rules_oci

At a glance

• Editor score
  6.8 / 10
• Pricing
  Open source
• Best for
  Bazel users needing simple hermetic OCI builds
• Paid from
  Free
• Build method
  Daemonless
• Facts checked
  20 Sep 2026

• Where it wins

  • Builds daemonless, OCI-compatible images without requiring Docker
  • Supports multi-architecture image indexes and remote registry publishing
  • Can load images into a daemon or produce tarball output

• Where it doesn't

  • Designed primarily for teams already committed to Bazel
  • Image signing and cosign attestations remain in developer preview
  • Has fewer verified features and integrations than rules_img

Our verdict on rules_oci

rules_oci is an open-source Bazel ruleset for building and publishing OCI-compatible container images. It is aimed at developers and engineering teams that already use Bazel for reproducible builds and CI workflows. The ruleset constructs image layers, assembles multi-architecture image indexes, pulls base image layers through Bazel’s downloader, and publishes images or indexes to remote OCI registries. Its hermetic, daemonless approach also avoids requiring Docker to be installed, while supporting Linux and macOS development environments.

The main appeal is a focused build path inside the Bazel ecosystem. Image output can be loaded into a container daemon or written as a tarball, giving teams options for local workflows and downstream automation. Integration is centered on Bazel and OCI registries, with cosign available for developer-preview image signing and attestations. That makes rules_oci a practical fit when the build system is already Bazel and the required container workflow is registry publishing, reproducible image assembly, or multi-architecture output rather than a broad platform with many surrounding integrations.

rules_oci is free and open source, with no paid tier structure to evaluate. Its trade-off is scope: the project has fewer verified features and integrations than rules_img, and its signing and attestation capabilities are still in developer preview. The project is also described as unfunded and in stable maintenance mode, which may matter to teams seeking a broader roadmap or extensive platform coverage. Choose rules_oci for a simple, hermetic OCI workflow that stays close to Bazel; consider an alternative when you need wider integrations or more mature security-feature coverage.

Your product? Our editors can test rules_oci in depth and publish a review, labelled as paid · from $149/mo →

rules_oci pricing

rules_oci fact sheet

rules_oci integrations

rules_oci lists 3 integrations on its own site.

• Bazel
• OCI registries
• cosign

Alternatives to rules_oci

• BBuildKitA flexible, open-source builder for concurrent, cached, multi-platform container builds.9.4
• Docker BuildxA free BuildKit interface for multi-platform, cached, and attested image builds.9.3
• BuildahA free, daemonless Linux tool for building and managing container images.8.9

See all rules_oci alternatives →

Featured on iTechGuides

rules_oci is listed in our Container Build Tools directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/rules-oci/"><img src="https://www.itechguides.com/best/badge/rules-oci.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update