TechPrufer
Get started
Docker
Docker logoDocker · Feature trail

Extended Lifecycle Support for End-of-Life Software

3 posts · Aug 2026

What this trail covers

This feature thread tracks Docker's Extended Lifecycle Support (ELS) offering, designed to provide ongoing security patches, compliance, and audit readiness for end-of-life (EOL) software components. Initially focused on addressing the risks associated with EOL software in production environments, subsequent posts detail the expansion of ELS to cover various components like MinIO, Nginx, Node, and Python. This post details the migration of Minimus customers to Docker Hardened Images (DHI) and highlights the addition of MinIO as a maintained, hardened image under ELS, emphasizing Docker's commitment to backporting CVE fixes and providing audit evidence for archived projects.

All Docker trails
  1. Secure by default is your only way forward | DockerThis post extends the Extended Lifecycle Support (ELS) feature thread by detailing how it integrates with Docker Hardened Images. It emphasizes the importance of a secure foundation for AI agents and discusses Docker's solutions: Docker Hardened Images for minimal, secure base images with signed SBOM and build provenance, and Docker Sandboxes for isolated AI agent execution. It also introduces the MCP Catalog and Toolkit for secure tool interaction by agents and highlights Docker Scout for build-time policy enforcement. The post reinforces the concept of a unified security boundary for both human and agentic workflows.
  2. Moving from Minimus to Docker Hardened Images | DockerThis post announces the cessation of operations for Minimus, a competitor in the hardened images space, and provides a migration path for their customers to Docker Hardened Images (DHI). It details the practical implications of Minimus ending operations, including the 60-day maintenance window and the eventual offline status of their registry. Docker offers free migration assistance and highlights the ease of migration to DHI, emphasizing minimal workflow changes and drop-in compatibility. The post also reiterates the features of DHI, such as minimal, hardened images, continuous maintenance, CVE visibility, SBOM, SLSA provenance, and cryptographic signatures, along with paid tier benefits like SLA-backed remediation and extended coverage.
  3. MinIO End of Life: How to Stay Patched and Audit-Ready with Docker ELS | DockerThis post announces the addition of MinIO to Docker's Extended Lifecycle Support (ELS) offering. It details how Docker will maintain MinIO images for up to five years past its upstream end-of-life, including backporting CVE fixes from its Go dependency tree. The post also reiterates the general ELS model: providing patched, compliant, and audit-ready images for EOL software, with a 14-day SLA for critical/high-severity CVEs and evidence like SBOMs and VEX statements.