This is the Trace Id: b98d861230037253de54497225163574
Skip to main content Explore View all products (200+) Microsoft Foundry Azure Copilot GitHub Copilot Azure Kubernetes Service (AKS) Azure Cosmos DB Azure Database for PostgreSQL Azure Arc Microsoft Fabric Linux virtual machines in Azure Foundry Models Foundry Agent Service Foundry IQ Foundry Tools Foundry Control Plane Observability in Foundry Control Plane Azure OpenAI in Foundry Models Azure Speech in Foundry Tools Azure Machine Learning View all databases Azure Cosmos DB Azure DocumentDB Azure SQL Azure Database for PostgreSQL Azure Managed Redis Microsoft Fabric Azure Databricks Linux virtual machines in Azure Windows Server on Azure Azure Functions Azure Virtual Machine Scale Sets Azure API Management Azure Container Apps Azure Kubernetes Service (AKS) Azure Kubernetes Fleet Manager Azure Container Registry Azure Red Hat OpenShift Azure Container Instances Azure Container Storage Azure Arc Azure Local Microsoft Defender for Cloud Azure Monitor Microsoft Sentinel Azure Migrate View all solutions (40+) Cloud solutions for small and medium businesses Cloud migration and modernization center Data analytics for AI Azure Databases AI apps and agents Microsoft Marketplace Microsoft Sovereign Cloud AI apps and agents Responsible AI with Azure AI Infrastructure Data analytics for AI Machine learning operations (MLOps) Low-code application development on Azure Integration Services Serverless computing DevOps Migration and modernization center .NET apps migration Databases on Azure Linux on Azure Oracle on Azure SAP on the Microsoft Cloud Adaptive cloud High-performance computing (HPC) Infrastructure as a service (IaaS) Resiliency Azure Essentials Azure Accelerate FinOps on Azure Microsoft Marketplace Azure pricing overview Create an Azure account Free Azure services Flexible purchase options Pricing calculator FinOps on Azure Maximize ROI from AI Azure savings plans Azure reservations Azure Hybrid Benefit Virtual Machines Azure SQL Microsoft Foundry Microsoft Fabric Azure Kubernetes Service (AKS) Microsoft Defender for Cloud Software Development Companies Microsoft Marketplace Find a partner Get started with Azure Customer stories Analyst reports, white papers, and e-books Videos Learn more about cloud computing Documentation Explore Azure portal Developer resources Quickstart templates Resources for startups Developer community Students Azure for partners Blog Events and Webinars Learn Support Contact Sales Get started with Azure Sign in

Azure Container Registry

A registry of Docker and Open Container Initiative (OCI) images, with support for all OCI artifacts.
Overview

Simplify container lifecycle management

Build, store, secure, scan, replicate, and manage container images and artifacts with a fully managed, geo-replicated instance of OCI distribution. Connect across environments, including Azure Kubernetes Service (AKS) and Azure Red Hat OpenShift, and across Azure services like Azure App Service, Azure Machine Learning, and Azure Batch.
  • Get fast, scalable retrieval of container workloads. Azure Container Registry handles private Docker container images as well as related content formats, such as Helm charts, OCI artifacts, and images built to the OCI image format specification.
  • Streamline building, testing, pushing, and deploying images to Azure with Azure Container Registry Tasks. For example, extend your development inner-loop to the cloud by offloading Docker build operations to Azure with az acr build. Configure tasks to automatically rebuild application images when base images are updated, or automate image builds when your team commits code to a Git repository. Create multi-step tasks to automate building, testing, and patching multiple container images in parallel, in the cloud. Automate time-based tasks with Task Scheduling.
  • Set up a single registry to serve users and hosts wherever they are, with multi-master geo-replication. Synchronize an artifact across all replicas by pushing it to any one replica. Speed up deployment by using regionalized webhooks to receive notifications when a local pull becomes available.
  • Get both the security of a private network and the robustness of a managed, geo-replicated service, using Azure Virtual Network integration and firewall rules. Restrict access to your registry to services deployed within a virtual network—for example, to an Azure Kubernetes Service (AKS) instance.
  • Help ensure the content you pull from the registry is the content run on the node. Sign container images you push to the registry and configure image consumers to verify image integrity upon pulling.
  • Continuously scan images on Azure Container Registry. Discover known vulnerabilities in packages or other dependencies defined in the container image file. Receive vulnerability assessments and recommendations, including specific remediation guidance.
Features

Key features

Geo-replication

Geo-replication to efficiently manage a single registry across multiple regions

OCI artifact repository

OCI artifact repository for adding Helm charts, Singularity support, and new OCI artifact-supported formats

Automated container building and patching

Automated container building and patching, including base image updates and task scheduling

Highly secure

Enhanced security with Microsoft Entra ID authentication, role-based access control, Docker Content Trust, and virtual network integration.
Security

Embedded security and compliance

34,000
Full-time equivalent engineers dedicated to security initiatives at Microsoft.
15,000
Partners with specialized security expertise.
 
>100
Compliance certifications, including over 50 specific to global regions and countries.
A woman wearing glasses and a green shirt is seated at a table, focused on a laptop.
Pricing

Flexible pricing keeps you in control

Choose from multiple service tiers with predictable pricing and options for aligning to the capacity and usage patterns of your registry in Azure.
FAQ

Frequently asked questions

  • Authenticate through Microsoft Entra ID user, service principal, or admin login, or through Azure managed identity.
  • See Azure Container Registry best practices and recommendations for tagging and versioning container images.
  • Yes. See documentation from Twistlock and Aqua.
  • Yes, you can use trusted images in Azure Container Registry by enabling integrated Docker Notary. Learn more.
Abstract gradient background with soft blue and green hues and a faint yellow diagonal line.
Two people are sitting at a table with laptops open, discussing work in an office setting
Next steps

Choose the Azure account that’s right for you

Pay as you go or try Azure free for up to 30 days.
Person with glasses smiling while looking away, set against a blurred urban background.
Azure Solutions

Azure cloud solutions

Solve your business problems with proven combinations of Azure cloud services, as well as sample architectures and documentation.
A person wearing glasses and a green sweater is working on a laptop at a desk with a small plant.
Business Solution Hub

Find the right Microsoft Cloud solution

Browse the Microsoft Business Solutions Hub to find the products and solutions that can help your organization reach its goals.