firecracker by firecracker-microvm

Secure and fast microVMs for serverless computing.

updated at May 18, 2024, 7:18 p.m.

328 +1

24,207 +36

1,709 +2

dive by wagoodman

A tool for exploring each layer in a docker image

updated at May 18, 2024, 10:14 p.m.

356 +1

43,882 +78

1,664 +5

docker-bench-security by docker

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

updated at May 18, 2024, 10:47 p.m.

237 +0

8,939 +13

995 +1

moby by moby

The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems

updated at May 18, 2024, 10:56 p.m.

2,908 +0

67,831 +21

18,547 +4

runc by opencontainers

CLI tool for spawning and running containers according to the OCI specification

updated at May 18, 2024, 11:14 p.m.

384 +1

11,470 +18

2,049 +0

sysbox by nestybox

An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

updated at May 18, 2024, 11:29 p.m.

38 +0

2,552 +11

145 +0

nsjail by google

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

updated at May 19, 2024, 1:39 a.m.

90 +0

2,809 +13

264 +0

gvisor by google

Application Kernel for Containers

updated at May 19, 2024, 5:05 a.m.

308 +0

15,149 +15

1,260 +0

youki by containers

A container runtime written in Rust

updated at May 19, 2024, 5:16 a.m.

46 -2

5,854 +17

322 +0

go-containerregistry by google

Go library and CLIs for working with container registries

updated at May 19, 2024, 5:24 a.m.

36 +0

2,981 +12

504 +2

podman by containers

Podman: A tool for managing OCI containers and pods.

updated at May 19, 2024, 5:27 a.m.

205 +0

21,944 +60

2,266 +10

portainer by portainer

Making Docker and Kubernetes management easy.

updated at May 19, 2024, 6 a.m.

472 +0

29,128 +88

2,360 +4