Alternatives to zot

Self-hosted OCI-native container image registry shipped as a single binary with no dependencies. The listings below can replace it for an important use case. Each note says what changes if you switch.

The original

Replacements

Listings that take over the same core job as zot.

  • Harbor

    A self-hosted container registry with vulnerability scanning, image signing and role-based access control.

    Harbor adds a web UI, role-based access control, image signing and replication between registries, but it is heavier to run and needs Docker or Kubernetes to install.

  • Distribution

    An open-source container registry server for storing and distributing container images and other content.

    Distribution is a lightweight self-hosted registry that runs as a container, but it lacks the built-in vulnerability scanning of zot and needs extra setup for access control.

  • Project Quay

    A self-hostable container image registry for building, storing and distributing container images.

    Project Quay is a self-hosted registry with security scanning, access controls, builds and mirroring, though it is heavier to deploy and aimed at teams.

Similar software

Related functionality, not a direct replacement.