---
title: OCI and Docker images
description: Push and pull container images and OCI artifacts with Cuitty Registry.
section: Registry
order: 6
updatedAt: 2026-06-09
slug: registry/oci
---
Cuitty Registry supports Docker and OCI distribution flows for blobs, manifests, and tags. The first path segment after the host maps to the Registry namespace.

```text
registry.example.com/acme/api:1.2.0
registry.example.com/acme/platform/worker:sha-abc123
```

## Docker

```bash
docker login registry.example.com
docker push registry.example.com/acme/api:1.2.0
docker pull registry.example.com/acme/api:1.2.0
```

Push requires publish permission on the namespace or package. Pull requires read or install permission.

## OCI artifacts

Use standard OCI tooling against the same host:

```bash
oras push registry.example.com/acme/sbom:1.2.0 sbom.spdx.json
oras pull registry.example.com/acme/sbom:1.2.0
```

## Tag policy

Operators should decide whether tags are mutable, immutable, or protected by namespace policy before opening production pushes. Registry records tag changes and manifest writes as audit events.

## Upload cleanup

Interrupted blob uploads create temporary sessions. Run the Registry worker so expired OCI upload sessions and orphaned temporary blobs are cleaned up on schedule.