rabbitmq:4-alpine image size, layers and vulnerabilities (2026-11-01)

docker pull rabbitmq:4-alpinerabbitmq@sha256:21577d148f4f7563a87d761862fa353f59348a094833ca8b1b1a46a8102dffce

Size per platform

Compressed download size on Docker Hub for each architecture.

amd6490 MB
arm6490 MB
riscv6486 MB
ppc64le81 MB
i38680 MB
s390x80 MB
arm/v678 MB
arm/v777 MB

Where the bytes go

Unpacked bytes by directory in the final amd64 filesystem.

/opt/erlang95 MB
/opt/rabbitmq34 MB
/opt/openssl30 MB
/usr/lib10 MB
/bin1.9 MB
/lib670 kB
/usr/lib/bash587 kB
/usr/share/zoneinfo452 kB
/usr/bin385 kB
/etc/ssl204 kB

Layers

The 9 filesystem layers of the amd64 image, in build order, with each layer's compressed size and the build step that made it.

1. Base filesystem (alpine-minirootfs-3.3.9 MB
2. COPY /opt/erlang → /opt/erlang48 MB
3. COPY /opt/openssl → /opt/openssl9.2 MB
4. RUN … apk add2.5 MB
5. RUN … apk add27 MB
6. RUN su-exec rabbitmq rabbitmq-plugins190 B
7. RUN ln -sf /opt/rabbitmq/plugins /plu109 B
8. COPY 10-defaults.conf → 20-management620 B
9. COPY docker-entrypoint.sh → /usr/loca828 B

Full build steps

3.9 MBADD alpine-minirootfs-3.24.3-x86_64.tar.gz / # buildkit
48 MBCOPY /opt/erlang /opt/erlang # buildkit
9.2 MBCOPY /opt/openssl /opt/openssl # buildkit
2.5 MBRUN /bin/sh -c set -eux; ln -vsf /etc/ssl/certs /etc/ssl/private "$OPENSSL_INSTALL_PATH_PREFIX/etc/ssl"; runDeps="$( scanelf --needed --nobanner --format '%n#p' --recursive $ERLANG_INSTALL_PATH_PREFIX $OPENSSL_INSTALL_PATH_PREFIX | tr ',' '\n' | sort -u | grep -v '^$\|lib$crypto\|ssl$' | awk 'system("test -e /usr/local/lib/" $1) == 0 { next } { print "so:" $1 }' )"; apk add --no-cache --virtual .otp-run-deps $runDeps; sed -i.ORIG -e "/\.include.*fips/ s!.*!.include $OPENSSL_INSTALL_PATH_PREFIX/etc/ssl/fipsmodule.cnf!" -e '/# fips =/s/.*/fips = fips_sect/' "$OPENSSL_INS
27 MBRUN /bin/sh -c set -eux; mkdir -p /usr/local/src; apk add --no-cache --virtual .build-deps gnupg xz ; RABBITMQ_SOURCE_URL="https://github.com/rabbitmq/rabbitmq-server/releases/download/v$RABBITMQ_VERSION/rabbitmq-server-generic-unix-latest-toolchain-$RABBITMQ_VERSION.tar.xz"; RABBITMQ_PATH="/usr/local/src/rabbitmq-$RABBITMQ_VERSION"; wget --output-document "$RABBITMQ_PATH.tar.xz.asc" "$RABBITMQ_SOURCE_URL.asc"; wget --output-document "$RABBITMQ_PATH.tar.xz" "$RABBITMQ_SOURCE_URL"; export GNUPGHOME="$(mktemp -d)"; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$RA
190 BRUN /bin/sh -c su-exec rabbitmq rabbitmq-plugins enable --offline rabbitmq_prometheus # buildkit
109 BRUN /bin/sh -c ln -sf /opt/rabbitmq/plugins /plugins # buildkit
620 BCOPY --chown=rabbitmq:rabbitmq 10-defaults.conf 20-management_agent.disable_metrics_collector.conf /etc/rabbitmq/conf.d/ # buildkit
828 BCOPY docker-entrypoint.sh /usr/local/bin/ # buildkit

Known vulnerabilities

0Critical0 with a fix

0High0 with a fix

0Medium0 with a fix

0Low0 with a fix

0Unknown0 with a fix

Trivy found no known vulnerabilities in the 30 packages it identified.

Packages

Alpine packages: 30

Image configuration

Base OS: Alpine Linux 3.24.3
Default user: root (no USER set; the entrypoint may still drop privileges)
Entrypoint: docker-entrypoint.sh
Command: rabbitmq-server
Exposed ports: 15691/tcp, 15692/tcp, 25672/tcp, 4369/tcp, 5671/tcp, 5672/tcp
Image created: 2026-10-21
amd64 digest: sha256:2225c65600dbdd89d7d0a8e2ed386b1d0b32817a3c97ab6ef621ac33056bec27

Other RabbitMQ tags

rabbitmq:4286 MB unpacked · 131 MB downloadM 38L 4 rabbitmq:4-management297 MB unpacked · 136 MB downloadM 38L 4

Platform sizes and layers: Docker Hub API, checked 2026-11-01. Unpacked size, files and SBOM: measured 2026-10-26 from digest sha256:2225c65600db. Vulnerabilities: Trivy re-scan 2026-11-01, database 2026-11-01. Methodology.