Distribution Registry

Spec sheet

Purpose

Distribution Registry is a stateless, highly scalable server-side application for storing and distributing container images and other content.Read 11 Oct 2026 · distribution.github.io

API

The documentation provides an HTTP API V2 specification for interacting with the registry.Read 10 Oct 2026 · distribution.github.io

Integrations

A typical CI/CD workflow can push a new image to the Registry after a successful build, then use a Registry notification to trigger deployment or notify other systems.Read 11 Oct 2026 · distribution.github.io

Security

The Registry natively supports TLS and basic authentication; externally accessible registries must first be secured using TLS.Read 11 Oct 2026 · distribution.github.io

Support

The project directs users to its #distribution channel in CNCF Slack for help and its GitHub issue tracker to report bugs.Read 10 Oct 2026 · distribution.github.io

License

The Registry is open source under the permissive Apache license.Read 11 Oct 2026 · distribution.github.io

Advanced access control

Delegated authentication is supported, but requires implementing or using a third-party authentication system.Read 10 Oct 2026 · distribution.github.io

Advanced authentication

The Registry supports delegated authentication through a trusted token server for deployments needing more control over access control and authorization integration.Read 11 Oct 2026 · distribution.github.io

Air-gapped use

A Registry can run without internet connectivity, but images that are not local may need to be fetched on a connected host and migrated into the isolated network.Read 11 Oct 2026 · distribution.github.io

Authentication and transport security

The Registry supports TLS and basic authentication; its deployment guide says externally accessible registries must be secured with TLS and should use access controls.Read 10 Oct 2026 · distribution.github.io

Compatibility

The Distribution Registry implements OCI Distribution Spec version 1.0.1.Read 11 Oct 2026 · distribution.github.io

Driver limits

New storage drivers are not currently being accepted, and the OSS and Swift drivers are no longer supported.Read 10 Oct 2026 · distribution.github.io

Image workflows

Users interact with a registry by pushing and pulling images, which are available in tagged versions.Read 11 Oct 2026 · distribution.github.io

Intended use

The project is aimed at teams that want control over image storage, their distribution pipeline, or integration with in-house development workflows.Read 10 Oct 2026 · distribution.github.io

Monitoring

The Registry includes logging and reporting, and notification endpoint status and metrics are exposed through its debug/vars interface.Read 10 Oct 2026 · distribution.github.io

Notification limitation

Notification queues are in memory, so messages can be lost if a registry instance is lost before delivery.Read 10 Oct 2026 · distribution.github.io

Notifications

The Registry includes a notification system that calls webhooks in response to activity, along with logging and reporting.Read 11 Oct 2026 · distribution.github.io

OCI compatibility

The registry implements OCI Distribution Specification version 1.0.1.Read 10 Oct 2026 · distribution.github.io

Operational requirements

Production operation requires skills in availability, scalability, logging, monitoring, and security; familiarity with Docker and networking is also required.Read 11 Oct 2026 · distribution.github.io

Storage

The default storage driver is the local POSIX filesystem; supported cloud storage drivers include S3, Microsoft Azure, and Google Cloud Storage.Read 11 Oct 2026 · distribution.github.io

Storage driver limitation

Adding support for new storage drivers has been put on hold; the documentation suggests considering whether a desired driver is S3 compatible.Read 11 Oct 2026 · distribution.github.io

Webhook notifications

The registry can send HTTP webhook notifications for manifest and layer pushes and pulls.Read 10 Oct 2026 · distribution.github.io

Where Specifiction places it

• Container Registries#16 of 607.8