podman
Access your docker socket safely as read-only, rootless and distroless.
What can I do with this? This image will run a proxy to access your docker socket as read-only. The exposed proxy socket is run as 1000:1000, not as root, although the image starts the proxy process as root to interact with the actual docker socket. There is also a TCP endpoint started at 2375 that will also proxy to the actual docker socket if needed.
Docker, Kubernetes, and full Linux desktops for Mac.
A free, open-source native macOS app for Docker & Linux containers, an alternative to OrbStack and Docker Desktop. Universal for Intel and Apple silicon..
Terminal-based Docker image layer inspector .
Interactive Docker image layer inspector with CI-friendly efficiency checks. Single binary; no daemon required when reading saved image archives.
Automatic DNS management for Docker, Kubernetes, and Proxmox VE workloads with multi-provider support.
dnsweaver watches Docker events, Kubernetes resources, and Proxmox VE clusters to automatically create and delete DNS records. Unlike single-provider or single-platform tools, dnsweaver supports split-horizon DNS, multiple DNS providers simultaneously, and works across Docker, Docker Swarm, Kubernetes, and Proxmox VE — or all of them at once.
Related contents:
Orchestrate sandboxed coding agents in TypeScript with sandcastle.run().
A TypeScript library for orchestrating AI coding agents in isolated sandboxes.
Windows pod system for Linux.
Native Linux windows for every Windows app — real icons, real WM_CLASS, pin-to-taskbar. FreeRDP RemoteApp + dockur/windows. Zero config.
CLI tool for inspecting and managing services listening on localhost ports.
I got tired of running lsof -iTCP -sTCP:LISTEN | grep ... every time a port was already taken, then spending another minute figuring out if it was a Docker container or some orphaned dev server from another worktree. So I built sonar.
It shows everything listening on localhost, with Docker container names, Compose projects, resource usage, and clickable URLs. You can kill processes, tail logs, shell into containers, and more — all by port number.
A simple web dashboard for Podman. Single binary, no JavaScript, no external dependencies. Ideal as landing page for your self-hosting setup.
Kubernetes simplified, containerized, and democratized for rootless environments.
Single-node rootless Kubernetes cluster running in a Podman container.
Kubernetes, Docker and Podman Container Management Platform.
Related contents:
Security, visibility, and authorization for AI agents
Leash wraps AI coding agents in containers and monitors their activity. You define policies in Cedar; Leash enforces them instantly.
Authorize and monitor your AI agents with policy enforcement, sandboxed execution, and real-time observability—ensuring they operate safely within your defined boundaries.
Containers and Kubernetes.
The best free and open source tool for developers to work with containers and Kubernetes. Simplify container management, streamline Kubernetes workflows, and transition from local development to production with ease.
Related contents:
Proxy for connecting to Podman rootless containers by domain name.
Makes Firefox the World's First Cloud-Native Dev Browser!
Seriously though, Podfox is a SOCKS5 proxy for accessing Podman's rootless network namespace from the host. Podfox creates a convenient virtual domain hierarchy in the proxy: a <container>.<network>.podman request gets resolved as <container>.dns.podman on <network>'s aardvark-dns server. Firefox can be configured to use it through a PAC policy or an included one-liner extension (TODO: maybe publish to AMO?).
Related contents:
Migrate from Docker to Podman.
fly-to-podman is a small bash script that helps you migrate from Docker to Podman. It will migrate your Docker containers, images, and volumes to Podman, as well as keep your container data and configurations (mounts, ports, etc.) intact.
TUI for journalctl, file system logs, as well Docker and Podman containers for quick viewing and filtering with fuzzy find, regex support (like fzf and grep) and coloring the output, written in Go with the gocui library.
Terminal user interface for journalctl, file system logs, as well Docker and Podman containers for quick viewing and filtering with fuzzy find, regex support (like fzf and grep) and coloring the output, written in Go with the awesome-gocui (fork gocui) library.
CLI tool to automate Podman image updates. Selective updates, optional notifications, and image pruning when done.
Internal Tools Deployment Platform. Webapp Management for Internal Tools.
Platform for securely developing and deploying web tools across a team. Application server for containerized webapps. Create and share webapps for CLI applications.
Clace combines the functionality of a reverse proxy, a hypermedia based micro-framework and a container orchestrator (using Docker or Podman) in a single lightweight binary. After starting the Clace server and ensuring Docker or Podman is running, new apps can be installed in one command from GitHub source repo. Clace builds the image and starts the container lazily, on the first API call. Clace can also automatically build simple form based UI for backend APIs.
Your entire server infrastructure at your fingertips. Manage all your servers from your local desktop. No remote setup required.
XPipe is a new type of shell connection hub and remote file manager that allows you to access your entire server infrastructure from your local machine. It works on top of your installed command-line programs and does not require any setup on your remote systems. So if you normally use CLI tools like ssh, docker, kubectl, etc. to connect to your servers, you can just use XPipe on top of that.
An open specification for enriching containers with development specific content and settings.
A Development Container (or Dev Container for short) allows you to use a container as a full-featured development environment. It can be used to run an application, to separate tools, libraries, or runtimes needed for working with a codebase, and to aid in continuous integration and testing. Dev containers can be run locally or remotely, in a private or public cloud.
Related contents:
Cockpit is an interactive server admin interface. It is easy to use and very lightweight. Cockpit interacts directly with the operating system from a real Linux session in a browser.
Related contents:
Easily manage Linux Chroot(s) and Containers with Atoms. Atoms was created to solve the lack of a GUI to create, manage and use chroot environments. Although there is support for Distrobox, Atoms does not aim to offer a fine integration with Podman as its purpose is only to allow the user to open a shell in a new environment, be it chroot or container.
Podman is a daemonless container engine for developing, managing, and running OCI Containers on your Linux System. Containers can either be run as root or in rootless mode. Simply put: alias docker=podman.
Related contents:
- Replacing Kubernetes with systemd @ Yaakov's Blog.
- Auto-updating podman containers with systemd @ fedora Magazine.
- Connecter un conteneur Podman à Open vSwitch @ Nicolas Massé :fr:.
- Why I Ditched Docker for Podman (And You Should Too) @ Codesmash.
- Automatic container updates with Podman quadlets @ Major Hayden.
- podman : Utiliser podman comme docker avec les mêmes commandes @ Linuxtricks.fr :fr:.
- The Docker Alternative Most People DON'T KNOW @ CodeHead's YouTube.
- Grand saut dans le déploiement sur site d'un serveur LLM à moindres privilèges @ Synacktiv :fr:.
Use any linux distribution inside your terminal. Enable both backward and forward compatibility with software and freedom to use whatever distribution you’re more comfortable with. Distrobox uses podman or docker to create containers using the Linux distribution of your choice. The created container will be tightly integrated with the host, allowing sharing of the HOME directory of the user, external storage, external USB devices and graphical apps (X11/Wayland), and audio.
yq is a portable command-line YAML, JSON, XML, CSV and properties processor.
a lightweight and portable command-line YAML, JSON and XML processor. yq uses jq like syntax but works with yaml files as well as json, xml, properties, csv and tsv. It doesn't yet support everything jq does - but it does support the most common operations and functions, and more is being added continuously.
yq is written in go - so you can download a dependency free binary for your platform and you are good to go!