Containers

KubeArmor is a Kubernetes-native runtime security enforcement system that restricts pod and container behavior (process execution, file access,...

Arcane is a modern web-based Docker management platform built with Go (backend) and SvelteKit (frontend), providing a user-friendly alternative to...

A native Go-based Model Context Protocol (MCP) server that enables large language models and AI tools to interact directly with Kubernetes and...

Project Copacetic (copa) is a CLI tool for patching container image vulnerabilities directly without full image rebuilds, using vulnerability...

Incus is a system container and virtual machine manager that provides a unified, REST API-driven platform for running full Linux systems at scale,...

container2wasm is a specialized container-to-WebAssembly converter that enables running Linux containers (x86_64, riscv64, AArch64) on WASI runtimes...

gVisor is an application kernel written in Go that provides strong isolation between containerized applications and the host OS, implementing a...

The OCI Distribution Specification defines a standardized API protocol for distributing container images and other content across registries and...

Trivy is a comprehensive security scanner for finding vulnerabilities, misconfigurations, secrets, and software licenses across container images,...

apko is a declarative OCI image builder that constructs container images from APK packages without requiring Dockerfile syntax, emphasizing...

Akash is a decentralized cloud computing marketplace implemented as a Tendermint-based blockchain node that connects users needing computing...

TSDProxy is a Docker reverse proxy that automatically exposes containers on a Tailscale network using label-based configuration and zero sidecars,...

Podman is a tool for managing OCI containers, pods, images, and volumes on Linux, with support for Mac and Windows via a managed virtual machine. It...

podman-tui is a terminal user interface for managing Podman containers and pods, designed for users who prefer keyboard-driven container management...

Dragonfly is a P2P-powered data distribution and acceleration system designed for cloud-native environments, particularly optimized for large-scale...

Kubernetes (K8s) is an open-source container orchestration system originally derived from Google's internal Borg system, designed to automate...

Kairos is an immutable Linux meta-distribution purpose-built for edge Kubernetes deployments, enabling users to create bootable, Kubernetes-ready OS...

The Distribution project is the reference implementation of the OCI Distribution Specification, providing a toolkit for packing, shipping, storing,...

Moby is the open-source upstream framework from which Docker Engine is assembled, providing modular toolkit components — container build tools, a...

Containerlab is a CLI tool for orchestrating container-based networking labs, enabling users to define and manage virtual network topologies using...

Rancher is a comprehensive container management platform that simplifies Kubernetes deployment and lifecycle management across environments. It...

Colima enables container runtimes (Docker, Containerd, Incus) and Kubernetes on macOS and Linux with minimal setup, targeting developers who need...

Apptainer is an open-source container platform optimized for high-performance computing (HPC) and shared systems, featuring immutable single-file...

Uncloud is a decentralized container orchestration tool designed for developers who want to deploy containerized applications across multiple Docker...

Fission is a Kubernetes-native serverless framework that enables developers to deploy functions triggered by HTTP requests, message queues, or...

Toolbx is a container-based tool for creating isolated, mutable Linux development environments without modifying the host system, built on Podman and...

kpt is a package-centric toolchain for automating Kubernetes configuration editing and delivery at scale, built around the "Configuration as Data"...

Syft is a CLI tool and Go library for generating Software Bill of Materials (SBOMs) from container images and filesystems. It serves security and...

BuildKit is a concurrent, cache-efficient container image builder toolkit designed as a modern alternative to the traditional Docker builder,...

Harbor is a CNCF-hosted, production-grade container registry that extends Docker Distribution with security, identity management, and compliance...