rociA fast, minimal OCI registry in Rust

A Rust implementation of the OCI Distribution Specification — single static binary, zero-config start, no runtime dependencies.

Get started

Download

What is roci?

View on GitHub

Minimal footprint

A single static binary with a tiny memory and CPU baseline — no daemon sprawl, no external database. Suitable for edge, CI, and colocated Kubernetes.

Fast queries

An index designed for low-latency tag, manifest, referrer, and search lookups, with zero-copy blob serving where the OS allows it.

Config-driven

Start with zero config and sane defaults; grow into a single declarative config file. All behavior is controlled from configuration, not build-time code paths.

OCI image layout on disk

Storage is a plain OCI image layout, so any layout can be served directly as a registry and inspected with standard tooling.

Core vs. extensions

The dist-spec surface is a stable core; signatures, search, sync, scanning, and metrics are cleanly separated extensions compiled and configured independently.

Rootless & hardened

No root privileges required. Ships as a hardened static musl binary on a scratch base, running as a nonroot UID with a read-only root filesystem.