TOtosh·Sep 4, 2024Submission
Harbor: An open source trusted cloud native registry
1 points · Open discussiongoharbor
harbor
Go2016–2024
goharbor / harbor
harbor
An open source trusted cloud native registry project that stores, signs, and scans content.
11Distinct people
12Mentions
0Explicit recommenders
29.7KGitHub stars
What to know before exploring
What it is
An open source trusted cloud native registry project that stores, signs, and scans content.
GitHub
Where it is used
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
- notaryproject/notary · linked in 2 of the same discussions
- quay/clair · linked in 2 of the same discussions
Mentioned in the same Hacker News threads. That is not proof they are substitutes.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year12 dated mentions
Observed mentions: 2016-03-16 09:22:44 UTC to 2024-09-04 07:43:42 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 3 | 3 | 0 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 2 | 1 | 1 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 3 | 0 | 3 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 2 | 2 | 0 |
What Hacker News says
12 sourcesHarbor: Open-Source Trusted Cloud Native Registry
2 points · Open discussionHarbor is ok. We're using it as image storage for about 10 dev teams.
https://github.com/goharbor/harbor
In Docker October 2022 Pricing Change FAQI build my images for private & professional projects in Gitlab CI and I use the provided free registry.
The biggest downside to my set up is that I can't say I have enterprise-level security. Getting it nailed down properly requires the use of tools like TUF/Notary[0] & signed-image aware container repositories like Harbor[1] and a deployment gate mechanism like Portieris[2]. That's a lot of complexity to tack on.
Just a note -- Docker already runs containerd underneath via a shim[3]
If you're relying on docker-specific features then by all means it makes sense to continue using docker but if you're just looking for a thing to quietly run your containers (or power your kubernetes cluster), containerd should probably be that thing. It's all of the building and none of the extra stuff that docker the company is trying to do/become.
[0]: ht
Read the rest
This is what the Notary portion of Harbor does:
https://github.com/goharbor/harbor/blob/master/docs/use_nota...
https://docs.docker.com/notary/getting_started/
In Unauthorized access to Docker Hub databaseI didn't know ipfs cluster existed -- thanks for the reference.
I was more thinking of a harbor[0] like cobbling of these technologies together -- harbor combines a bunch of F/OSS tools into one powerful registry solution. Here are a few:
- Distribution for storing images
- Notary for signing
- Clair for static analysis
Based on this I was thinking of was basically Distribution + ipfs cluster + a small management daemon. The daemon is only there to tie the other pieces together and present a unified interface but the bulk of the work can be done with the other pieces.
[0]: https://github.com/goharbor/harbor/wiki/Architecture-Overvie...
[1]: https://github.com/docker/distribution
[2]: https://github.com/theupdateframework/notary
[3]: https://github.com/coreos/clair
In Kraken, an Open Source Peer-to-Peer Docker RegistryHarbor, a registry server to store and distribute Docker images
5 points · Open discussionThere is an entire genre of such tools now. Some names to look up are BlackDuck Hub[0] (commercial) and CoreOS Clair[1] (opensource).
At Pivotal we use both -- BlackDuck is built into a number of our pipelines and Clair is shipped as part of PKS (in the Harbor registry[2] contributed by VMWare).
A lot of our customers also use other security scanning tools that have expanded to include container scanning.
[0] https://www.blackducksoftware.com/products/hub
[1] https://github.com/coreos/clair
[2] https://github.com/vmware/harbor
In How the modern containerization trend is exploited by attackersVMWare has a really nice free registry, which is s3cure by default and appears to work well.
https://github.com/vmware/harbor
In Docker Is Raising Funding at $1.3B ValuationAn Enterprise-Class Container Registry Server Based on Docker Distribution
1 points · Open discussionHarbor: Enterprise-Class Container Registry Server Based on Docker Distribution
1 points · Open discussion[Golang] Project Harbor is an enterprise-class registry server
4 points · Open discussion