NORA review
NORA combines broad package support, caching, curation, and air-gapped mirroring.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
NORA is a self-hosted, open-source artifact registry for development teams that store, publish, proxy, and cache packages and container images. It supports Docker/OCI, Maven, npm, PyPI, Cargo, Go, Raw files, RubyGems, Terraform, Ansible Galaxy, NuGet, Pub, Conan, RPM, and Debian/APT repositories. Web, Linux, and self-hosted deployments are supported, with a web interface for dashboards, search, and browsing.
The published project documentation presents NORA as free forever and MIT-licensed, with no paid tiers described. Its core capabilities cover Docker/OCI image hosting, upstream pull-through caching, and proxying for package registries. Curation adds blocklists, allowlists, integrity verification, and release-age filtering, giving teams controls for deciding which upstream artifacts can enter a repository. Token-based role-based access provides read, write, and admin roles, while a Prometheus metrics endpoint supports monitoring.
NORA is particularly suited to teams that need control over artifact flow in self-hosted or air-gapped environments. Its offline mirror CLI is designed for disconnected workflows, and backup and restore commands support repository administration. Storage can use S3-compatible backends. Deployment options include a single binary, Docker, and a Kubernetes Helm installation. Choose NORA when open-source licensing, multi-format coverage, upstream caching, and repository curation matter. Teams seeking a hosted service or a broader platform beyond artifact storage should consider a different category of tool.
NORA pros and cons
- Where it wins
- Supports 15 artifact and package repository formats
- Curation controls include allowlists, blocklists, and integrity verification
- Offline mirroring, backup/restore, and S3-compatible storage support
- Where it doesn't
- Self-hosting leaves deployment and maintenance with your team
- The feature set is centered on repositories rather than broader DevOps tooling
- Role-based access is limited to read, write, and admin roles
NORA fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. How we rank.
Last updated · How we research and update