Mongodb-sharded Distroless images

[boppanasreevishnu]

Select Topic Area

Question

Body

Hi,
I am currently using the mongodb-sharded:7.0.6-debian-12-r0 image with my rke2 deployment and I want to use the same version with Distroless image, where can I get it ?

[mubbi]

1. No pre-built mongodb-sharded:7.0.6-distroless image exists publicly.
2. Build it yourself with a Docker multi-stage build: first stage uses Bitnami Debian image, second stage uses a Distroless runtime, copying only necessary artifacts.

✅ What You Can Do

1. Build Your Own Distroless Image Using a Multi‑Stage Dockerfile
   You can craft a multi-stage build that:

• Uses the Bitnami Debian image as a builder stage to set up MongoDB Sharded.
• Copies only the necessary server binaries and configurations into a lightweight Google Distroless runtime image (gcr.io/distroless/static or base, etc.).
• Optionally uses the :debug variants during testing, then strips to the regular runtime image for production.

--- Stage 1: Prepare MongoDB in Debian builder ---
FROM bitnami/mongodb-sharded:7.0.6-debian-12-r0 AS builder

--- (optional) any configuration or setup commands go here ---

 --- Stage 2: Minimal runtime with Distroless ---
FROM gcr.io/distroless/base:nonroot

--- Copy binaries, certs, config, data directories, etc. ----
COPY --from=builder /opt/bitnami/mongodb /opt/bitnami/mongodb

--- Expose ports, set volume mounts or workdir as needed ---
EXPOSE 27017 27018 27019
USER 1001

CMD ["/opt/bitnami/mongodb/bin/mongod", "--config", "/opt/bitnami/mongodb/conf/mongod.conf"]

[boppanasreevishnu]

Okay, Thanks for your reply.

Do any of these images like keycloak, local-path-provisioner, registry, postgresql, kube-vip has the distroless images or do I've to build my own distroless images for all the other images also?

[jcodes101]

Hi! 👋

Currently, there isn't an official MongoDB Distroless image published by MongoDB or Bitnami (which maintains the mongodb-sharded image). The distroless approach is more common in custom CI/CD pipelines where you build your own image for better security and smaller attack surface.

💡 Your Options:

1. Build Your Own Distroless MongoDB Image
   Start with a base image like gcr.io/distroless/base-debian12.

Copy the MongoDB binary from the mongodb-sharded:7.0.6-debian-12-r0 image.

You'll need to ensure all required dependencies (like libssl, libcurl, etc.) are included.

Use a Dockerfile like this as a guide:

FROM bitnami/mongodb-sharded:7.0.6-debian-12-r0 as builder

FROM gcr.io/distroless/base-debian12
COPY --from=builder /opt/bitnami/mongodb /opt/bitnami/mongodb
CMD ["/opt/bitnami/mongodb/bin/mongod"]

2. Use a Minimal Alternative
   If you're looking for a smaller, production-ready MongoDB image (even if not fully distroless), consider:

Alpine-based MongoDB images, though MongoDB upstream doesn’t officially support Alpine anymore due to musl libc issues.

[Bitnami’s non-sharded MongoDB distroless builds](Check with Bitnami Containers to see if they’ve released one recently).

[boppanasreevishnu]

Okay, Thanks for your reply.

Do any of these images like keycloak, local-path-provisioner, registry, postgresql, kube-vip has the distroless images or do I've to build my own distroless images for all the other images also?

[jcodes101]

Hi @boppanasreevishnu 👋

Great follow up question! So here's the thing bro...

Keycloak – ❌ No official distroless image. You’ll likely need to build your own using something like gcr.io/distroless/java17, since Keycloak requires a full JVM.

local-path-provisioner – ❌ No distroless version available. It’s a simple Go-based app though, so it’s a good candidate for using distroless/static in a custom build.

registry (Docker registry) – ✅ Some lightweight alternatives exist (like Alpine-based), but for a full distroless version you’d need to build your own.

PostgreSQL – ❌ No official distroless version from upstream or Bitnami. You’d need to do a multi-stage Docker build to create your own.

kube-vip – ❌ No official distroless version. However, since it's a statically compiled Go binary, it’s very well-suited for distroless/static.

So to be honest with you in general, most popular images don’t come prebuilt in distroless form. Building your own via multi-stage Dockerfiles is the usual path — it gives you better control over security and image size.

[boppanasreevishnu]

Thanks bro

[jcodes101]

Ofc bro no problem, hope that all helps

[boppanasreevishnu]

Yeah, it sure is very helpful

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬