Sync container images across registries,efficiently.
ocync copies OCI images with blob deduplication, cross-repo mounting, and streaming transfers. Faster syncs, fewer requests, and adaptive rate control.
01 / Efficiency
Pull once.
Push everywhere.
Global blob deduplication means shared layers transfer exactly once from source, then mount across all targets. AIMD (additive increase, multiplicative decrease) concurrency adapts to each registry independently, backing off when one throttles.
02 / Security
Secure by default.
Not by configuration.
Every Linux build links the AWS-LC FIPS module and speaks only FIPS-approved TLS. Minimal, hardened deployment artifacts. No elevated privileges required, ever.
03 / Experience
One binary.
Ship it anywhere.
A single CLI binary with zero runtime dependencies. Helm chart supports Deployment, CronJob, or Job. Watch mode for continuous sync. Container images ready to pull.
# Copy a single image
ocync copy cgr.dev/chainguard/nginx:latest \
123456789012.dkr.ecr.us-east-1.amazonaws.com/nginx:latest
# Or deploy with Helm
helm install ocync oci://public.ecr.aws/clowdhaus/ocync04 / Registries
Every registry.
Auto-detected auth.
Auto-detected auth and provider-specific optimizations. ECR blob mounting. Docker Hub rate-limit awareness. Works with any OCI-compliant registry out of the box.