Private images,
hosted next to your apps
Push to cr.danubedata.ro, pull from Rapids, VPS, Kubernetes, or your laptop. Per-tenant isolated, Vault-signed JWT auth, Ceph-backed EU storage. Same Docker CLI — just change the registry.
Push your first image
in 60 secondsFree Starter tier · Billed hourly on paid plans · Cancel anytime
From docker login to Rapid pull
Four steps. No registry deployment, no JWT plumbing, no TLS chores.
Create an Access Key
Generate a scoped push or pull key from your team dashboard. Token shown once.
docker login
Authenticate against cr.danubedata.ro from your laptop, CI, or any host with Docker installed.
Push Your Image
Tag your image with your team namespace and push. Blobs land in our EU Ceph store.
Pull From Anywhere
Pull from Rapids, VPS, Kubernetes, or your laptop — including auto-pull for Rapids deployments.
Built for multi-team production
Not a single-tenant Distribution pod with a custom auth shim — a real platform-grade registry.
Per-Tenant Isolation
Repositories namespaced under your team slug. Cross-team pulls blocked at the token service; /v2/_catalog scoped to your team only.
Scoped Access Keys
Per-environment or per-CI keys with push+pull or pull-only scope. Revoke at any time.
Vault-Signed JWTs
Short-lived (5-min TTL) tokens signed with a Vault-managed keypair. Rotation built in.
Auto-wired to Rapids
Every team is provisioned an internal pull credential when their first Rapid is created — no imagePullSecret plumbing needed.
OCI v2 Compatible
Upstream CNCF Distribution. Docker, podman, buildah, Kaniko all work out of the box.
Ceph-Backed Storage
Blobs in our self-hosted Ceph cluster in Falkenstein. SSE encryption via Vault-managed keys.
Garbage Collection
Daily GC reclaims storage from unreferenced blobs. Trigger manually on demand.
EU-Resident Data
Image data, audit logs, and credentials stay in Germany. GDPR compliant by design.
Built for Every Image Workflow
From shipping to Rapids to mirroring base images, the registry meets you where you are.
Rapids Image Source
Build your image in CI, push to cr.danubedata.ro, and deploy to Rapids on the same domain. No third-party registry, no rate limits, no cross-region pull.
Private CI Artifacts
Push build artifacts from GitHub Actions, GitLab CI, or any pipeline. Keep proprietary images off public registries.
Vendored Base Images
Mirror upstream base images so your builds and deploys are insulated from upstream outages and rate limits.
Kubernetes Workloads
Use Container Registry from any Kubernetes cluster — self-hosted or managed — with a standard image-pull secret.
Internal Apps & Tools
Distribute internal developer tools, dashboards, and CLIs as container images to your whole team without exposing them publicly.
Simple, Predictable Pricing
Storage and repository count drive the plan. No per-pull fees, no rate limits beyond your tier.
Starter
- 500 MB storage
- 1 repositories
- Unlimited access keys
- Auto-wired Rapids credentials
Basic
Popular- 5 GB storage
- 5 repositories
- Unlimited access keys
- Auto-wired Rapids credentials
Professional
- 100 GB storage
- Unlimited repositories
- Unlimited access keys
- Auto-wired Rapids credentials
Need more than 100 GB? Talk to us about a custom plan.
Why not just run Distribution yourself?
You can — here is everything you skip by using the managed one.
| Self-Managed Distribution | DanubeData Container Registry | |
|---|---|---|
| Setup | Stand up Distribution, configure TLS, wire to object storage | Already running at cr.danubedata.ro |
| Authentication | Implement token service, JWT signing, key revocation | Dashboard-managed keys with Vault-signed JWTs |
| Multi-Tenancy | Reverse-proxy filtering, custom catalog scoping | Per-team isolation enforced at the token service |
| Storage | Provision and operate S3/Ceph cluster | Backed by our managed Ceph cluster |
| Garbage Collection | Schedule, run, monitor distribution-gc | Built-in daily GC plus on-demand trigger |
| TLS & DNS | Manage certificates, DNS records, renewals | TLS and DNS handled by the platform |
| Rapids Integration | Manage imagePullSecrets on every deploy | Auto-wired credentials per team |
Container Registry FAQ
Everything about cr.danubedata.ro.
A managed, multi-tenant OCI v2 (Docker Distribution) registry hosted at cr.danubedata.ro. Push private images from your laptop, CI, or any other registry, and pull them from anywhere — including Rapids, VPS, Kubernetes, or your local Docker. Every image is stored in our Ceph-backed EU object storage.
Your images, in the EU, next to your apps.
Push to cr.danubedata.ro, pull from Rapids, VPS, or your laptop — same registry, same region.
Free Starter tier · OCI v2 compatible · EU only · Auto-wired to Rapids