Keppel

Spec sheet

Product

Keppel is a regionally federated, multi-tenant container image registry.Read 11 Oct 2026 · github.com

Deployment

The project says to build with make, install with make install, or build a Docker image; server and client commands are in one binary.Read 11 Oct 2026 · github.com

Integrations

The operator guide describes optional integration with Limes through the liquidapi server and vulnerability scanning through a configured Trivy instance.Read 11 Oct 2026 · github.com

License

The repository lists the Apache-2.0 license.Read 11 Oct 2026 · github.com

Audit events

Audit events can be sent to RabbitMQ when audit trail configuration is enabled; otherwise they are written only to the debug log.Read 11 Oct 2026 · github.com

Build and deploy

The project says to build with make, install with make install, or use docker build; its binary contains client and server commands.Read 11 Oct 2026 · github.com

Deployment components

A complete deployment requires one or more API servers and exactly one janitor; liquidapi, healthmonitor, and anycastmonitor are optional components.Read 11 Oct 2026 · github.com

External services

Keppel uses pluggable auth, storage, federation, inbound cache, account management, and optional rate limit drivers that connect to external services.Read 11 Oct 2026 · github.com

Federation

Keppel instances in different regions or network segments can share account namespaces and replicate between accounts with the same name.Read 11 Oct 2026 · github.com

Garbage collection

Online garbage collection runs without scheduled downtime or operator intervention.Read 11 Oct 2026 · github.com

Monitoring

All server components expose Prometheus metrics at the /metrics endpoint.Read 11 Oct 2026 · github.com

Registry API

Keppel fully implements the OCI Distribution API and also provides a custom API for multitenancy and repository, manifest, and tag metadata.Read 11 Oct 2026 · github.com

Security reporting

The project directs security reports to its security policy and asks users not to file security issues as GitHub issues.Read 11 Oct 2026 · github.com

Storage

Each customer account gets separate backing storage, allowing storage quota and usage to be tracked by that storage.Read 11 Oct 2026 · github.com

Storage and database requirements

The operator guide lists PostgreSQL for the database and supports optional Redis for compatible authentication and rate-limit drivers.Read 11 Oct 2026 · github.com

Storage model

It uses multi-tenant-aware storage drivers to give each customer separate storage space, allowing quotas and usage to be tracked by the backing storage.Read 11 Oct 2026 · github.com

Support and contributions

The project accepts feature requests and bug reports through GitHub issues and welcomes contributions and feedback.Read 11 Oct 2026 · github.com

Support and security reporting

The project accepts feature requests and bug reports through GitHub issues and directs security reports to its security policy rather than public issues.Read 11 Oct 2026 · github.com

Supported manifest formats

Keppel supports Docker images and image lists, OCI image manifests, and OCI image indexes.Read 11 Oct 2026 · github.com

Vulnerability scanning

Keppel can use Trivy to scan registry contents for vulnerabilities.Read 11 Oct 2026 · github.com

Where Specifiction places it

• Container Registries#36 of 607.3