container
Deploy web apps anywhere. From bare metal to cloud VMs.
Kamal offers zero-downtime deploys, rolling restarts, asset bridging, remote builds, accessory service management, and everything else you need to deploy and manage your web app in production with Docker. Originally built for Rails apps, Kamal will work with any type of web app that can be containerized.
professional hacking setup.
Exegol is a community-driven hacking environment, powerful and yet simple enough to be used by anyone in day to day engagements. Exegol is the best solution to deploy powerful hacking environments securely, easily, professionally. No more unstable, not-so-security-focused systems lacking major offensive tools. Kali Linux (and similar alternatives) are great toolboxes for learners, students and junior pentesters. But professionals have different needs, and their context require a whole new design.
Related contents:
Home server management made easy. A personal homeserver for everyone.
Free and open-source, Runtipi lets you install all your favorite self-hosted apps without the hassle of configuring and managing each service. One-click installs and updates for more than 140 popular apps.
Receive notifications when an image is updated on a Docker registry
A CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. Exceptional for vulnerability detection when used with a scanner like Grype.
Related contents:
A vulnerability scanner for container images and filesystems.
Work with remote images registries - retrieving information, images, signing content.
skopeo is a command line utility that performs various operations on container images and image repositories.
Related contents:
Powerful system container and virtual machine manager.
Incus is a next generation system container and virtual machine manager. It offers a unified user experience around full Linux systems running inside containers or virtual machines.
An open source control plane manager for unified cluster management.
k0smotron allows you to unify your Kubernetes cluster management for an efficient use of resources. It’s designed for k0s.
From pets to cattle: Streamline your Kubernetes control plane management with k0smotron. Experience unparalleled isolation, scalability, and resource efficiency for your Kubernetes control planes with k0smotron - the ultimate Kubernetes management solution. It’s designed for k0s
A visualizer for Docker Swarm Mode using the Docker Remote API, Node.JS, and D3
Wolfi is a community Linux OS designed for the container and cloud-native era. Chainguard started the Wolfi project to enable building Chainguard Images, our collection of curated distroless images that meet the requirements of a secure software supply chain. This required a Linux distribution with components at the appropriate granularity and with support for both glibc and musl, something that was not yet available in the cloud-native Linux ecosystem.
transform your application source code into images that can run on any cloud.
Related contents:
Your app, in your favorite language, ready to run in the cloud.
Buildpacks transform your application source code into container images. The Paketo open source project provides production-ready buildpacks for the most popular languages and frameworks.
Hardened Containers, Faster Teams, Secure Software.
Automatically eliminate unused software components and deploy smaller, faster, more secure workloads.
Preevy is a powerful CLI tool designed to simplify the process of creating ephemeral preview environments. Using Preevy, you can easily provision any Docker-Compose application on AWS using affordable Lightsail, Google Cloud, or Microsoft Azure VMs (support for more cloud providers is on the way).
The Certified Enterprise Kubernetes Distribution
k0s is a highly scalable, certified Kubernetes distribution that works on any infrastructure. It’s built on open source and free.
Linux Native, API-Aware Networking and Security for Containers. eBPF-based Networking, Observability, Security.
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span multiple clusters in either a native routing or overlay mode. It is L7-protocol aware and can enforce network policies on L3-L7 using an identity based security model that is decoupled from network addressing.
Related contents:
Supply-chain Levels for Software Artifacts, or SLSA ("salsa").
SLSA is a specification for describing and incrementally improving supply chain security, established by industry consensus. It is organized into a series of levels that describe increasing security guarantees.
It’s a security framework, a checklist of standards and controls to prevent tampering, improve integrity, and secure packages and infrastructure. It’s how you get from "safe enough" to being as resilient as possible, at any link in the chain.
Related contents:
An open specification for enriching containers with development specific content and settings.
A Development Container (or Dev Container for short) allows you to use a container as a full-featured development environment. It can be used to run an application, to separate tools, libraries, or runtimes needed for working with a codebase, and to aid in continuous integration and testing. Dev containers can be run locally or remotely, in a private or public cloud.
Related contents:
Deploy a Production Ready Kubernetes Cluster
-
Can be deployed on AWS, GCE, Azure, OpenStack, vSphere, Equinix Metal (bare metal), Oracle Cloud Infrastructure (Experimental), or Baremetal
-
Highly available cluster
-
Composable (Choice of the network plugin for instance)
-
Supports most popular Linux distributions
-
Continuous integration tests
Your Kubernetes Platform is one Git commit away.
The DevOps Stack provides a standard Kubernetes Platform, bringing together automated Provisioning as Code, Continuous Application Deployment, and readily-made configurations for the best Cloud Native tools in the industry.
software repository management.
Pulp is a platform for managing repositories of content, such as software packages, and pushing that content out to large numbers of consumers.
Related contents:
Serverless Functions Made Simple. OpenFaaS brings Functions As A Service (FaaS) to Kubernetes.
OpenFaaS® makes it simple to deploy both functions and existing code to Kubernetes
Dev environments. In your web app.
From interactive tutorials to full-blown IDEs, build instant, interactive coding experiences backed by WebContainers: the trusted, browser-based runtime from StackBlitz.
A collaborative project for the container ecosystem to assemble container-based systems. Moby is an open-source project created by Docker to enable and accelerate software containerization.
It provides a "Lego set" of toolkit components, the framework for assembling them into custom container-based systems, and a place for all container enthusiasts and professionals to experiment and exchange ideas. Components include container build tools, a container registry, orchestration tools, a runtime and more, and these can be used as building blocks in conjunction with other tools and projects.
KubeFire is to create and manage Kubernetes clusters running on FireCracker microVMs via weaveworks/ignite.
Production Grade k8s Installation, Upgrades and Management. The easiest way to get a production grade Kubernetes cluster up and running. We like to think of it as kubectl for clusters.
kops will not only help you create, destroy, upgrade and maintain production-grade, highly available, Kubernetes cluster, but it will also provision the necessary cloud infrastructure.
AWS (Amazon Web Services) and GCE (Google Cloud Platform) are currently officially supported, with DigitalOcean, Hetzner and OpenStack in beta support, and Azure in alpha.
Container Machines - Containers that look like Virtual Machines. footloose creates containers that look like virtual machines. Those containers run systemd as PID 1 and a ssh daemon that can be used to login into the container. Such "machines" behave very much like a VM, it's even possible to run dockerd in them :)
Ignite a Firecracker microVM. Weave Ignite is an open source Virtual Machine (VM) manager with a container UX and built-in GitOps management.
Secure and fast microVMs for serverless computing. Firecracker is an open source virtualization technology that is purpose-built for creating and managing secure, multi-tenant container and function-based services that provide serverless operational models. Firecracker runs workloads in lightweight virtual machines, called microVMs, which combine the security and isolation properties provided by hardware virtualization technology with the speed and flexibility of containers.
Purpose-built OS for Kubernetes, fully managed by Kubernetes. k3OS is a Linux distribution designed to remove as much OS maintenance as possible in a Kubernetes cluster. It is specifically designed to only have what is needed to run k3s. Additionally the OS is designed to be managed by kubectl once a cluster is bootstrapped. Nodes only need to join a cluster and then all aspects of the OS can be managed from Kubernetes. Both k3OS and k3s upgrades are handled by the k3OS operator.
e-comBox est une plateforme regroupant des applications métiers essentielles pour développer les compétences numériques des élèves et des étudiants.
kube-image-keeper (a.k.a. kuik) is a container image caching system designed for Kubernetes. It ensures the availability of your favorite container images by keeping a local copy within your k8s cluster.
Just-in-time Nodes for Any Kubernetes Cluster.
Karpenter simplifies Kubernetes infrastructure with the right nodes at the right time.
Karpenter automatically launches just the right compute resources to handle your cluster's applications. It is designed to let you take full advantage of the cloud with fast and simple compute provisioning for Kubernetes clusters.
Related contents:
- What Karpenter v1.0.0 means for Kubernetes autoscaling @ Cloud Native.
- Tranches de Tech 13 - De la tech et du coeur :fr:.
- Façonnez Votre Cloud avec Karpenter : Les Secrets du Maître Charpentier du Numérique @ GDG France's YouTube :fr:.
- Implementing Karpenter In EKS (From Start To Finish) @ Cloud Native Deep Dive.
- Scaling Nodes From Zero - The Bottleneck @ Labyrinth Labs.
- Understanding Karpenter architecture for Kubernetes autoscaling @ Datadog.
- Key metrics for monitoring Karpenter @ Datadog.
- Karpenter + Cluster API @ A cup of coffee.
- Networking Is Still Hard @ AWS Fundamentals.
- Enabling Karpenter on EKS with Terraform: What It Is, Why It's Worth It, and How to Set It Up @ Ajinkya's dev.to.
Open Interoperable HCI with Harvester. Harvester is the next generation of hyperconverged infrastructure designed for the modern cloud-native environment. Completely open-source and free to use, Harvester easily integrates into Rancher helping operators consolidate workloads and reduce the complexity of their infrastructure.
With JupyterHub you can create a multi-user Hub that spawns, manages, and proxies multiple instances of the single-user Jupyter notebook server. Project Jupyter created JupyterHub to support many users. The Hub can offer notebook servers to a class of students, a corporate data science workgroup, a scientific research project, or a high-performance computing group. JupyterHub brings the power of notebooks to groups of users. It gives users access to computational environments and resources without burdening the users with installation and maintenance tasks. Users - including students, researchers, and data scientists - can get their work done in their own workspaces on shared resources which can be managed efficiently by system administrators. JupyterHub @ GitHub
Expose your services easily and securely.
This project comes as a pre-built docker image that enables you to easily forward to your websites running at home or otherwise, including free SSL, without having to know too much about Nginx or Letsencrypt.
Related contents:
- NPM Mobile Manager @ GitHub.
- HomeLab SSL certificates for FREE with minimal effort @ Perkelator's YouTube.
- Self-Hosted SSL Simplified: Nginx Proxy Manager @ Lawrence Systems' YouTube.
- The First Services I Always Spin Up in Any Home Lab @ VirtualizationHowto.
- Nginx Proxy Manager - Le reverse proxy que même ma grand-mère pourrait configurer @ Korben :fr:.
Pluto is a utility to help users find deprecated Kubernetes apiVersions in their code repositories and their helm releases.
Open Source Marketplace For Kubernetes. arkade is how developers install the latest versions of their favourite tools and Kubernetes apps. With arkade get, you'll have kubectl, kind, terraform, and jq on your machine faster than you can type apt-get install/brew update.
Easily manage Linux Chroot(s) and Containers with Atoms. Atoms was created to solve the lack of a GUI to create, manage and use chroot environments. Although there is support for Distrobox, Atoms does not aim to offer a fine integration with Podman as its purpose is only to allow the user to open a shell in a new environment, be it chroot or container.
A CLI to create code sandboxes with automatic HTTPS and long running processes in your cloud provider account.
disposable webmail. Inbucket is an email testing application; it will accept messages for any email address and make them available to view via a web interface.
Trivy (pronunciation) is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more.
- Trivy @ GitHub.
- Trivy Documentation.
- Integrer la sécurité dés le départ avec Trivy @ Culture et Outils DevSecOps :fr:.
- Trivy Is Noise by Default, Here’s the Seven-Rule Filter That Catches Real Risk @ DevOpsDynamo's Medium.
- Blueprinting Security in CI/CD: Building Trust Through Open Source @ CD Foundation.
- 20 Days Later: Trivy Compromise, Act II @ Boost Security Labs.
- Trivy supply chain compromise: What Docker Hub users should know @ Docker blog.
- Trivy compromis une seconde fois : la release v0.69.4 était empoisonnée @ DevSecOps :fr:.
- When Security Scans Break the Brain: Solving Trivy’s etcd Exhaustion Problem @ aqua.
Instant WordPress Sites for Everyone. Spin up a WordPress environment in less than a second Join 6,200+ members to speed up your WordPress development workflow.
The world's lightest, fastest service mesh. A different kind of service mesh. Ultra light, ultra simple, ultra powerful. Linkerd adds security, observability, and reliability to Kubernetes, without the complexity. CNCF-hosted and 100% open source.
A community Linux distribution designed for container workloads, with high security and low maintenance. Flatcar Container Linux is designed from the ground up for running container workloads. It fully embraces the container paradigm, including only what is required to run containers.
Update monitor & manager for applications using the Omaha protocol, optimized for Flatcar Container Linux. Nebraska is an update manager for Flatcar Container Linux. Nebraska offers an easy way to monitor and manage the rollout of updates to applications that use the Omaha protocol, with special functionality for Flatcar Container Linux updates.
Apache Kafka on Kubernetes in a few minutes. Strimzi provides a way to run an Apache Kafka cluster on Kubernetes in various deployment configurations.
ORAS works similarly to docker. It allows you to push (upload) and pull (download) things to and from an OCI Registry, and also handles login (authentication) and token flow (authorization). What ORAS does differently is shift the focus from container images to other types of artifacts.
Related contents:
Cloud native distributed block storage for Kubernetes. Longhorn is a distributed block storage system for Kubernetes. Longhorn is cloud native storage built using Kubernetes and container primitives.
Related contents:
- The surreal joy of having an overprovisioned homelab @ Xe.
- Backup and Restore Kubernetes Volumes with Longhorn and MinIO @ Asim Mirza's Medium.
- Longhorn : stockage Kubernetes répliqué et simplifié @ DevSecOps :fr:.
- Mon homelab, ou comment j'essaie de rester dans la game @ Cyril Beaufrere's LinkedIn :fr:.
Detect security threats in real time
Falco is a cloud-native security tool designed for Linux systems. It employs custom rules on kernel events, which are enriched with container and Kubernetes metadata, to provide real-time alerts. Falco helps you gain visibility into abnormal behavior, potential security threats, and compliance violations, contributing to comprehensive runtime security.
Related contents:
- k8s-custom-detections @ GitHub.
- Réagir à temps aux menaces dans Kubernetes avec Falco (Rachid Zarouali, Thomas Labarussias) @ Voxxed Days Luxembourg's YouTube :fr:.
- Extending Falco for Bitcoin @ sysdig.
- Falcoctl: Artifact Management for Falco @ Cloud Native Computing Foundation.
- How Falco and Stratoshark close the gap between open source runtime detection and deep forensic analysis @ sysdig.
- Blueprinting Security in CI/CD: Building Trust Through Open Source @ CD Foundation.
- Episode #540 consacré à Falco @ NoLimitSecu :fr:.
Podman is a daemonless container engine for developing, managing, and running OCI Containers on your Linux System. Containers can either be run as root or in rootless mode. Simply put: alias docker=podman.
Related contents:
- Replacing Kubernetes with systemd @ Yaakov's Blog.
- Auto-updating podman containers with systemd @ fedora Magazine.
- Connecter un conteneur Podman à Open vSwitch @ Nicolas Massé :fr:.
- Why I Ditched Docker for Podman (And You Should Too) @ Codesmash.
- Automatic container updates with Podman quadlets @ Major Hayden.
- podman : Utiliser podman comme docker avec les mêmes commandes @ Linuxtricks.fr :fr:.
- The Docker Alternative Most People DON'T KNOW @ CodeHead's YouTube.
- Grand saut dans le déploiement sur site d'un serveur LLM à moindres privilèges @ Synacktiv :fr:.
Confidential Containers is an open source community working to enable cloud native confidential computing by leveraging Trusted Execution Environments to protect containers and data.
🐶 Kubernetes CLI To Manage Your Clusters In Style!
K9s is a terminal based UI to interact with your Kubernetes clusters. The aim of this project is to make it easier to navigate, observe and manage your deployed applications in the wild. K9s continually watches Kubernetes for changes and offers subsequent commands to interact with your observed resources.
The Machine Learning Toolkit for Kubernetes The Kubeflow project is dedicated to making deployments of machine learning (ML) workflows on Kubernetes simple, portable and scalable. Our goal is not to recreate other services, but to provide a straightforward way to deploy best-of-breed open-source systems for ML to diverse infrastructures. Anywhere you are running Kubernetes, you should be able to run Kubeflow.
Related contents:
The smallest PaaS implementation you've ever seen. An open source PAAS alternative to Heroku. Dokku helps you build and manage the lifecycle of applications from building to scaling.
Related contents:
Run Mac OS X in Docker with near-native performance. X11 Forwarding, iMessage security research, CI/CD for OS X, iPhone USB working, macOS in a Docker container.
Use any linux distribution inside your terminal. Enable both backward and forward compatibility with software and freedom to use whatever distribution you’re more comfortable with. Distrobox uses podman or docker to create containers using the Linux distribution of your choice. The created container will be tightly integrated with the host, allowing sharing of the HOME directory of the user, external storage, external USB devices and graphical apps (X11/Wayland), and audio.
Cloonix is an AGPLv3 software that constitute a tool to create networks of kvm virtual machines or crun containers. It provides a graphical interactive canvas showing the topology for your network, cloonix is a virtualisation hypervisor.