docker
e-comBox est une plateforme regroupant des applications métiers essentielles pour développer les compétences numériques des élèves et des étudiants.
Expose your services easily and securely.
This project comes as a pre-built docker image that enables you to easily forward to your websites running at home or otherwise, including free SSL, without having to know too much about Nginx or Letsencrypt.
Related contents:
- NPM Mobile Manager @ GitHub.
- HomeLab SSL certificates for FREE with minimal effort @ Perkelator's YouTube.
- Self-Hosted SSL Simplified: Nginx Proxy Manager @ Lawrence Systems' YouTube.
- The First Services I Always Spin Up in Any Home Lab @ VirtualizationHowto.
- Nginx Proxy Manager - Le reverse proxy que même ma grand-mère pourrait configurer @ Korben :fr:.
Findable, Accessible, Interoperable and Reusable Data. A complete open-source solution for your open and private data needs. French only for the time being, internationalization coming soon.
disposable webmail. Inbucket is an email testing application; it will accept messages for any email address and make them available to view via a web interface.
Trivy (pronunciation) is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more.
- Trivy @ GitHub.
- Trivy Documentation.
- Integrer la sécurité dés le départ avec Trivy @ Culture et Outils DevSecOps :fr:.
- Trivy Is Noise by Default, Here’s the Seven-Rule Filter That Catches Real Risk @ DevOpsDynamo's Medium.
- Blueprinting Security in CI/CD: Building Trust Through Open Source @ CD Foundation.
- 20 Days Later: Trivy Compromise, Act II @ Boost Security Labs.
- Trivy supply chain compromise: What Docker Hub users should know @ Docker blog.
- Trivy compromis une seconde fois : la release v0.69.4 était empoisonnée @ DevSecOps :fr:.
- When Security Scans Break the Brain: Solving Trivy’s etcd Exhaustion Problem @ aqua.
Server for Joplin note-taking app.
The lazier way to manage everything docker A simple terminal UI for both docker and docker-compose, written in Go with the gocui library.
Related contents:
Pacemaker is an advanced, scalable high-availability cluster resource manager. It supports "N-node" clusters with significant capabilities for managing resources and dependencies. It will run scripts at initialization, when machines go up or down, when related resources fail and can be configured to periodically check resource health.
The PHP deployment tool with support for popular frameworks out of the box.
A community Linux distribution designed for container workloads, with high security and low maintenance. Flatcar Container Linux is designed from the ground up for running container workloads. It fully embraces the container paradigm, including only what is required to run containers.
Update monitor & manager for applications using the Omaha protocol, optimized for Flatcar Container Linux. Nebraska is an update manager for Flatcar Container Linux. Nebraska offers an easy way to monitor and manage the rollout of updates to applications that use the Omaha protocol, with special functionality for Flatcar Container Linux updates.
ORAS works similarly to docker. It allows you to push (upload) and pull (download) things to and from an OCI Registry, and also handles login (authentication) and token flow (authorization). What ORAS does differently is shift the focus from container images to other types of artifacts.
Related contents:
Podman is a daemonless container engine for developing, managing, and running OCI Containers on your Linux System. Containers can either be run as root or in rootless mode. Simply put: alias docker=podman.
Related contents:
- Replacing Kubernetes with systemd @ Yaakov's Blog.
- Auto-updating podman containers with systemd @ fedora Magazine.
- Connecter un conteneur Podman à Open vSwitch @ Nicolas Massé :fr:.
- Why I Ditched Docker for Podman (And You Should Too) @ Codesmash.
- Automatic container updates with Podman quadlets @ Major Hayden.
- podman : Utiliser podman comme docker avec les mêmes commandes @ Linuxtricks.fr :fr:.
- The Docker Alternative Most People DON'T KNOW @ CodeHead's YouTube.
- Grand saut dans le déploiement sur site d'un serveur LLM à moindres privilèges @ Synacktiv :fr:.
Confidential Containers is an open source community working to enable cloud native confidential computing by leveraging Trusted Execution Environments to protect containers and data.
The smallest PaaS implementation you've ever seen. An open source PAAS alternative to Heroku. Dokku helps you build and manage the lifecycle of applications from building to scaling.
Related contents:
A collection of themes/skins for your favorite apps! theme.park contains 50 themed applications, with css addons on certain themes. Installation methods include custom docker mods for linuxserver.io containers, custom scripts for select Hotio containers and multiple examples of subfiltering using webservers like Nginx, Apache, Caddy and Traefik! There is also a Docker image available for selfhosting the CSS files.
Run Mac OS X in Docker with near-native performance. X11 Forwarding, iMessage security research, CI/CD for OS X, iPhone USB working, macOS in a Docker container.
Use any linux distribution inside your terminal. Enable both backward and forward compatibility with software and freedom to use whatever distribution you’re more comfortable with. Distrobox uses podman or docker to create containers using the Linux distribution of your choice. The created container will be tightly integrated with the host, allowing sharing of the HOME directory of the user, external storage, external USB devices and graphical apps (X11/Wayland), and audio.
A simple, easy-to-use, elegant open-source home cloud system Community-based open source software focused on delivering simple home cloud experience around Docker ecosystem.
yq is a portable command-line YAML, JSON, XML, CSV and properties processor.
a lightweight and portable command-line YAML, JSON and XML processor. yq uses jq like syntax but works with yaml files as well as json, xml, properties, csv and tsv. It doesn't yet support everything jq does - but it does support the most common operations and functions, and more is being added continuously.
yq is written in go - so you can download a dependency free binary for your platform and you are good to go!
Monitor and restart unhealthy docker containers. This functionality was proposed to be included with the addition of HEALTHCHECK, however didn't make the cut.
a collaborative project for the container ecosystem to assemble container-based systems.
Moby is an open-source project created by Docker to enable and accelerate software containerization.
It provides a "Lego set" of toolkit components, the framework for assembling them into custom container-based systems, and a place for all container enthusiasts and professionals to experiment and exchange ideas. Components include container build tools, a container registry, orchestration tools, a runtime and more, and these can be used as building blocks in conjunction with other tools and projects.
This plugin is a small implementation of a fail2ban instance as a middleware plugin for Traefik.
A container-based solution for automating Docker container base image updates.
With watchtower you can update the running version of your containerized app simply by pushing a new image to the Docker Hub or your own image registry. Watchtower will pull down your new image, gracefully shut down your existing container and restart it with the same options that were used when it was deployed initially.
Containerrr's Watchtower fork.
Moby is an open framework created by Docker to assemble specialized container systems without reinventing the wheel. It provides a “lego set” of dozens of standard components and a framework for assembling them into custom platforms. At the core of Moby is a framework to assemble specialized container systems which provides:
Our mission is to be the trusted cloud native repository for Kubernetes. Harbor is an open source registry that secures artifacts with policies and role-based access control, ensures images are scanned and free from vulnerabilities, and signs images as trusted. Harbor, a CNCF Graduated project, delivers compliance, performance, and interoperability to help you consistently and securely manage artifacts across cloud native compute platforms like Kubernetes and Docker.
Related contents:
A job scheduler for Docker containers, configured via container labels.
A docker job scheduler (aka. crontab for docker). Ofelia is a modern and low footprint job scheduler for docker environments, built on Go. Ofelia aims to be a replacement for the old fashioned cron.
The world's most advanced open-source database cluster. Galera Cluster for MySQL is a true Multi-Master Cluster based on synchronous replication. It’s an easy-to-use, high-availability solution, which provides high system up-time, no data loss and scalability for future growth.
A tool for exploring each layer in a docker image. A tool for exploring a docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image.
GlusterFS is a scale-out network-attached storage file system. It has found applications including cloud computing, streaming media services, and content delivery networks. GlusterFS was developed originally by Gluster, Inc. and then by Red Hat, Inc., as a result of Red Hat acquiring Gluster in 2011.
Related contents:
Go binary to change Docker container user/group and file permissions at runtime. fixuid is a Go binary that changes a Docker container's user/group and file permissions that were set at build time to the UID/GID that the container was started with at runtime. Primary use case is in development Docker containers when working with host mounted volumes.
s6 overlay for containers (includes execline, s6-linux-utils & a custom init) s6-overlay is an easy-to-install (just extract a tarball or two!) set of scripts and utilities allowing you to use existing Docker images while using s6 as a pid 1 for your container and process supervisor for your services.
Swarmpit provides nice & clean way to manage your Docker Swarm cluster.
Docker hosts and containers monitoring with Prometheus, Grafana, cAdvisor, NodeExporter and AlertManager. A monitoring solution for Docker hosts and containers with Prometheus, Grafana, cAdvisor, NodeExporter and alerting with AlertManager.
Production-ready fullstack but simple mail server (SMTP, IMAP, LDAP, Antispam, Antivirus, etc.) running inside a container. Only configuration files, no SQL database. Keep it simple and versioned. Easy to deploy and upgrade. Documentation via MkDocs.
complete mail server SMTP + IMAP + POP3 + Antispam + Antivirus Web administration + Web email ...on your server in ~5 minutes
swarm-cronjob creates jobs on a time-based schedule on Swarm with a dedicated service in a distributed manner that configures itself automatically and dynamically through labels and Docker API.
Backup interface for volumes attached to containers.
Bivac allows to backup Container volumes using Restic.
Run OpenShift 3.x locally. Minishift is a tool that helps you run OpenShift locally by running a single-node OpenShift cluster inside a VM. You can try out OpenShift or develop with it, day-to-day, on your local host.
Version control for your database
Robust schema evolution across all your environments. With ease, pleasure, and plain SQL.
A Docker-powered stateless API for PDF files. Gotenberg provides a developer-friendly API to interact with powerful tools like Chromium and LibreOffice for converting numerous document formats (HTML, Markdown, Word, Excel, etc.) into PDF files, and more.
Analyzes resource usage and performance characteristics of running containers. cAdvisor (Container Advisor) provides container users an understanding of the resource usage and performance characteristics of their running containers. It is a running daemon that collects, aggregates, processes, and exports information about running containers. Specifically, for each container it keeps resource isolation parameters, historical resource usage, histograms of complete historical resource usage and network statistics. This data is exported by container and machine-wide.
The Kubernetes IDE The largest and most advanced Kubernetes platform in the world
Mailu, Docker based mail server Mailu is a simple yet full-featured mail server as a set of Docker images. It is free software (both as in free beer and as in free speech), open to suggestions and external contributions. The project aims at providing people with an easily setup, easily maintained and full-featured mail server while not shipping proprietary software nor unrelated features often found in popular groupware.
Traefik is an open-source Edge Router that makes publishing your services a fun and easy experience. It receives requests on behalf of your system and finds out which components are responsible for handling them.
containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision, low-level storage and network attachments, etc..
The package manager for Kubernetes Helm is the best way to find, share, and use software built for Kubernetes. What is Helm?
Helm helps you manage Kubernetes applications — Helm Charts helps you define, install, and upgrade even the most complex Kubernetes application.
Charts are easy to create, version, share, and publish — so start using Helm and stop the copy-and-paste madness.
Production-Grade Container Orchestration. Kubernetes is an open-source system for automating deployment, scaling, and management of containerized applications.
Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.
An easy-to-use, instant-on, native container environment
Authorization service and frontend for Docker registry (v2)
An open platform for distributed applications for developers and sysadmins
A Process Control System. Supervisor is a client/server system that allows its users to monitor and control a number of processes on UNIX-like operating systems.
It shares some of the same goals of programs like launchd, daemontools, and runit. Unlike some of these programs, it is not meant to be run as a substitute for init as “process id 1”. Instead it is meant to be used to control processes related to a project or a customer, and is meant to start like any other program at boot time.