Containers

KubeArmor is a Kubernetes-native runtime security enforcement system that restricts pod and container behavior (process execution, file access,...

smolvm is a CLI tool for creating and running lightweight, portable Linux virtual machines with sub-second cold start times and cross-platform...

Arcane is a modern web-based Docker management platform built with Go (backend) and SvelteKit (frontend), providing a user-friendly alternative to...

A native Go-based Model Context Protocol (MCP) server that enables large language models and AI tools to interact directly with Kubernetes and...

Project Copacetic (copa) is a CLI tool for patching container image vulnerabilities directly without full image rebuilds, using vulnerability...

Incus is a system container and virtual machine manager that provides a unified, REST API-driven platform for running full Linux systems at scale,...

container2wasm is a specialized container-to-WebAssembly converter that enables running Linux containers (x86_64, riscv64, AArch64) on WASI runtimes...

Podlet is a Rust-based CLI tool that generates Podman Quadlet systemd unit files from Podman commands, Docker Compose files, or existing container...

gVisor is an application kernel that runs in userspace to provide strong isolation between containers and the host OS, implementing a Linux-like...

The OCI Distribution Specification defines a standardized API protocol for distributing container images and other content across registries and...

Trivy is a comprehensive security scanner for finding vulnerabilities, misconfigurations, secrets, and software licenses across container images,...

apko is a declarative OCI image builder that constructs container images from APK packages without requiring Dockerfile syntax, emphasizing...

Podman Desktop is a graphical desktop application that provides a user-friendly interface for developers to build, manage, and deploy containers and...

Akash is a decentralized cloud computing marketplace implemented as a Tendermint-based blockchain node that connects users needing computing...

TSDProxy is a Docker reverse proxy that automatically exposes containers on a Tailscale network using label-based configuration and zero sidecars,...

Robusta Classic is a Prometheus alert enrichment and automation platform for Kubernetes that adds smart grouping, automatic remediation, alert...

The Cloudflare Sandbox SDK enables secure, isolated code execution in containers running on Cloudflare's edge network, accessible via Workers...

Podman is a tool for managing OCI containers, pods, images, and volumes on Linux, with support for Mac and Windows via a managed virtual machine. It...

podman-tui is a terminal user interface for managing Podman containers and pods, designed for users who prefer keyboard-driven container management...

cdxgen is a CLI tool and library that generates software bills of materials (SBOMs) in CycloneDX and SPDX formats, supporting multiple languages,...

Dragonfly is a P2P-powered data distribution and acceleration system designed for cloud-native environments, particularly optimized for large-scale...

Kubernetes (K8s) is an open-source container orchestration system originally derived from Google's internal Borg system, designed to automate...

Conty is a single-file, unprivileged Linux container that packages a full Arch Linux environment with gaming tools (Wine, Proton, Lutris, Steam) and...

netshoot is a Docker and Kubernetes network debugging container that provides troubleshooting tools (tcpdump, dig, netcat, etc.) to diagnose network...

Kata Containers is an open-source implementation of lightweight virtual machines that combine container performance with VM-level workload isolation...

Kairos is an immutable Linux meta-distribution purpose-built for edge Kubernetes deployments, enabling users to create bootable, Kubernetes-ready OS...

The Distribution project is the reference implementation of the OCI Distribution Specification, providing a toolkit for packing, shipping, storing,...

Moby is the open-source upstream framework from which Docker Engine is assembled, providing modular toolkit components — container build tools, a...

Dokku is a self-hosted Platform-as-a-Service (PaaS) built on Docker that enables developers to deploy and manage applications with minimal...

ETL is a header-only C++ template library designed specifically for embedded systems, providing STL-like containers and algorithms with compile-time...