An open source trusted cloud native registry project that stores, signs, and scans content.
Harbor
The Harbor Project holds bi-weekly community calls in two different timezones. To join the community calls or to watch previous meeting notes and recordings, please visit the meeting schedule.
Note: The main
branch may be in an unstable or even broken state during development.
Please use releases instead of the main
branch in order to get a stable set of binaries.
Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Harbor extends the open source Docker Distribution by adding the functionalities usually required by users such as security, identity and management. Having a registry closer to the build and run environment can improve the image transfer efficiency. Harbor supports replication of images between registries, and also offers advanced security features such as user management, access control and activity auditing.
Harbor is hosted by the Cloud Native Computing Foundation (CNCF). If you are an organization that wants to help shape the evolution of cloud native technologies, consider joining the CNCF. For details about whose involved and how Harbor plays a role, read the CNCF announcement.
Features
Architecture
For learning the architecture design of Harbor, check the document Architecture Overview of Harbor.
API
System requirements:
On a Linux host: docker 17.06.0-ce+ and docker-compose 1.18.0+ .
Download binaries of Harbor release and follow Installation & Configuration Guide to install Harbor.
If you want to deploy Harbor on Kubernetes, please use the Harbor chart.
Refer to the documentation for more details on how to use Harbor.
OCI Distribution Conformance Tests
Check the OCI distribution conformance tests report of Harbor.
Compatibility
The compatibility list document provides compatibility information for the Harbor components.
Community
Demos
Partners and Users
For a list of users, please refer to ADOPTERS.md.
Security Security Audit
A third party security audit was performed by Cure53 in October 2019. You can see the full report here.
Reporting security vulnerabilities
If you've found a security related issue, a vulnerability, or a potential vulnerability in Harbor please let the Harbor Security Team know with the details of the vulnerability. We'll send a confirmation email to acknowledge your report, and we'll send an additional email when we've identified the issue positively or negatively.
For further details please see our complete security release process.
License
Harbor is available under the Apache 2 license.
This project uses open source components which have additional licensing terms. The official docker images and licensing terms for these open source components can be found at the following locations:
Fossa Status
Twice a month we will interview people behind open source businesses. We will talk about how they are building a business on top of open source projects.
We'll never share your email with anyone else.