Mosquitto 2.0
hardened
latest
Size Reduction
-489%
11.7 MB to 68.8 MB (-57.1 MB saved)
Component Reduction
5%
20 to 19 packages (1 removed)
Vulnerability Reduction
0%
0 to 0 vulnerabilities (0 eliminated)
Image Comparison
| Property | upstream | hardened |
|---|---|---|
| Image | docker.io/library/eclipse-mosquitto:2.0.22 | ghcr.io/armorred/mosquitto:2.0-hardened |
| Size | 11.7 MB | 68.8 MB |
| Layers | 3 | 21 |
| Components | 20 | 19 |
| Vulnerabilities | 0 | 0 |
| Runtime User | root | 999 |
Vulnerability Analysis
upstream
0 total
hardened
0 total
Software Bill of Materials
upstream components (20)
- alpine-baselayout 3.7.1-r8
- alpine-baselayout-data 3.7.1-r8
- alpine-keys 2.6-r0
- alpine-release 3.23.3-r0
- apk-tools 3.0.3-r1
- busybox 1.37.0-r30
- busybox-binsh 1.37.0-r30
- ca-certificates 20251003-r0
- ca-certificates-bundle 20251003-r0
- cjson 1.7.19-r1
- libapk 3.0.3-r1
- libcrypto3 3.5.5-r0
- libssl3 3.5.5-r0
- libwebsockets 4.3.5-r2
- musl 1.2.5-r21
- musl-utils 1.2.5-r21
- scanelf 1.3.8-r2
- ssl_client 1.37.0-r30
- tzdata 2025c-r0
- zlib 1.3.1-r2
hardened components (19)
- acl 2.3.2
- attr 2.5.2
- bash-interactive 5.2p37
- c-ares 1.27.0
- cjson 1.7.18
- coreutils 9.5
- gcc 13.3.0
- gcc 13.3.0
- glibc 2.40-66
- gmp-with-cxx 6.3.0
- libidn2 2.3.7
- libunistring 1.2
- libuv 1.48.0
- libwebsockets 4.3.3
- mosquitto 2.0.22
- ncurses 6.4.20221231
- openssl 3.3.3
- readline 8.2p13
- xgcc 13.3.0
Download SBOMs
Usage
$
podman pull ghcr.io/armorred/mosquitto:2.0
Verify Signature
$
cosign verify --key https://armorred.org/cosign.pub ghcr.io/armorred/mosquitto:2.0