Repolode
Submit
goharbor

goharbor/harbor

Open source cloud native container registry that stores, signs, and scans images and Helm charts, with RBAC and replication.

Open-source alternative to:Docker HubAmazon ECRGoogle Artifact Registry

View on GitHubWebsite
Stars
29,579
Forks
5,393
Open issues
957
Last commit
11 hours ago

What is it?

Harbor is a container registry for cloud native environments. It extends the open source Docker Distribution with the features teams usually need around a registry: user management, access control, and activity auditing. It stores both container images and Helm charts, and is intended to sit close to build and run environments to speed up image transfers.

Access is organized through projects, with role-based permissions that can differ for images and charts within the same project. Images and charts can be replicated between registry instances using policies with repository, tag, and label filters, with automatic retries on errors. Harbor also scans images for vulnerabilities on a schedule and can block deployment of vulnerable images through policy checks. Authentication can use LDAP/AD or OIDC for single sign-on.

Harbor is deployed with Docker Compose on a Linux host or with a Helm chart on Kubernetes. It includes a web portal, a RESTful API with embedded Swagger UI, and garbage collection to reclaim space from unreferenced blobs. The project is hosted by the Cloud Native Computing Foundation.

Key features

  • 01Stores and manages container images and Helm charts
  • 02Role-based access control per project
  • 03Policy-based replication between registry instances with filters
  • 04Scheduled vulnerability scanning with deployment policy checks
  • 05LDAP/AD and OIDC authentication support
  • 06Garbage collection, audit logging, and a RESTful API

Use cases

  • Hosting a private image registry for a Kubernetes cluster
  • Replicating images across datacenters or cloud regions
  • Enforcing vulnerability policies before images are deployed
  • Providing controlled registry access to teams via enterprise SSO

Quick start

  1. 1

    Check system requirements: Docker 20.10.10-ce+ and docker-compose 1.18.0+ on Linux

  2. 2

    Download the Harbor release binaries from the releases page

  3. 3

    Follow the Installation & Configuration Guide to install Harbor

Things to know

  • Requires Docker and docker-compose on a Linux host, and Kubernetes users must use a separate Helm chart.
  • The main branch may be unstable or broken, so use tagged releases instead.

Topics

#container-registry#docker#kubernetes#helm#security#image-scanning#replication#devops#cloud-native#cncf

FAQ

What is harbor?
Open source cloud native container registry that stores, signs, and scans images and Helm charts, with RBAC and replication. Harbor is a container registry for cloud native environments. It extends the open source Docker Distribution with the features teams usually need around a registry: user management, access control, and activity auditing. It stores both container images and Helm charts, and is intended to sit close to build and run environments to speed up image transfers.
Is harbor free to use? What license does it have?
harbor is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
Is harbor still maintained?
Actively maintained. The last commit to harbor was on Oct 20, 2026.
What can I use harbor for?
Hosting a private image registry for a Kubernetes cluster Replicating images across datacenters or cloud regions Enforcing vulnerability policies before images are deployed Providing controlled registry access to teams via enterprise SSO
How do I install harbor?
Check system requirements: Docker 20.10.10-ce+ and docker-compose 1.18.0+ on Linux Download the Harbor release binaries from the releases page Follow the Installation & Configuration Guide to install Harbor
Where can I get harbor?
The source code and installation instructions are on GitHub: https://github.com/goharbor/harbor

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects