Docker

Moving from Minimus to Docker Hardened Images

8.5内容质量

TL;DR · AI 摘要

Minimus停止运营，用户需迁移至Docker Hardened Images，后者提供更安全、维护良好的容器镜像。

核心要点

  • Docker提供60天维护窗口，保障Minimus镜像持续更新至2026年10月22日
  • 迁移仅需修改Dockerfile的FROM语句，无需重构CI/CD流程
  • Docker Hardened Images可减少95%的CVE漏洞和90%的攻击面

结构提纲

按章节快速跳转。

  1. §Minimus停服公告

    宣布Minimus停止运营并提供60天维护窗口的过渡期安排

  2. ·迁移必要性

    未及时迁移将导致新CVE漏洞无法修复且镜像停止更新

  3. §Docker Hardened Images方案

    提供4000+镜像的零CVE基础镜像及全生命周期管理

  4. ·核心优势

    包含SBOM、SLSA证明、加密签名及95%的CVE漏洞减少

  5. ›付费功能

    提供SLA保障、FIPS/STIG合规变体及5年EOL版本支持

  6. §迁移工具链

    包含AI助手Gordon的自动化迁移工具及完整迁移指南

思维导图

用一张图看清主题之间的关系。

查看大纲文本（无障碍 / 无 JS 友好）
  • Minimus到Docker Hardened Images迁移
    • 迁移背景
      • Minimus停服公告
      • 60天维护窗口
    • Docker Hardened Images
      • 核心特性
      • 安全指标
      • 生命周期管理
    • 迁移方案
      • 零代码改动迁移
      • AI辅助工具
      • 合规性保障

金句 / Highlights

值得收藏与分享的关键句。

#Docker#容器安全#镜像迁移#Minimus#Hardened Images
打开原文

Moving from Minimus to Docker Hardened Images | Docker

Moving from Minimus to Docker Hardened Images

Posted Aug 25, 2026

Vishrut Iyengar

and

Ranti Familusi

The hardened-images space gets better when more people are working on the problem, and Minimus has been a valuable part of that work. That changed this week, when they announced they are ending operations. Though we were competitors, we both believed strongly in the importance of reducing vulnerabilities at the foundation of the software supply chain. Their efforts to bring needed awareness to this challenge will be missed, and our thoughts go out to Minimus employees who are impacted by this decision.

While the human side of this story deserves the most attention, there’s also a practical side: if you’re a customer running Minimus images in production, you’re now facing a migration you didn’t plan for. Their notice commits to a 60-day maintenance window, with images receiving upstream updates until the registry goes offline on October 22, 2026. Images already pulled will keep running after that date, but no further updates will ship to them, and any new CVE stays unpatched from that point on.

If you need a hand, Docker is offering free migration assistance to Minimus customers. Write to [email protected] to walk through your specific image list, your compliance requirements, or questions around your migration plans, and a technical migration expert will get back to you. You don’t need a sales call to start migrating to DHI today.

Docker’s free, open source catalog is available to everyone under Apache 2.0, allows production use, and has no user caps. The migration is about as easy as these things get, a drop-in with minimal workflow changes. It’s more of a swap than a rebuild. It’s easy to find your images’ equivalents in the DHI catalog, and for most of your services, the whole change is updating the FROM line. Use the migration guide for the step-by-step process and the checklist to track each image through the swap and verification. The worked examples show full migrations end to end, and Gordon , Docker’s AI assistant, runs the first pass with you.

Whether you decide to migrate to Docker or somewhere else, we recommend you start that process now, while the maintenance window keeps your current images patched. You can browse the full DHI catalog on Docker Hub , make the first swap, and, of course, reach out to us if you need help.

Docker Hardened Images

Docker Hardened Images are minimal, hardened images built from source and continuously maintained by Docker. The catalog covers 4,000+ images, compatible with Alpine and Debian, so your Dockerfiles and CI keep working as they are. Every image ships near-zero CVEs with full, unsuppressed CVE visibility, and each carries a complete SBOM, SLSA Build Level 3 provenance, and cryptographic signatures. Docker manages the full lifecycle of your image, and teams moving from standard public images see up to 95% CVE reduction and up to 90% attack-surface reduction. Paid tiers add SLA-backed remediation, FIPS and STIG variants, customizations, and up to five years of coverage for versions past end of life.

About the Authors

Principal Product Marketing Manager, Docker

Vishrut Iyengar is Principal PMM for Security at Docker, focused on Docker Hardened Images, supply chain security, and securing what AI agents build.

Principal Solutions Architect, Docker

Docker Hardened Images

Community

Enterprise

Products

Security

Solutions

Table of contents

Related Posts

  • Aug 18, 2026 17,600 Actions: Agent Security Is a Systems Problem The OpenAI/Hugging Face incident exposed a new challenge for AI agent security. 17,600 attacker actions show why AI agent security can’t rely on human review. Explore the controls needed to constrain, observe, and govern agents at speed. Mark Cavage Read now
  • Aug 25, 2026 Moving from Minimus to Docker Hardened Images The Minimus registry goes offline on October 22. Here is the migration path, the free help Docker is offering, and where to start. Vishrut Iyengar and Ranti Familusi Read now
  • Aug 24, 2026 MinIO End of Life: How to Stay Patched and Audit-Ready with Docker ELS Supply-chain attacks have kept escalating while AI writes more of the code you ship. Docker’s latest updates bring more software built from source into your images, keep security coverage running past end of life, carry every guarantee through your customized images, and move policy enforcement onto every developer machine. Vishrut Iyengar Read now
  • Aug 21, 2026 Running AI agents in GitHub Actions with Docker Sandboxes Run AI agents in GitHub Actions with Docker Sandboxes. See how isolated agents can run Testcontainers tests, fix code, and open draft pull requests. Oleg Selajev Read now