Which PHP tag is smallest?
php:8.4-fpm-alpine is the smallest of the tags we measured: 91 MB unpacked and a 37 MB download on amd64, against 549 MB and 186 MB for php:8.4-cli, 6.0× smaller. The tag with the fewest known vulnerabilities is php:8.4-fpm-alpine (49, 3 critical or high).
Tags at a glance
| Image | Size (compressed, amd64) | Unpacked | Base OS | Layers | Packages | Vulnerabilities | Updated |
|---|---|---|---|---|---|---|---|
| php:8.4-cli | 186 MB | 549 MB | Debian 13.7 (trixie) | 10 | 172 | C 2H 121M 818L 936? 4 | yesterday |
| php:8.4-apache | 180 MB | 519 MB | Debian 13.7 (trixie) | 15 | 186 | C 2H 122M 820L 969? 7 | yesterday |
| php:8.4-fpm-alpine | 37 MB | 91 MB | Alpine Linux 3.24.3 | 12 | 41 | C 1H 2M 2L 44 | 7 days ago |
Size by tag (amd64)
Compressed (download)Unpacked (on disk)
Known vulnerabilities by tag
CriticalHighMediumLowUnknown
Download size on arm64
Compressed size of the arm64 (v8) variant, for Apple Silicon, Graviton and Ampere hosts.
Comparisons
Sizes from the Docker Hub API, checked 2026-11-01. Unpacked size, files and packages measured from the amd64 image. Vulnerabilities from Trivy, database dated 2026-11-01. How we measure.