minideb

Seems to be Apache 2 https://github.com/bitnami/minideb/blob/1694284885fecfb852b0... and it has GHA (although I didn't verify that it could plausibly run outside of their GH org) https://github.com/bitnami/minideb/blob/1694284885fecfb852b0...

You might even want to look at the minideb[1] based bitnami images if extension is less important. for example postgres: https://github.com/bitnami/containers/tree/main/bitnami/post... - bitnami/postgresql:15 bb50064c650b 275MB ( postgis included! ) - postgres:15-alpine 6a35e2c987a6 243MB - postgres:15-bullseye 2bb008a38e7c 379MB [1] https://github.com/bitnami/minideb However, it is sometimes a good idea to benchmark the speed of different images, as sometimes a significant speed loss is possible. for example: alpine and bitnami images optimized for size. If reliability and support is important then the official debian based images are the way to go. ( --> postgres:15-bullseye )

as is stated initially, that goes back to how bitnami is building its Docker images, basing on a set of debian packages (minideb) - there's also a shell library/framework embedded that does useful things, but that makes you read more code when you go check how the sausage is made. That minideb is the basis for the higher CVE count compared to scratch or alpine images. > it’s a well-kept secret that no one wants to talk about the maintainer side most casual docker image users aren't aware of I'd rephrase, but bitnami at least documents the issue https://github.com/bitnami/minideb#security https://docs.bitnami.com/kubernetes/open-cve-policy/

There is also https://github.com/bitnami/minideb

You could try https://github.com/bitnami/minideb - about 52Mb uncompressed.