Your images, ready to deploy.
Store private container images and OCI artifacts in São Paulo. Push and pull with your existing tools, control access with IAM, and keep repositories tidy with lifecycle policies.
Build once. Deploy by digest.
Push your application image from CI, tag a release, and deploy the same digest across your instances and container runtimes.
Control your software artifacts
OCI-compatible tools
Use Docker, Podman, and other OCI clients for image pushes, pulls, tags, and multi-platform manifests.
Repository controls
Use IAM and resource policies to grant access, make tags immutable, and protect repositories from deletion.
Lifecycle policies
Preview cleanup rules and expire images based on age or count, including untagged images.
Cache and encryption
Cache supported public upstream images. Layers are encrypted at rest, with an optional account-wide customer KMS key.
From build to deployment
01
Create a repository
Choose a repository name, tag mutability, and deletion protection.
02
Authenticate your client
Obtain a short-lived registry credential and use it with your container client.
03
Push and pull
Use the repository URI returned by the service. Pin deployments by digest when you need an immutable reference.
Know what to expect
Repositories are scoped to an account and region. Shared layers are stored once per account. Changing encryption applies to new layers; old layers still need the key that encrypted them.
Start with R$ 100 in credits
Eligible new accounts receive credits after activation. Check the amount and expiry in Billing.
Create a free account