A private registry for TunnelTug and 0Trust services. Pull images without signing in. Push only with a secret from your dashboard. Artifacts are stored on the 0trust.social content network.
Each service ships as a container you can run on your own k3s or in a TunnelTug-managed fleet.
Social feeds and stories for communities
hub.tunneltug.com/0trust/williwaw:latestDocumentation and published sites
hub.tunneltug.com/0trust/motionkb:latestEvent and community chat
hub.tunneltug.com/0trust/ack:latestSecure team email
hub.tunneltug.com/0trust/mail:latestPrivate search for your mesh
hub.tunneltug.com/0trust/search:latestIdentity, access, and control plane
hub.tunneltug.com/0trust/platform:latestMesh access and edge agents
hub.tunneltug.com/0trust/services:latestMedia and object delivery
hub.tunneltug.com/0trust/social:latestNaming plane and public registry face
hub.tunneltug.com/0trust/name:latestDevice-bound session credential relay
hub.tunneltug.com/0trust/dbsc-relay:latestMulti-region DNS and BGP anycast
hub.tunneltug.com/0trust/anycast:latestLog and event ingest with orchid_sync BM25
hub.tunneltug.com/0trust/orchid-ingest:latestRuntime for tunnel fleets
hub.tunneltug.com/tunneltug/engine:latestThe fleet controller can host the registry, store blobs on 0trust.social, and serve public pulls.
Each release records fleet settings and the exact image digest so you can detect unexpected image changes.
Tunnel servers run from hub.tunneltug.com/tunneltug/engine:latest and register with your load balancer automatically.
export TUNNELTUG_TOKEN=\"$(tunneltug -gen-token)\" tunneltug -mode barge -barge-runtime k3s \\ -barge-replicas 2 \\ -k3s-image hub.tunneltug.com/tunneltug/engine:latest \\ -token \"$TUNNELTUG_TOKEN\" \\ -domain tunneltug.com
export HUB_TAG=latest TUNNELTUG_TOKEN=… ./deploy/oci/build-and-publish.sh all
tunneltug -mode hub-publish \\ -hub-products all \\ -hub-tag latest \\ -token \"$TUNNELTUG_TOKEN\"
tunneltug -mode stack \\ -stack-products williwaw,motionkb,ack,name,dbsc_relay,anycast,orchid_ingest \\ -stack-tag latest \\ -token \"$TUNNELTUG_TOKEN\"
All images on hub.tunneltug.com and the TunnelTug engine that serves them are open source under the MIT License. That includes the engine image, 0Trust product images, 0trust.name, DBSC Relay, Anycast edge, and Orchid Sync Ingest.