An open source trusted cloud native registry that stores, signs, and scans container images and Helm charts.
Harbor is an open source cloud native registry that stores, signs, and scans container images and Helm charts. It extends the standard Docker Distribution by adding enterprise features like security, identity management, and replication, solving the need for a secure, on-premises registry in cloud native environments.
DevOps engineers, platform teams, and organizations running Kubernetes or containerized workloads who need a private, secure registry with advanced management and security features.
Developers choose Harbor because it provides a comprehensive, self-hosted alternative to commercial registries with built-in vulnerability scanning, image signing, policy-based replication, and seamless integration with existing identity providers like LDAP/AD and OIDC.
An open source trusted cloud native registry project that stores, signs, and scans content.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Integrates vulnerability scanning and Docker Content Trust (Notary) for image signing, enforcing policies to prevent deployment of vulnerable or unsigned images, as highlighted in the features list.
Supports LDAP/AD and OIDC, allowing seamless authentication with existing enterprise systems and enabling single sign-on, which is explicitly mentioned in the identity integration features.
Policy-based replication with filters supports multi-datacenter deployments and high availability, automatically retrying on errors, as detailed in the replication section of the README.
Offers a full RESTful API with embedded Swagger UI, facilitating administrative operations and integration with external tools, which is a key feature emphasized in the documentation.
Requires Docker, docker-compose, or Helm for installation, and the architecture involves multiple services that need proper configuration and networking, making initial setup non-trivial for newcomers.
As a self-hosted solution, it necessitates regular updates, monitoring, and backup management, unlike cloud-managed registries, which can strain teams without dedicated DevOps resources.
Setting up policies for replication, scanning, and access control requires deep understanding of Harbor's configuration and can be time-consuming, as implied by the detailed but scattered documentation.
Harbor is an open-source alternative to the following products:
A private container image registry service for storing, managing, and deploying Docker container images on Google Cloud.
Amazon Elastic Container Registry is a fully managed Docker container registry that makes it easy to store, manage, and deploy container images.
GitHub Container Registry is a Docker container registry service integrated with GitHub, allowing users to store and manage container images alongside their code.
Docker Hub is a cloud-based registry service for sharing and managing Docker images, providing public and private repositories, automated builds, and team collaboration.