Alternatives to Harbor
A self-hosted container registry with vulnerability scanning, image signing and role-based access control. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
Harbor
A self-hosted container registry with vulnerability scanning, image signing and role-based access control.
Replacements
Listings that take over the same core job as Harbor.
Project Quay
A self-hostable container image registry for building, storing and distributing container images.
Project Quay is a self-hosted registry with image scanning, access controls, image builds and mirroring, likewise heavier to deploy than a simple registry.
zot
Self-hosted OCI-native container image registry shipped as a single binary with no dependencies.
zot is a single static binary OCI registry with no external services that runs without root, includes scanning and auth, but offers no replication or web UI as listed.
Distribution
An open-source container registry server for storing and distributing container images and other content.
Distribution is a lighter self-hosted registry that runs as a container, but it has no built-in web interface or vulnerability scanning, and access control needs extra setup.
Also worth comparing
These listings name Harbor as their own alternative, so the relationship runs both ways.
Clair
A self-hosted service that statically analyses container images for known vulnerabilities.
Harbor is a self-hosted container registry with built-in vulnerability scanning, image signing and role-based access control, more than Clair's analysis alone.
Similar software
Related functionality, not a direct replacement.
Skopeo
A command-line tool for inspecting, copying and signing container images in remote registries.
regclient
A Go client and command-line tooling for inspecting, copying and managing images in Docker and OCI registries.
ORAS
A command-line tool and client libraries for pushing and pulling OCI artifacts to container registries.
cert-manager
A Kubernetes and OpenShift controller that issues and renews X.509 TLS certificates automatically.
Diun
A self-hosted tool that notifies you when container images you use get new tags or digests.