zot
Self-hosted OCI-native container image registry shipped as a single binary with no dependencies.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
About zot
zot is a container image registry that follows the OCI Distribution and Image specifications closely and is also compatible with Docker clients. It ships as one statically built binary that runs without elevated privileges, on Linux and macOS, Intel and Arm, including Raspberry Pi, cloud and bare metal.
Security scanning, authentication, authorization, garbage collection and deduplication are built into the same binary. A full build includes every feature, while a minimal build is stripped down for security. It is a CNCF Sandbox project and suits teams or homelabs that want to host their own images.
Strengths
- Single static binary with no external services
- Runs without root privileges
- Built-in security scanning, auth and garbage collection
- Minimal build option for a smaller attack surface
Limitations
- Aimed at users comfortable running server software
- No graphical desktop client
Details
- Pricing
- FreeFree and open source under the Apache 2.0 license.
- License
- Apache-2.0
- Developer
- The zot contributors
- Platforms
- macOS, Linux, Self-hosted
- How it runs
- Self-hosted
- Account
- Not required
- Best suited for
- Hosting your own container images on modest hardware
- Categories
- Container tools, Developer tools
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Alternatives to zot
Compare allSoftware that can replace zot for an important use case, and what changes if you switch.
Harbor
A self-hosted container registry with vulnerability scanning, image signing and role-based access control.
Harbor adds a web UI, role-based access control, image signing and replication between registries, but it is heavier to run and needs Docker or Kubernetes to install.
Distribution
An open-source container registry server for storing and distributing container images and other content.
Distribution is a lightweight self-hosted registry that runs as a container, but it lacks the built-in vulnerability scanning of zot and needs extra setup for access control.
Project Quay
A self-hostable container image registry for building, storing and distributing container images.
Project Quay is a self-hosted registry with security scanning, access controls, builds and mirroring, though it is heavier to deploy and aimed at teams.
Similar software
Related functionality, not necessarily a direct replacement.
ORAS
A command-line tool and client libraries for pushing and pulling OCI artifacts to container registries.
Skopeo
A command-line tool for inspecting, copying and signing container images in remote registries.
regclient
A Go client and command-line tooling for inspecting, copying and managing images in Docker and OCI registries.
Docker Engine
The container runtime that builds, packages and runs applications in Docker containers.
Buildah
A command-line tool for building OCI container images without a running daemon.
Docker Buildx
A Docker CLI plugin that extends image builds with BuildKit, including multi-platform builds.
