Mongodb 8.0
hardened
latest
Size Reduction
34%
786.9 MB to 517.4 MB (269.5 MB saved)
Component Reduction
88%
285 to 33 packages (252 removed)
Vulnerability Reduction
0%
0 to 0 vulnerabilities (0 eliminated)
Image Comparison
| Property | upstream | hardened |
|---|---|---|
| Image | docker.io/library/mongo:7.0.14 | ghcr.io/armorred/mongodb:8.0-hardened |
| Size | 786.9 MB | 517.4 MB |
| Layers | 8 | 34 |
| Components | 285 | 33 |
| Vulnerabilities | 0 | 0 |
| Runtime User | root | 999 |
Vulnerability Analysis
upstream
0 total
hardened
0 total
Software Bill of Materials
upstream components (285)
- adduser 3.118ubuntu5
- apt 2.4.13
- base-files 12ubuntu4.7
- base-passwd 3.5.52build1
- bash 5.1-6ubuntu1.1
- bsdutils 1:2.37.2-4ubuntu3.4
- ca-certificates 20240203~22.04.1
- coreutils 8.32-4.1ubuntu1.2
- dash 0.5.11+git20210903+057cd650a4ed-3build1
- debconf 1.5.79ubuntu1
- debianutils 5.5-1ubuntu2
- diffutils 1:3.8-0ubuntu2
- dpkg 1.21.1ubuntu2.3
- e2fsprogs 1.46.5-2ubuntu1.2
- findutils 4.8.0-1ubuntu3
- gcc-12-base 12.3.0-1ubuntu1~22.04
- github.com/golang/snappy v0.0.4
- github.com/golang/snappy v0.0.4
- github.com/golang/snappy v0.0.4
- github.com/golang/snappy v0.0.4
- github.com/golang/snappy v0.0.4
- github.com/golang/snappy v0.0.4
- github.com/golang/snappy v0.0.4
- github.com/golang/snappy v0.0.4
- github.com/jessevdk/go-flags v1.5.0
- github.com/jessevdk/go-flags v1.5.0
- github.com/jessevdk/go-flags v1.5.0
- github.com/jessevdk/go-flags v1.5.0
- github.com/jessevdk/go-flags v1.5.0
- github.com/jessevdk/go-flags v1.5.0
- github.com/jessevdk/go-flags v1.5.0
- github.com/jessevdk/go-flags v1.5.0
- github.com/klauspost/compress v1.17.8
- github.com/klauspost/compress v1.17.8
- github.com/klauspost/compress v1.17.8
- github.com/klauspost/compress v1.17.8
- github.com/klauspost/compress v1.17.8
- github.com/klauspost/compress v1.17.8
- github.com/klauspost/compress v1.17.8
- github.com/klauspost/compress v1.17.8
- github.com/mattn/go-runewidth v0.0.15
- github.com/moby/sys/user v0.1.0
- github.com/mongodb/mongo-tools UNKNOWN
- github.com/mongodb/mongo-tools UNKNOWN
- github.com/mongodb/mongo-tools UNKNOWN
- github.com/mongodb/mongo-tools UNKNOWN
- github.com/mongodb/mongo-tools UNKNOWN
- github.com/mongodb/mongo-tools UNKNOWN
- github.com/mongodb/mongo-tools UNKNOWN
- github.com/mongodb/mongo-tools UNKNOWN
- github.com/montanaflynn/stats v0.7.1
- github.com/montanaflynn/stats v0.7.1
- github.com/montanaflynn/stats v0.7.1
- github.com/montanaflynn/stats v0.7.1
- github.com/montanaflynn/stats v0.7.1
- github.com/montanaflynn/stats v0.7.1
- github.com/montanaflynn/stats v0.7.1
- github.com/montanaflynn/stats v0.7.1
- github.com/nsf/termbox-go v1.1.1
- github.com/pkg/errors v0.9.1
- github.com/pkg/errors v0.9.1
- github.com/pkg/errors v0.9.1
- github.com/pkg/errors v0.9.1
- github.com/pkg/errors v0.9.1
- github.com/pkg/errors v0.9.1
- github.com/pkg/errors v0.9.1
- github.com/pkg/errors v0.9.1
- github.com/rivo/uniseg v0.4.7
- github.com/tianon/gosu UNKNOWN
- github.com/xdg-go/pbkdf2 v1.0.0
- github.com/xdg-go/pbkdf2 v1.0.0
- github.com/xdg-go/pbkdf2 v1.0.0
- github.com/xdg-go/pbkdf2 v1.0.0
- github.com/xdg-go/pbkdf2 v1.0.0
- github.com/xdg-go/pbkdf2 v1.0.0
- github.com/xdg-go/pbkdf2 v1.0.0
- github.com/xdg-go/pbkdf2 v1.0.0
- github.com/xdg-go/scram v1.1.2
- github.com/xdg-go/scram v1.1.2
- github.com/xdg-go/scram v1.1.2
- github.com/xdg-go/scram v1.1.2
- github.com/xdg-go/scram v1.1.2
- github.com/xdg-go/scram v1.1.2
- github.com/xdg-go/scram v1.1.2
- github.com/xdg-go/scram v1.1.2
- github.com/xdg-go/stringprep v1.0.4
- github.com/xdg-go/stringprep v1.0.4
- github.com/xdg-go/stringprep v1.0.4
- github.com/xdg-go/stringprep v1.0.4
- github.com/xdg-go/stringprep v1.0.4
- github.com/xdg-go/stringprep v1.0.4
- github.com/xdg-go/stringprep v1.0.4
- github.com/xdg-go/stringprep v1.0.4
- github.com/youmark/pkcs8 v0.0.0-20201027041543-1326539a0a0a
- github.com/youmark/pkcs8 v0.0.0-20201027041543-1326539a0a0a
- github.com/youmark/pkcs8 v0.0.0-20201027041543-1326539a0a0a
- github.com/youmark/pkcs8 v0.0.0-20201027041543-1326539a0a0a
- github.com/youmark/pkcs8 v0.0.0-20201027041543-1326539a0a0a
- github.com/youmark/pkcs8 v0.0.0-20201027041543-1326539a0a0a
- github.com/youmark/pkcs8 v0.0.0-20201027041543-1326539a0a0a
- github.com/youmark/pkcs8 v0.0.0-20201027041543-1326539a0a0a
- go.mongodb.org/mongo-driver v1.16.0
- go.mongodb.org/mongo-driver v1.16.0
- go.mongodb.org/mongo-driver v1.16.0
- go.mongodb.org/mongo-driver v1.16.0
- go.mongodb.org/mongo-driver v1.16.0
- go.mongodb.org/mongo-driver v1.16.0
- go.mongodb.org/mongo-driver v1.16.0
- go.mongodb.org/mongo-driver v1.16.0
- golang.org/x/crypto v0.25.0
- golang.org/x/crypto v0.25.0
- golang.org/x/crypto v0.25.0
- golang.org/x/crypto v0.25.0
- golang.org/x/crypto v0.25.0
- golang.org/x/crypto v0.25.0
- golang.org/x/crypto v0.25.0
- golang.org/x/crypto v0.25.0
- golang.org/x/exp v0.0.0-20240529005216-23cca8864a10
- golang.org/x/exp v0.0.0-20240529005216-23cca8864a10
- golang.org/x/sync v0.7.0
- golang.org/x/sync v0.7.0
- golang.org/x/sync v0.7.0
- golang.org/x/sync v0.7.0
- golang.org/x/sync v0.7.0
- golang.org/x/sync v0.7.0
- golang.org/x/sync v0.7.0
- golang.org/x/sync v0.7.0
- golang.org/x/sys v0.13.0
- golang.org/x/sys v0.22.0
- golang.org/x/sys v0.22.0
- golang.org/x/sys v0.22.0
- golang.org/x/sys v0.22.0
- golang.org/x/sys v0.22.0
- golang.org/x/sys v0.22.0
- golang.org/x/sys v0.22.0
- golang.org/x/sys v0.22.0
- golang.org/x/term v0.22.0
- golang.org/x/term v0.22.0
- golang.org/x/term v0.22.0
- golang.org/x/term v0.22.0
- golang.org/x/term v0.22.0
- golang.org/x/term v0.22.0
- golang.org/x/term v0.22.0
- golang.org/x/term v0.22.0
- golang.org/x/text v0.16.0
- golang.org/x/text v0.16.0
- golang.org/x/text v0.16.0
- golang.org/x/text v0.16.0
- golang.org/x/text v0.16.0
- golang.org/x/text v0.16.0
- golang.org/x/text v0.16.0
- golang.org/x/text v0.16.0
- gopkg.in/tomb.v2 v2.0.0-20161208151619-d5d1b5820637
- gopkg.in/yaml.v2 v2.4.0
- gopkg.in/yaml.v2 v2.4.0
- gopkg.in/yaml.v2 v2.4.0
- gopkg.in/yaml.v2 v2.4.0
- gopkg.in/yaml.v2 v2.4.0
- gopkg.in/yaml.v2 v2.4.0
- gopkg.in/yaml.v2 v2.4.0
- gopkg.in/yaml.v2 v2.4.0
- gpgv 2.2.27-3ubuntu2.1
- grep 3.7-1build1
- gzip 1.10-4ubuntu4.1
- hostname 3.23ubuntu2
- init-system-helpers 1.62
- jq 1.6-2.1ubuntu3
- js-yaml 3.13.1
- libacl1 2.3.1-1
- libapt-pkg6.0 2.4.13
- libattr1 1:2.5.1-1build1
- libaudit-common 1:3.0.7-1build1
- libaudit1 1:3.0.7-1build1
- libblkid1 2.37.2-4ubuntu3.4
- libbrotli1 1.0.9-2build6
- libbz2-1.0 1.0.8-5build1
- libc-bin 2.35-0ubuntu3.8
- libc6 2.35-0ubuntu3.8
- libcap-ng0 0.7.9-2.2build3
- libcap2 1:2.44-1ubuntu0.22.04.1
- libcom-err2 1.46.5-2ubuntu1.2
- libcrypt1 1:4.4.27-1
- libcurl4 7.81.0-1ubuntu1.18
- libdb5.3 5.3.28+dfsg1-0.8ubuntu3
- libdebconfclient0 0.261ubuntu1
- libext2fs2 1.46.5-2ubuntu1.2
- libffi8 3.4.2-4
- libgcc-s1 12.3.0-1ubuntu1~22.04
- libgcrypt20 1.9.4-3ubuntu3
- libgmp10 2:6.2.1+dfsg-3ubuntu1
- libgnutls30 3.7.3-4ubuntu1.5
- libgpg-error0 1.43-3
- libgssapi-krb5-2 1.19.2-2ubuntu0.4
- libhogweed6 3.7.3-1build2
- libidn2-0 2.3.2-2build1
- libjq1 1.6-2.1ubuntu3
- libk5crypto3 1.19.2-2ubuntu0.4
- libkeyutils1 1.6.1-2ubuntu3
- libkrb5-3 1.19.2-2ubuntu0.4
- libkrb5support0 1.19.2-2ubuntu0.4
- libldap-2.5-0 2.5.18+dfsg-0ubuntu0.22.04.2
- libldap-common 2.5.18+dfsg-0ubuntu0.22.04.2
- liblz4-1 1.9.3-2build2
- liblzma5 5.2.5-2ubuntu1
- libmount1 2.37.2-4ubuntu3.4
- libncurses6 6.3-2ubuntu0.1
- libncursesw6 6.3-2ubuntu0.1
- libnettle8 3.7.3-1build2
- libnghttp2-14 1.43.0-1ubuntu0.2
- libnsl2 1.3.0-2build2
- libnuma1 2.0.14-3ubuntu2
- libonig5 6.9.7.1-2build1
- libp11-kit0 0.24.0-6build1
- libpam-modules 1.4.0-11ubuntu2.4
- libpam-modules-bin 1.4.0-11ubuntu2.4
- libpam-runtime 1.4.0-11ubuntu2.4
- libpam0g 1.4.0-11ubuntu2.4
- libpcre2-8-0 10.39-3ubuntu0.1
- libpcre3 2:8.39-13ubuntu0.22.04.1
- libprocps8 2:3.3.17-6ubuntu2.1
- libpsl5 0.21.0-1.2build2
- librtmp1 2.4+20151223.gitfa8646d.1-2build4
- libsasl2-2 2.1.27+dfsg2-3ubuntu1.2
- libsasl2-modules 2.1.27+dfsg2-3ubuntu1.2
- libsasl2-modules-db 2.1.27+dfsg2-3ubuntu1.2
- libseccomp2 2.5.3-2ubuntu2
- libselinux1 3.3-1build2
- libsemanage-common 3.3-1build2
- libsemanage2 3.3-1build2
- libsepol2 3.3-1build1
- libsmartcols1 2.37.2-4ubuntu3.4
- libss2 1.46.5-2ubuntu1.2
- libssh-4 0.9.6-2ubuntu0.22.04.3
- libssl3 3.0.2-0ubuntu1.18
- libstdc++6 12.3.0-1ubuntu1~22.04
- libsystemd0 249.11-0ubuntu3.12
- libtasn1-6 4.18.0-4build1
- libtinfo6 6.3-2ubuntu0.1
- libtirpc-common 1.3.2-2ubuntu0.1
- libtirpc3 1.3.2-2ubuntu0.1
- libudev1 249.11-0ubuntu3.12
- libunistring2 1.0-1
- libuuid1 2.37.2-4ubuntu3.4
- libxxhash0 0.8.1-1
- libzstd1 1.4.8+dfsg-3build1
- login 1:4.8.1-2ubuntu2.2
- logsave 1.46.5-2ubuntu1.2
- lsb-base 11.1.0ubuntu4
- mawk 1.3.4.20200120-3
- mongodb-database-tools 100.10.0
- mongodb-mongosh 2.3.2
- mongodb-org 7.0.14
- mongodb-org-database 7.0.14
- mongodb-org-database-tools-extra 7.0.14
- mongodb-org-mongos 7.0.14
- mongodb-org-server 7.0.14
- mongodb-org-shell 7.0.14
- mongodb-org-tools 7.0.14
- mount 2.37.2-4ubuntu3.4
- ncurses-base 6.3-2ubuntu0.1
- ncurses-bin 6.3-2ubuntu0.1
- numactl 2.0.14-3ubuntu2
- openssl 3.0.2-0ubuntu1.18
- passwd 1:4.8.1-2ubuntu2.2
- perl-base 5.34.0-3ubuntu1.3
- procps 2:3.3.17-6ubuntu2.1
- publicsuffix 20211207.1025-1
- sed 4.8-1ubuntu2
- sensible-utils 0.0.17
- stdlib go1.18.2
- stdlib go1.21.12
- stdlib go1.21.12
- stdlib go1.21.12
- stdlib go1.21.12
- stdlib go1.21.12
- stdlib go1.21.12
- stdlib go1.21.12
- stdlib go1.21.12
- sysvinit-utils 3.01-1ubuntu1
- tar 1.34+dfsg-1ubuntu0.1.22.04.2
- tzdata 2024a-0ubuntu0.22.04.1
- ubuntu-keyring 2021.03.26
- usrmerge 25ubuntu2
- util-linux 2.37.2-4ubuntu3.4
- zlib1g 1:1.2.11.dfsg-2ubuntu9.2
hardened components (33)
- acl 2.3.2
- attr 2.5.2
- bash 5.2p37
- brotli 1.1.0
- coreutils 9.5
- curl 8.12.1
- cyrus-sasl 2.1.28
- db 5.3.28
- gcc 13.3.0
- gcc 13.3.0
- glibc 2.40-66
- gmp-with-cxx 6.3.0
- gperftools 2.15
- keyutils 1.6.3
- krb5 1.21.3
- libidn2 2.3.7
- libpsl 0.21.5
- libssh2 1.11.1
- libunistring 1.2
- libunwind 1.8.1
- libxcrypt 4.4.36
- mongodb 7.0.14
- nghttp2 1.64.0
- openssl 3.3.3
- pcre2 10.44
- perl 5.40.0
- publicsuffix-list-0 unstable-2024-10-25
- snappy 1.2.1
- xgcc 13.3.0
- xz 5.6.3
- yaml-cpp 0.8.0
- zlib 1.3.1
- zstd 1.5.6
Download SBOMs
Usage
$
podman pull ghcr.io/armorred/mongodb:8.0
Verify Signature
$
cosign verify --key https://armorred.org/cosign.pub ghcr.io/armorred/mongodb:8.0