Private Docker container registry
A private Docker and OCI registry with vulnerability scanning on push, cleanup rules and scoped access tokens. Pay per GB stored, with a free allowance.
Store your Docker and OCI images on a private registry. Every push is scanned for vulnerabilities, old tags clean themselves up, and you pay only for the gigabytes you store.
- Vulnerability scanning on push: Every image is checked for known vulnerabilities when it lands. See critical and high findings per tag.
- Cleanup rules for old tags: Keep the last few tags and delete untagged images automatically, so storage stays small.
- Scoped access tokens: Read-only or read-write tokens per laptop, pipeline or server. Revoke one without touching the others.
- Run images on App Platform: Deploy an app straight from an image in your registry.
- Free pulls inside Bytenests: Pulls from your Bytenests servers and apps cost nothing. Only pulls to the public internet are billed.
- Storage limits you control: Set a hard cap. Pushes past it are refused, so a runaway pipeline cannot run up your bill.
Frequently asked questions
How is the monthly bill worked out?
We measure how much you store through the month and bill the average, minus the free allowance. Pulls to the public internet are added per GB.
What counts as an internal pull?
Any pull from inside the Bytenests network, such as your virtual machines and App Platform apps. Those are free.
Can I store Helm charts and other OCI artifacts?
Yes. The registry follows the OCI distribution standard, so helm push and other OCI clients work alongside Docker and Podman.
What happens when I reach my storage limit?
New pushes are refused until you delete images or raise the limit. Pulls keep working, so nothing that is already running breaks.
How do I move images from Docker Hub or another registry?
Pull, re-tag with your Bytenests registry address, and push. Tools like skopeo or crane can copy whole repositories in one command.