Keppel

What it does

Audit events

Audit events can be sent to RabbitMQ when audit trail configuration is enabled; otherwise they are written only to the debug log.checked 11 Oct 2026

Build and deploy

The project says to build with make, install with make install, or use docker build; its binary contains client and server commands.checked 11 Oct 2026

Deployment

The project says to build with make, install with make install, or build a Docker image; server and client commands are in one binary.checked 11 Oct 2026

Deployment components

A complete deployment requires one or more API servers and exactly one janitor; liquidapi, healthmonitor, and anycastmonitor are optional components.checked 11 Oct 2026

External services

Keppel uses pluggable auth, storage, federation, inbound cache, account management, and optional rate limit drivers that connect to external services.checked 11 Oct 2026

Federation

Keppel instances in different regions or network segments can share account namespaces and replicate between accounts with the same name.checked 11 Oct 2026

Garbage collection

Online garbage collection runs without scheduled downtime or operator intervention.checked 11 Oct 2026

Integrations

The operator guide describes optional integration with Limes through the liquidapi server and vulnerability scanning through a configured Trivy instance.checked 11 Oct 2026

License

The repository lists the Apache-2.0 license.checked 11 Oct 2026

Monitoring

All server components expose Prometheus metrics at the /metrics endpoint.checked 11 Oct 2026

Product

Keppel is a regionally federated, multi-tenant container image registry.checked 11 Oct 2026

Registry API

Keppel fully implements the OCI Distribution API and also provides a custom API for multitenancy and repository, manifest, and tag metadata.checked 11 Oct 2026

Security reporting

The project directs security reports to its security policy and asks users not to file security issues as GitHub issues.checked 11 Oct 2026

Storage

Each customer account gets separate backing storage, allowing storage quota and usage to be tracked by that storage.checked 11 Oct 2026

Storage and database requirements

The operator guide lists PostgreSQL for the database and supports optional Redis for compatible authentication and rate-limit drivers.checked 11 Oct 2026

Storage model

It uses multi-tenant-aware storage drivers to give each customer separate storage space, allowing quotas and usage to be tracked by the backing storage.checked 11 Oct 2026

Support and contributions

The project accepts feature requests and bug reports through GitHub issues and welcomes contributions and feedback.checked 11 Oct 2026

Support and security reporting

The project accepts feature requests and bug reports through GitHub issues and directs security reports to its security policy rather than public issues.checked 11 Oct 2026

Supported manifest formats

Keppel supports Docker images and image lists, OCI image manifests, and OCI image indexes.checked 11 Oct 2026

Vulnerability scanning

Keppel can use Trivy to scan registry contents for vulnerabilities.checked 11 Oct 2026