devops
Select the tools you want to include in your docker-compose.yaml
DockerComposeMaker (DCM) is a self-hostable website to help you pick and create a docker-compose.yml file for your home server. Discover new containers, discover and share a config in a couple of clicks!
Related contents:
GitHub Actions Importer helps you plan and automate the migration of Azure DevOps, Bamboo, Bitbucket, CircleCI, GitLab, Jenkins, and Travis CI pipelines to GitHub Actions.
Automatically manage Cloudflare DNS from Docker container labels. Simplifies DNS for Docker/Compose. Inspired by External-DNS but built specifically for docker environments and homelabs.
Sherpa-DNS is a python application designed to create and manage DNS records for services defined in docker compose stacks or stand-alone docker containers via labels. It draws inspiration from the Kubernetes External-DNS project but is specifically tailored for docker environments.
Python app implementing a read-through cache for Bitwarden Secrets Manager (BWS) secrets.
When a secret is queried, not only is the secret cached in memory, but a mapping between ID and key is also cached. This allows lookup by either ID or key, as shown below.
Production-Grade Container Scheduling and Management.
Kubernetes, also known as K8s, is an open source system for automating deployment, scaling, and management of containerized applications.
Related contents:
- How Kubernetes Works Internally? @ System Design Codex.
- Minimum vital pour survivre sur un sujet Kubernetes @ Téotime Pacreau :fr:.
- Formation Kubernetes : Admin & Développeurs @ DevSecOps :fr:.
- How To Run Kubernetes Commands in Go: Steps and Best Practices @ The New Stack.
- Kubernetes Is Powerful, But Not Secure (at least not by default) @ Tigera.
- Docker to Kubernetes: The 30-Day Migration Path Every Developer Should Know @ Teamcamp's dev.to.
- Beyond the surface - Exploring attacker persistence strategies in Kubernetes @ Raesene's Ramblings.
- The Myths (and Costs) of Running Node.js on Kubernetes @ Platformatic.
- k8s-1m: fully functional Kubernetes cluster with 1 million active nodes.
- Investigating and fixing "StopPodSandbox from runtime service failed" Kubelet errors @ Marcus Noble.
- Managing Kubernetes Workloads Using the App of Apps Pattern in ArgoCD-2 @ CNCF.
- How to use AI to make Kubernetes monitoring smarter @ Danlio's Medium.
- Why Kube-State-Metrics Matters for Kubernetes Observability @ weeklycloud's Medium.
- 64GB RAM Kubernetes Cluster for €39/month — Part 1: Proxmox & LVM & NAT @ TrackIT Blog.
- A Practical Guide to Running NVIDIA GPUs on Kubernetes @ jimangel.io.
- Preventing Kubernetes from Pulling the Pause Image from the Internet @ Kyle Cascade.
- Ten Common Kubernetes Misconfigurations That Cause Outages (And What You Can Do About It) @ Cloud Native Now.
- Wrangling Kubernetes contexts @ natkr's ramblings.
- In-place Pod resizing in Kubernetes: How it works and how to use it @ Palark's Blog.
- Kubernetes Metrics: Types, Tools, & Monitoring Guide @ spacelift.
- How to Troubleshoot Common Kubernetes Errors (2025 Guide) @ Spacelift.
- Kubernetes Optimization using In-Place Pod Resizing and Zone-Aware Routing @ halodoc.
- What's Wrong with Kubernetes Today @ DevZero.
- How I think about Kubernetes @ Georgi Arnaudov.
- A Brief Deep-Dive into Attacking and Defending Kubernetes @ Heilan Cyber.
- Le premier intérêt de Kubernetes n'est pas le scaling @ mcorbien.fr :fr:.
- Kubernetes Rolling Updates for Reliable Deployments @ spacelift.
- Kubernetes 1.35 features that change Day 2 operations @ The New Stack.
- How to Setup Kubectl Aliases with Kuberc (Native Method) @ Devopscube.
- Scaling Nodes From Zero - The Bottleneck @ Labyrinth Labs.
- Learn Kubernetes – Full Handbook for Developers, Startups, and Businesses @ freeCodeCamp.
- Managing Kubernetes Secrets with Mozilla SOPS and AGE @ Cyril Baah's Medium.
- Registry mirror authentication with Kubernetes secrets @ CNCF.
- When Kubernetes Is the Wrong Default @ DevOps Daily.
- Why Kubernetes Reliability Is Now a Machine-Speed Problem @ Cloud Native Now.
- The Invisible Rewrite: Modernizing the Kubernetes Image Promoter @ Kubernetes Blog.
- When Kubernetes restarts your pod — And when it doesn’t @ CNCF.
- Why is your Kubernetes cluster adding nodes when the dashboards look fine? @ The New Stack.
- Kubernetes : la solution face aux promesses non tenues du cloud ? @ AXOPEN's ausha :fr:.
- Kubernetes Still Feels Weird? What i wish i knew sooner @ AWS in Plain English's Medium.
- Kubernetes Strategic Merge Patch @ ITNEXT.
- Kubernetes forensics 1/3 : what the container ? @ Synacktiv :fr:.
- Fleet-Scale Kubernetes: An Operating Model for Homogeneous Clusters with Decoupled Capacity @ lucy.sh.
- From Kubernetes Dev Setup to Production: What Actually Changes @ Georg Schwarz.
- How to Encrypt Kubernetes Traffic with cert-manager, Let's Encrypt, and Internal TLS @ freeCodeCamp.
- Comment migrer ses applications de VMs vers Kubernetes ? Bonnes pratiques et outils indispensables ! @ AXOPEN's ausha :fr:.
- Les données dans Kubernetes : comment bien les gérer et les protéger ? @ AXOPEN's YouTube :fr:.
- Where Did My Pod Go? A Deep Dive into K8s Scheduling @ DevOps.dev's Medium.
- Kubernetes in the Age of AI @ O'Reilly Radar.
- What job interviews taught me about Kubernetes @ ~~p.
- Running AI Agents Safely Inside Kubernetes @ KodeKloud.
- How to Become Ridiculously Good at Kubernetes @ F8010's Medium.
- The feedback loops behind Kubernetes @ Planetscale.
- Multi-Cluster Kubernetes Explained @ Cilium.
- Why I haven’t run my databases on Kubernetes @ Percona.
- Operating Kubernetes at scale: a few stories from running Amazon EKS @ The New Stack.
- Kubernetes Is Powerful. It’s Also Way Too Complex for Most Teams That Use It. @ Harsh Kumar's Medium.
- Kubernetes made deploying easy. Nobody warned you about the databases @ TheNewStack.
- Your Pod Died of “Out of Ephemeral Storage” but the Disk Is Half Empty!! @ ITNext's Medium.
- A Green Kubernetes Deployment Does Not Mean a Healthy Application @ Cloud Native Now.
- How Kubernetes probes work @ ngrok.
A modern web application for viewing and interacting with Docker container ports. Built with TypeScript, React, and Material-UI, it provides a user-friendly interface to manage and access your Docker containers.
Build better APIs faster. Open source API management platform.
Redefined API management for developers. Quickly add API keys, rate limiting, and usage analytics to your API at any scale.
Free and open source PaaS framework for building clouds.
Transform a set of bare metal servers into an intelligent system with a simple REST API for spawning Kubernetes clusters, Databases-as-a-Service, virtual machines, load balancers, HTTP caching services, and other services with ease.
Stateless cluster local OCI registry mirror.
Speed up container pulls and minimize downtime with a stateless peer-to-peer OCI registry mirror for efficient image distribution.
Related contents:
CLI tool to easily migrate Kubernetes persistent volumes.
pv-migrate is a CLI tool/kubectl plugin to easily migrate the contents of one Kubernetes PersistentVolumeClaim to another.
Extensible platform for infrastructure management.
Shifting infrastructure management to a friendlier place. Clutch provides everything you need to improve your developers' experience and operational capabilities. It comes with several out-of-the-box features for managing cloud-native infrastructure, but is easily configured or extended to interact with whatever you run, wherever you run it.
Local CI. Sign off on your own work.
A GitHub CLI extension for local CI. Run your tests on your own machine and sign off when they pass.
Remote CI runners are fantastic for repeatable builds, comprehensive test suites, and parallelized execution. But many apps don't need all that. Maybe yours doesn't either.
The platform engineering toolkit for Kubernetes.
Koreo is a Platform Engineering toolkit focused on making the Platform Engineer's life easier so that they can focus on making product developers lives' easier.
Koreo is a new approach to Kubernetes configuration management and resource orchestration empowering developers through programmable workflows and structured data
Fix Inventory is an open-source cloud asset inventory tool for infrastructure and security engineers.
Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.
Fix Inventory enables a broad set of exploration and automation scenarios. Its foundation is a graph-based data model, which exposes resource metadata and dependency relationships between your service's assets.
A powerful CLI allows you to search, explore, and manage your cloud resources.
Related contents:
The fast lane for your PRs.
Trunk is a developer experience (DevEx) platform that enables you to ship code quickly while maintaining the necessary guardrails for excellent eng teams. Use Trunk to check, test, merge, and monitor your code.
Zuul is a gateway service that provides dynamic routing, monitoring, resiliency, security, and more.
Related contents:
The easiest way to distribute enterprise software.
🧊 The next generation Package Manager for Kubernetes 📦 Featuring a GUI and a CLI. Glasskube packages are dependency aware, GitOps ready and can get automatic updates via a central public package repository.
Nelm is a Helm 3 alternative. It is a Kubernetes deployment tool that manages Helm Charts and deploys them to Kubernetes.
Monitor cross-zone network traffic in Kubernetes.
KUBErnetes cross-ZONe NETwork monitoring with Prometheus for Cilium-based clusters (in Legacy host routing mode).
Related contents:
A lightweight, open-source web interface to bulk manage Proxmox VM and container tags with backup and restore functionality.
ProxTagger provides a simple yet powerful web interface to manage tags for your Proxmox VMs and containers. It simplifies tag management with individual and bulk operations, while also offering backup and restore functionality to safeguard your tagging system which is currently not backed up by Promox Backup Server. The interface uses dynamic tables for easy sorting, pagination, and advanced searching.
The ultimate ssh powered services for developers.
Our mission is to enable developers with services that help them rapidly prototype on the web. We want to make it easier than ever for developers to share their projects with the world.
Keep builds green with a highly customizable merge queue
Deploy more PRs while cutting CI runtimes. Easily merge changes into a massive monorepo, and run custom CI validations without breaking builds.
Related contents:
Cedar is a language for defining permissions as policies, and a specification for evaluating those policies. Use Cedar to define who is authorized to do what within your application. Cedar is open source.
Related contents:
The Sysinternals ADO Task extension brings the power of Sysinternals tools directly into your Azure DevOps pipelines, empowering you to troubleshoot complex build and release issues with greater efficiency.
Related contents:
GitLab Runner is the open source project that is used to run your CI/CD jobs and send the results back to GitLab.
Related contents:
Monitor Docker Logs and send Notifications.
LoggiFly - A Lightweight Tool that monitors Docker Container Logs for predefined keywords 🔑 or regex patterns 🔍 and sends Notifications. Never miss critical container events again - Get instant alerts for security breaches, system errors, or custom patterns through your favorite notification channels. 🚀
Run a cloud exit assessment on your infrastructure to gain insights into the challenges and constraints of a potential cloud exit.
cloudexit is an open-source tool that empowers cloud engineers to conduct comprehensive cloud exit assessments. It helps identify and evaluate the risks associated with their cloud environment while providing actionable insights into the challenges and constraints of transitioning away from their current cloud provider. By leveraging EscapeCloud Community Edition, organizations can better prepare for a potential cloud exit, ensuring a smoother and more informed decision-making process.
An open-source incident management tool supporting multi-channel alerting, customizable messages, and on-call integrations.
Build Analyzer. Analyzer for Rspack & webpack.
Visualize the building process.
Rsdoctor is a build analyzer tailored for the Rspack ecosystem and fully compatible with the webpack ecosystem.
Rsdoctor is committed to being a one-stop, intelligent build analyzer that makes the build process transparent, predictable, and optimizable through visualization and smart analysis, helping development teams precisely identify bottlenecks, optimize performance, and improve engineering quality.
JobSet: a k8s native API for distributed ML training and HPC workloads
JobSet is a Kubernetes-native API for managing a group of k8s Jobs as a unit. It aims to offer a unified API for deploying HPC (e.g., MPI) and AI/ML training workloads (PyTorch, Jax, Tensorflow etc.) on Kubernetes.
Related contents:
Runbook Automation.
Enable Self-Service Operations: Give specific users access to your existing tools, services, and scripts. Rundeck by PagerDuty is an open source runbook automation service with a web console, command line tools and a WebAPI. It lets you easily standardize tasks to improve operational quality by deploying automation across a set of nodes.
Make repository management simple.
Handle thousands of packages with lightning-fast performance and reliable uptime. Flexible plans start free, with no credit card required.
GitHub Actions. Twice as fast. Half the cost.
Speed up your GitHub Actions with a one-line code change, by running them on high-performance gaming CPUs instead of GitHub's older server hardware.
Related contents:
Bringing Agentic AI to cloud native.
An open-source framework for DevOps and platform engineers to run AI agents in Kubernetes, automating complex operations and troubleshooting tasks.
Related contents:
A curated list of amazingly awesome open-source sysadmin resources.
Wait for anything! A lightweight tool to wait for services to be ready.
Wait4X allows you to wait for a port or a service to enter the requested state, with a customizable timeout and interval time.
A scale-out production-ready vendor-neutral OCI-native container image/artifact registry (purely based on OCI Distribution Specification)
Deploy your projects directly from your local computer to your production server easily.
Airo helps you deploying containers to your self-hosted server, without worrying about configuring pipelines, serverless services or different platforms. Just your self-hosted servers.
Warewulf is a stateless and diskless container operating system provisioning system for large clusters of bare metal and/or virtual systems.
Opsy - Your AI-Powered SRE Colleague.
Opsy is an intelligent command-line assistant designed for Site Reliability Engineers (SREs), DevOps professionals, and platform engineers. It uses AI to help you navigate operational challenges, troubleshoot issues, and automate routine workflows. Opsy integrates with your existing tools and provides contextual assistance to make your daily operations more efficient.
Introducing the IaC Package Manager for Kubernetes.
yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer.
The philosophy behind yoke is that Kubernetes packages should be described via code. Programming environments have control flow, test frameworks, static typing, documentation, error management, and versioning. They are ideal for building contracts and enforcing them.
Related contents:
Postgre SQL Operator for Kubernetes. Run PostgreSQL. The Kubernetes way.
CloudNativePG is the Kubernetes operator that covers the full lifecycle of a highly available PostgreSQL database cluster with a primary/standby architecture, using native streaming replication.
Related contents:
- Plongez dans le monde de CloudNativePG #4 - Les sauvegardes ! @ Dalibo :fr:.
- Making Postgres scale to zero with CNPG @ xata.
- Kubernetes Finally Solves Its Biggest Problem: Managing Databases @ The New Stack. https://medium.com/@nejdetkadir/how-i-built-my-own-home-lab-a-single-node-kubernetes-platform-34bdf6a08a26
A Bloat Aware Filesystem for Container Debloating.
BLAFS is a bloat-aware filesystem for container debloating. The design principles of BLAFS are effective, efficient, and easy to use. It detects the files used by the container, and then debloats the container by removing the unused files. The debloated containers are still functional and can run the same workload as the original containers, but with a much smaller size and faster deployment.
Trust Your Deployments.
Easily handle Kubernetes deployments of any size, complexity, and across various environments using Kluctl. The missing glue to put together large Kubernetes deployments, composed of multiple smaller parts (Helm/Kustomize/...) in a manageable and unified way.
Related contents:
Manage your GitHub Actions from Terminal with great UI 🧪
GAMA is a powerful terminal-based user interface tool designed to streamline the management of GitHub Actions workflows. It allows developers to list, trigger, and manage workflows with ease directly from the terminal.
Continuous Integration & Delivery.
Semaphore CI/CD helps product teams ship software faster, with quality and security. Semaphore is an open source CI/CD platform. Self-host Semaphore on your own servers or on a cloud provider.
Related contents:
- Semaphore Goes Open Source: A New Dawn for DevOps Professionals @ DevOps.
- Best Home Lab Automation Tool: Semaphore UI @ VirtualizationHowto's YouTube.
- What Is Terraform GUI? Top 5 Visual Tools Compared @ Spacelift.
- CI/CD via agent tools: Skills, CLIs, MCP, and more with Semaphore @ Bret Fisher's YouTube.
ℹ️ This repo contains questions and exercises on various technical topics, sometimes related to DevOps and SRE.
Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization. DevOps Interview Questions
MetalLB is a load-balancer implementation for bare metal Kubernetes clusters, using standard routing protocols.
Related contents:
ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.
Configure external DNS servers (AWS Route53, Google CloudDNS and others) for Kubernetes Ingresses and Services.
Related contents:
The AI-First Operations Platform. Transform Your Operations.
Reduce business risk and build operational resilience on the AI Operations Platform.
Related contents:
GitOps is Continuous Deployment for cloud native applications.
This site aggregates the essence of GitOps to help clear up the confusion about the topic.
Related contents:
Power of Kubernetes, Simplicity of Heroku. Making Kubernetes as easy as Heroku
Canine is a Kubernetes platform that makes it easy to deploy and manage your applications.
Open Source, Multi Cloud, Analytics, IaC, more. Provision. Query. Secure.
Query, provision and operate Cloud and SaaS resources and APIs using an extensible SQL based framework. Deploy, manage and query cloud resources and interact with APIs using SQL.
Related content:
Virtual Kubernetes and Multi-Tenancy.
Create fully functional virtual Kubernetes clusters - Each vcluster runs inside a namespace of the underlying k8s cluster. It's cheaper than creating separate full-blown clusters and it offers better multi-tenancy and isolation than regular namespaces.
Virtual clusters are fully functional Kubernetes clusters nested inside a physical host cluster providing better isolation and flexibility to support multi-tenancy. Multiple teams can operate independently within the same physical infrastructure while minimizing conflicts, maximizing autonomy, and reducing costs.
Related contents:
Declarative GitOps CD for Kubernetes. Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.
Related contents:
- How to Build a Multi-Tenancy Internal Developer Platform with GitOps and vCluster @ ITNEXT's Medium.
- Unleashing the Power of ArgoCD by Streamlining Kubernetes Deployments @ sitepoint.
- Using ArgoCD ApplicationSet to deploy to multiple clusters @ ITNEXT's Medium.
- Top 30 Argo CD Anti-Patterns to Avoid When Adopting Gitops @ Container Hub's Medium.
- How Engineers are Automating More with Less: Trends in DevOps Tooling @ DevOps.
- Harnessing GitOps on Linux for Seamless, Git-First Infrastructure Management @ Linux Journal.
- Managing Kubernetes Workloads Using the App of Apps Pattern in ArgoCD-2 @ CNCF.
- Anatomy of a Pull Request Generator @ Codefresh.
- Manage Multi-Cluster Deployments with ArgoCD @ DigitalOcean.
- Behind the scenes: Designing Argo CD in Octopus @ Octopus Deploy.
- ArgoCD diffs at scale @ monday engineering.
- How to scale GitOps in the enterprise: From single cluster to fleet management @ Platform Engineering.
- Argo CD 3.3 Brings Safer GitOps Deletions and Smoother Day‑to‑Day Operations @ InfoQ.
- Introduction to ArgoCD: Getting Started with GitOps @ DevOps Daily.
- How to Implement GitOps on Kubernetes Using Argo CD @ freeCodeCamp.
- GitOps policy-as-code: Securing Kubernetes with Argo CD and Kyverno @ CNCF.
- Security Flaw in Argo CD Can Let Attackers Take Over Kubernetes Clusters @ Cloud Native Now.
Power tools for kubectl. Faster way to switch between clusters and namespaces in kubectl.
kubectx is a tool to switch between contexts (clusters) on kubectl faster. kubens is a tool to switch between Kubernetes namespaces (and configure them for kubectl) easily.
Related contents:
Kubernetes native configuration management.
Kustomize introduces a template-free way to customize application configuration that simplifies the use of off-the-shelf applications. Now, built into kubectl as apply -k.
Related contents:
Automatically scale the capacity of your Memorystore Cluster instances based on their utilization.
The Cloud Memorystore Cluster Autoscaler is a companion tool that allows you to automatically increase or reduce the number of nodes/shards in one or more Memorystore Cluster instances, based on their utilization.
Related contents:
Deploy Apps on any Server. The quick way to deploy your applications.
Build, run and monitor your apps on any server from a single, easy-to-use UI. QuickStack is a self-hosted PaaS solution designed to simplify the management of your applications on one or more virtual private servers (VPS).