blumeops/docs/reference/services/zot.md
Erich Blume c130f72204 Update all docs titles to human-readable and delete test cards
Titles now use proper casing (e.g. "Borgmatic" instead of "borgmatic",
"AI Assistance Guide" instead of "ai-assistance-guide") and match file
stems so wiki-links work without alternate anchor text. Also removes
the title-test-alpha/beta cards and their reference index entry.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-07 21:40:22 -08:00

1 KiB

title tags
Zot
service
registry

Zot

OCI-native container registry providing pull-through cache and private image storage.

Quick Reference

Property Value
URL https://registry.ops.eblu.me
Local Port 5050
Data ~/zot
Config ~/.config/zot/config.json
LaunchAgent mcquack

Namespace Convention

Path Source
registry.ops.eblu.me/docker.io/* Cached from Docker Hub
registry.ops.eblu.me/ghcr.io/* Cached from GHCR
registry.ops.eblu.me/quay.io/* Cached from Quay
registry.ops.eblu.me/blumeops/* Private images

Pull-Through Cache

When cluster pulls an image, containerd checks zot first. If cached, returns immediately. If not, zot fetches from upstream, caches it, then returns.

Security Model

Network access only (no authentication). Defense is the Tailscale ACL boundary.