FIPS 140-3 Certification

This image is FIPS-validated to ensure its cryptographic operations meet the Federal Information Processing Standards (FIPS) required for secure government and regulated environments. Its core cryptographic modules are validated under the NIST Cryptographic Module Validation Program (CMVP) and comply with the FIPS 140-3 standard.

To verify that the FIPS 140-3 provider is configured and active, follow the instructions in the FIPS compliance tab.

Try It Out

Run the container:

docker run -d --rm \
  --name valkey-bundle-fips \
  -p 6379:6379 \
  reg.mini.dev/valkey-bundle-fips:latest

Test the connection:

docker exec -it valkey-bundle-fips valkey-cli -h 127.0.0.1 -p 6379 ping

You should receive a response PONG confirming the connection is working.

Verify that all the modules loaded correctly:

docker exec -it valkey-bundle-fips valkey-cli MODULE LIST

You should see json, bf (Bloom), search, and ldap listed among the loaded modules.

Valkey JSON adds native JSON document storage, so you can store, update, and query structured documents directly in Valkey using JSONPath instead of serializing objects into plain strings and parsing them back on every read.

Store and query a JSON document with Valkey JSON:

docker exec -it valkey-bundle-fips valkey-cli JSON.SET user $ '{"name":"Ada","roles":["admin","dev"]}'
docker exec -it valkey-bundle-fips valkey-cli JSON.GET user $.roles

Valkey Bloom adds probabilistic data structures — Bloom filters, Cuckoo filters, Count-Min Sketch, and Top-K — that test set membership or frequency using a fraction of the memory a full set or hash would need, which is useful for skipping duplicate work or avoiding unnecessary lookups against a slower backing store.

Create a Bloom filter with Valkey Bloom:

docker exec -it valkey-bundle-fips valkey-cli BF.RESERVE filter 0.01 1000
docker exec -it valkey-bundle-fips valkey-cli BF.ADD filter item1
docker exec -it valkey-bundle-fips valkey-cli BF.EXISTS filter item1

Valkey Search adds full-text search and secondary indexing, including numeric filtering, geo-spatial queries, and aggregations, directly on top of stored documents, so you can query by content instead of only by key without standing up a separate search engine.

Index the name field, add a document, then search for a match:

docker exec -it valkey-bundle-fips valkey-cli FT.CREATE idx ON JSON PREFIX 1 user: SCHEMA $.name AS name TEXT
docker exec -it valkey-bundle-fips valkey-cli JSON.SET user:1 $ '{"name":"Ada Lovelace"}'
docker exec -it valkey-bundle-fips valkey-cli FT.SEARCH idx "Ada"

Valkey LDAP lets Valkey authenticate users against an external LDAP identity provider instead of managing passwords with requirepass or ACLs directly, which is useful when access should follow your organization's existing directory.

List the module's configuration options:

docker exec -it valkey-bundle-fips valkey-cli CONFIG GET *ldap*

Technical Considerations

The Valkey-Bundle-FIPS image provided by Minimus is a FIPS-validated, slim, security-hardened alternative to the public image.

A hardened, minimal image that will remain more secure for the long run and accrue vulnerabilities at a slower rate.

• See the risk reduction dashboard for a detailed CVE comparison over the past 30 days.
• Review the compliance report to see the default hardening and security configurations for the image.

Terms & Info

This catalog is published by Minimus. All product names, logos, and marks, other than those belonging to Minimus, shown are owned by their respective rights holders and appear here only to identify the open source software each image contains. Minimus claims no ownership of those marks and implies no affiliation with, endorsement by, certification by, or sponsorship by any rights holder.

Images are provided "as-is" without warranty of any kind. "Hardened" refers to the security configuration applied at the time of build and does not constitute a guarantee of ongoing security or absence of vulnerabilities. The free tier is provided without support, SLA, or guaranteed patching timelines. Security updates may be applied to paid subscriptions before or instead of free tier images. By pulling or using any image you agree to our Terms of Use.