Container image registry

Spegel is a container registry cache and peer-to-peer distribution system for Kubernetes. It functions as an OCI image mirror and content addressable store that shares image layers between cluster nodes to reduce external registry traffic and latency. The project implements a distributed hash table to locate image digests across the network, allowing nodes to retrieve content from peers rather than repeated external downloads. This architecture mitigates registry rate-limiting and provides offline image availability to prevent workload failures during registry outages. The system covers capa

This project provides a centralized infrastructure management solution for container environments, designed to streamline registry authentication, image caching, and network traffic routing. By acting as a transparent proxy and registry mirror, it intercepts container engine requests to enforce consistent security policies and reduce external bandwidth consumption. The system simplifies access management by centralizing credentials for multiple external container registries, eliminating the need for individual client-side configurations. It further automates infrastructure setup through the i

Docker-Proxy is a self-hosted container image caching and mirroring service. It functions as a registry-aware reverse proxy that intercepts requests to remote registries, storing image layers on local disks to accelerate retrieval speeds and reduce dependencies on external network stability. The service includes a web-based management interface for searching mirrored images and monitoring service status. It supports credential-based authentication to access private images and bypass anonymous pull rate limits imposed by remote providers. The proxy manages traffic through domain mapping and s

This project is a Cloudflare Workers Docker proxy and container registry mirror. It functions as an HTTP request proxy that relays requests to container registries, such as Docker Hub, to bypass regional access restrictions and accelerate image downloads. The service incorporates identity masking to hide the proxy from automated scanners. This is achieved through the use of custom landing pages for unauthorized requests and filtering based on user agents. The system manages network traffic via edge-based request proxying and stateless routing. It utilizes stream-based payload relaying to han

Public Image Mirror is a container registry proxy service designed to cache remote container images locally. By intercepting image pull requests and serving content from internal storage, it reduces dependency on external registry availability and minimizes external bandwidth consumption. The service implements standard container registry protocols, allowing existing container runtimes to interact with the cache as if it were a native registry. It utilizes a content-addressable storage layer to manage image layers as immutable blobs, ensuring data integrity and deduplication while resolving m

Dragonfly is a peer-to-peer file distribution system designed to accelerate large-scale file and container image delivery across clusters. It splits files into small pieces that peers exchange independently, enabling parallel downloads from multiple sources while a central scheduler assigns parent peers based on real-time load metrics. The system integrates with existing tools through an HTTP proxy interface and uses gRPC for internal communication between peers and the scheduler. The system distinguishes itself through automatic integrity verification at the piece level, ensuring every downl

Distribution is an open-source container image registry that implements the OCI Distribution Specification, enabling any OCI-compatible client to push, pull, and manage container images over standard protocols. It serves as a content distribution toolkit for packaging, shipping, storing, and delivering container content across networked environments, storing and retrieving content by its cryptographic hash for integrity and deduplication. The registry separates image metadata from bulk data to enable efficient validation and partial pulls, and supports resumable blob uploads with chunked tran

Buildkit is a programmable container build toolkit and OCI container image builder that converts build definitions into concurrent dependency graphs for image construction. It functions as an OCI image distribution engine, capable of generating container images and exporting artifacts to local storage or remote registries. The project is distinguished by its use of a low-level binary intermediate representation to decouple high-level build languages from the execution engine. It supports multi-platform image builds through user-mode architecture emulation and provides a distributed build cach

Serverless Registry is a container registry service implemented as a serverless application. It provides a platform for hosting and managing container images by leveraging distributed object storage and edge computing to handle image layers and metadata. The project distinguishes itself by utilizing edge-side request proxying and lazy pull-through caching to manage external image dependencies. By fetching and persisting remote images on demand, it improves availability and access speeds for container runtimes. The system also employs chunked stream processing to manage large image layers, ens