Alternatives to Harbor

A self-hosted container registry with vulnerability scanning, image signing and role-based access control. The listings below can replace it for an important use case. Each note says what changes if you switch.

The original

Replacements

Listings that take over the same core job as Harbor.

  • Project Quay

    A self-hostable container image registry for building, storing and distributing container images.

    Project Quay is a self-hosted registry with image scanning, access controls, image builds and mirroring, likewise heavier to deploy than a simple registry.

  • zot

    Self-hosted OCI-native container image registry shipped as a single binary with no dependencies.

    zot is a single static binary OCI registry with no external services that runs without root, includes scanning and auth, but offers no replication or web UI as listed.

  • Distribution

    An open-source container registry server for storing and distributing container images and other content.

    Distribution is a lighter self-hosted registry that runs as a container, but it has no built-in web interface or vulnerability scanning, and access control needs extra setup.

Also worth comparing

These listings name Harbor as their own alternative, so the relationship runs both ways.

  • Clair

    A self-hosted service that statically analyses container images for known vulnerabilities.

    Harbor is a self-hosted container registry with built-in vulnerability scanning, image signing and role-based access control, more than Clair's analysis alone.

Similar software

Related functionality, not a direct replacement.