INFRA Signal 93
Moving from Minimus to Docker Hardened Images
↗
Minimus is ending operations with its registry going offline October 22, 2026, and Docker is offering free migration assistance to its Docker Hardened Images catalog as a drop-in replacement.
Teams running Minimus images in production face an unplanned migration with a hard deadline, after October 22, no CVE patches will ship to those images. Docker's DHI catalog offers a drop-in replacement path, but teams need to act during the maintenance window while current images are still receiving upstream updates.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Minimus registry goes offline October 22, 2026, after which pulled images receive no further updates or CVE patches.
Docker is offering free migration assistance and its open-source DHI catalog under Apache 2.0 as a drop-in replacement requiring mostly FROM-line changes.
Docker Hardened Images ship with near-zero CVEs, complete SBOMs, SLSA Build Level 3 provenance, and cryptographic signatures, with paid tiers adding FIPS/STIG variants and up to five years of EOL coverage.
THE CLUSTER