grepular/lagport repository overview

⁠lagport

A small, self-hosted OCI container registry that runs on one machine, or on up to 8 as one cluster. Push to any node and pull from any node. The nodes are the storage: every node keeps every manifest and tag, and every live blob is kept on two nodes (configurable), with no database, object store or coordinator. Every node keeps accepting pushes when it cannot reach the others, and the nodes converge once they can. It speaks the OCI Distribution API, including multi-architecture images, the referrers API and cosign signatures, and passes the distribution-spec conformance suite.

Traffic between nodes is always mutual TLS from a private cluster CA. The image is FROM scratch (amd64 and arm64), runs as uid 65532 with no capabilities, and confines itself with Landlock and seccomp. Releases are signed with cosign. Pin to X.Y.Z, or follow X.Y, X or latest. Pre-v1: configuration and behaviour may change between releases.

• Source: https://gitlab.com/grepular/lagport⁠
• License: GNU AGPL V3, or a commercial licence on request
• Author: Mike Love - https://www.grepular.com⁠

Hire me⁠ · Blog⁠ · RSS feed⁠

⁠Support/Appreciate my work

• Bitcoin⁠: 1PQLtWnjUi1itHLG6QCQeHM3Nxua8pRsq1
• Paypal⁠
• Buy me a Coffee⁠