Bitnami: end of free versioned container images on Docker Hub
2025-08-28 · Publisher : Broadcom (Bitnami) · Domain : Cloud & DevOps
On 28 August 2025, Bitnami (Broadcom) switches its public catalogue: versioned images move to a "legacy" repository without updates, and production use is steered to the paid Bitnami Secure Images offering.
What changes
- Switch of the public Bitnami catalogue on 28 August 2025, announced on 16 July.
- Versioned images move to an archived "legacy" repository with no support.
- Only hardened "latest" images stay free; production goes through a paid offering.
- Test outages in August and September, deletion of the public docker.io/bitnami catalogue postponed to 29 September 2025.
### Background Announced on 16 July 2025, the change to the public Bitnami catalogue takes effect on 28 August 2025. Versioned container images previously available free on Docker Hub (docker.io/bitnami) are moved to docker.io/bitnamilegacy, an archived repository with no updates or support. Only a limited selection of hardened images, with the "latest" tag, stays free for development. ### Key facts - Repository docker.io/bitnamisecure: a free subset of hardened images, "latest" tag only, intended for development. - Paid Bitnami Secure Images offering: production-ready images, continuous security updates, SBOMs and long-term-support branches. - Brownouts (test outages) of ten images for 24 hours on 28-29 August, 2-3 September and 17-19 September 2025. - Deletion of the public docker.io/bitnami catalogue postponed to 29 September 2025. - Source code and Helm charts stay published under the Apache 2.0 licence on GitHub. ### Why it matters Many Helm manifests, Dockerfiles and pipelines reference Bitnami images by version: an image pinned to a version that moves to the "legacy" repository no longer receives security fixes, and the test outages make the problem visible. For DevOps teams, it is a textbook case of uncontrolled dependency on a public registry: references must be inventoried, images mirrored in an internal registry, and a choice made between the paid offering, hardened images from another vendor or an in-house build. ### Takeaway A free dependency turned paid and broke pipelines: map your base images and keep an internal copy.
Links
Tags : Conteneurs, Licence, Open Source, DevOps