zot

zot is a single-purpose OCI image repository server based on the OCI distribution spec.

• Conforms to OCI distribution spec APIs
• Uses OCI storage layout for storage layout
• TLS support
• Authentication via TLS mutual authentication and HTTP BASIC (local htpasswd and LDAP)
• Doesn't require root privileges
• Swagger based documentation

Building

• Build inside a container (preferred)

make binary-container

• Alternatively, build inside a container using stacker (preferred)

make binary-stacker

• Build using host's toolchain

make

Build artifacts are in bin/

Running

bin/zot serve config-file

Examples of config files are available in examples/ dir.

Ecosystem

skopeo

skopeo is a tool to work with remote image repositories.

We have a patched version available that works with zot.

git clone https://github.com/anuvu/skopeo

cd skopeo

make GO111MODULE=on binary-local

cri-o

cri-o is a OCI-based Kubernetes container runtime interface.

We have a patched version of containers/image available that works with zot which must be linked with cri-o.

git clone https://github.com/cri-o/cri-o

cd cri-o

echo 'replace github.com/containers/image => github.com/anuvu/image v1.5.2-0.20190827234748-f71edca6153a' >> go.mod

make bin/crio crio.conf GO111MODULE=on

Caveats

• go 1.12+
• The OCI distribution spec is still WIP, and we try to keep up