Alibaba Cloud Container Registry vs Harbor
Alibaba Cloud Container Registry
alibabacloud.comHarbor
goharbor.ioSide by side
| Figure | Alibaba Cloud Container Registry | Harbor |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 6 | 1 |
| Spec score · Container Registries | 9.0 (#2) | 7.9 (#13) |
| Spec score · Container Image Scanning Tools | 9.0 (#1) | 7.7 (#11) |
| Vulnerability scanning | Built-in scanning can run automatically or manually and reports vulnerabilities by severity before deployment. | Harbor provides image vulnerability scanning through Trivy when enabled during installation, and can connect to additional scanners. |
| What it does | Alibaba Cloud Container Registry is a fully managed service for storing, securing and distributing container images and cloud-native artifacts. | Harbor is an open source registry for securely managing artifacts across cloud native platforms such as Kubernetes and Docker. |
Plans
Alibaba Cloud Container Registry
- Personal EditionPriced on request
- Enterprise Basic EditionPriced on request
- Enterprise Advanced EditionPriced on request
- Personal EditionFree
- Enterprise Edition AdvancedPriced on request
- Enterprise Edition BasicPriced on request
In their own words
Alibaba Cloud Container Registry
Alibaba Cloud Container Registry has no write-up on Specifiction yet; its figures are above.
Harbor
Harbor is an open-source registry for managing artifacts across cloud-native platforms such as Kubernetes and Docker. It offers a web UI and extensible API, and can be installed on Kubernetes or a system with Docker support. Security features include policies, role-based access control, vulnerability scanning, and image signing and validation. Image scanning uses Trivy when enabled during installation, and Harbor can connect to additional scanners. It replicates images and charts to or from other registries in pull or push mode; listed adapters include Docker Hub, Amazon ECR, Google Container Registry, Azure Container Registry, and GitLab Registry. Authentication options are database, LDAP/Active Directory, and OIDC, though choosing database authentication and adding local users prevents a later switch to another mode. Project storage quotas are unlimited by default but can be set globally or per project. Robot account secrets are not stored by Harbor, so they must be saved when created; robot accounts cannot log into the user interface. Harbor is a CNCF Graduated project. HTTPS is recommended for production use.