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261015-dev | 2026-10-15 |
| 2.1.22-r0-20261014 | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261014 | 2026-10-14 |
| 2.1.22-r0-20261014-dev | ghcr.io/rtvkiz/minimal-zot:2.1.22-r0-20261014-dev | 2026-10-14 |
The resolved SBOM isn't available for this build yet — showing the packages requested in the apko build recipe (without resolved versions). The full SBOM appears after the next scheduled build.
Clean No known vulnerabilities in the latest scan.
Everything is verifiable without an account. Copy and run:
Build provenance (SLSA v1.0, Build L2)
gh attestation verify oci://ghcr.io/rtvkiz/minimal-zot:latest --owner rtvkizCosign signature
cosign verify \
--certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
--certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
ghcr.io/rtvkiz/minimal-zot:latestSBOM attestation (SPDX)
cosign verify-attestation --type spdxjson \
--certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
--certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
ghcr.io/rtvkiz/minimal-zot:latest \
| jq -r '.payload | @base64d | fromjson | .predicate'Signatures are logged in the public Rekor transparency log.
More Infrastructure images
Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.