Distribution Registry
Distribution Registry is an open-source system for storing and delivering named container images and other content.
What Distribution Registry is
Distribution Registry is an open-source system for storing and delivering named container images and other content. Teams push images into the registry and pull tagged versions through its HTTP API V2. It implements OCI Distribution Specification 1.0.1 and supports OCI artifacts, running on Linux, macOS, Windows, as a self-hosted service, or through an API. Bundled storage drivers cover local filesystems, Amazon S3, Microsoft Azure Blob Storage, and Google Cloud Storage. TLS and basic authentication are built in; externally accessible deployments must use TLS and access controls. Delegated authentication can connect a trusted token server or another authentication system for more detailed authorization. HTTP webhooks react to manifest and layer pushes or pulls, while logging, reporting, and debug/vars metrics support monitoring. Notification queues are held in memory, so events can be lost if an instance disappears before delivery. The registry can operate in air-gapped networks when needed images are transferred from a connected host.
Good
- Open source under the Apache license
- OCI Distribution Specification 1.0.1 support
- Multiple bundled storage backends
- TLS and basic authentication
- Air-gapped operation is supported
Watch out
- Notification queues can lose messages
- New storage drivers are not being accepted
- No image scanning
- No retention policies or replication
Who it suits
It suits teams needing control over container-image storage, distribution pipelines, or integration with internal development workflows. Production operation requires skills in availability, scalability, logging, monitoring, and security.
Verdict
Distribution Registry provides a self-managed foundation for pushing, pulling, storing, and distributing container images. Its security, storage, API, and webhook options support controlled deployments, but operations demand infrastructure expertise.
The facts
Each one read from Distribution Registry's own pages, with the date it was checked.
What it does
- Advanced access control
- Delegated authentication is supported, but requires implementing or using a third-party authentication system.checked 10 Oct 2026
- Advanced authentication
- The Registry supports delegated authentication through a trusted token server for deployments needing more control over access control and authorization integration.checked 11 Oct 2026
- API
- The documentation provides an HTTP API V2 specification for interacting with the registry.checked 10 Oct 2026
- Authentication and transport security
- The Registry supports TLS and basic authentication; its deployment guide says externally accessible registries must be secured with TLS and should use access controls.checked 10 Oct 2026
- Compatibility
- The Distribution Registry implements OCI Distribution Spec version 1.0.1.checked 11 Oct 2026
- Driver limits
- New storage drivers are not currently being accepted, and the OSS and Swift drivers are no longer supported.checked 10 Oct 2026
- Image workflows
- Users interact with a registry by pushing and pulling images, which are available in tagged versions.checked 11 Oct 2026
- Integrations
- A typical CI/CD workflow can push a new image to the Registry after a successful build, then use a Registry notification to trigger deployment or notify other systems.checked 11 Oct 2026
- Intended use
- The project is aimed at teams that want control over image storage, their distribution pipeline, or integration with in-house development workflows.checked 10 Oct 2026
- License
- The Registry is open source under the permissive Apache license.checked 11 Oct 2026
- Monitoring
- The Registry includes logging and reporting, and notification endpoint status and metrics are exposed through its debug/vars interface.checked 10 Oct 2026
- Notification limitation
- Notification queues are in memory, so messages can be lost if a registry instance is lost before delivery.checked 10 Oct 2026
- Notifications
- The Registry includes a notification system that calls webhooks in response to activity, along with logging and reporting.checked 11 Oct 2026
- OCI compatibility
- The registry implements OCI Distribution Specification version 1.0.1.checked 10 Oct 2026
- Operational requirements
- Production operation requires skills in availability, scalability, logging, monitoring, and security; familiarity with Docker and networking is also required.checked 11 Oct 2026
- Purpose
- Distribution Registry is a stateless, highly scalable server-side application for storing and distributing container images and other content.checked 11 Oct 2026
- Security
- The Registry natively supports TLS and basic authentication; externally accessible registries must first be secured using TLS.checked 11 Oct 2026
- Storage
- The default storage driver is the local POSIX filesystem; supported cloud storage drivers include S3, Microsoft Azure, and Google Cloud Storage.checked 11 Oct 2026
- Storage driver limitation
- Adding support for new storage drivers has been put on hold; the documentation suggests considering whether a desired driver is S3 compatible.checked 11 Oct 2026
- Support
- The project directs users to its #distribution channel in CNCF Slack for help and its GitHub issue tracker to report bugs.checked 10 Oct 2026
- Webhook notifications
- The registry can send HTTP webhook notifications for manifest and layer pushes and pulls.checked 10 Oct 2026
Where it runs
- Air-gapped use
- A Registry can run without internet connectivity, but images that are not local may need to be fetched on a connected host and migrated into the isolated network.checked 11 Oct 2026
Alternatives to Distribution Registry
- 1
JFrog Container Registry
Free planWebAPILinuxSelf-hosted7.6Free plan - 2
Inedo ProGet
Free planWebAPILinuxSelf-hosted7.4From $2,395 a year - 3
Alibaba Cloud Container Registry
Free planWebAPILinuxWindows7.1Free plan - 4
Oracle Cloud Infrastructure Container Registry
Free planWebAPILinux7.0Free plan - 5
Samsung Cloud Platform Container Registry
AndroidiOSWebAPI7.0 - 6
Chainguard Registry
Free planWebLinuxSelf-hosted6.8Free plan