Secure and fast microVMs for serverless computing.

Podman: A tool for managing OCI containers and pods.

CLI tool for spawning and running containers according to the OCI specification

A container runtime written in Rust

An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

LXC - Linux Containers

A basic user tool to execute simple docker containers in batch or interactive systems without root privileges.

[Project ended] rkt is a pod-native container engine for Linux. It is composable, secure, and built on standards.

Vagga is a containerization tool without daemons

lmctfy is the open source version of Google’s container stack, which provides Linux application containers.

RailCar: Rust implementation of the Open Containers Initiative oci-runtime

OCI (Open Containers Initiative) compatible runtime for Intel® Architecture

Yet another Linux container management system

Build and run layered root filesystems.

Linux containers control plane

Container Machines - Containers that look like Virtual Machines

Hypervisor-based Runtime for OCI

Docker implemented in around 100 lines of bash

A tool for exploring each layer in a docker image

Work with remote images registries - retrieving information, images, signing content

A tool that facilitates building OCI images.

Go library and CLIs for working with container registries

Build Container Images In Kubernetes

Program to reverse Docker images into Dockerfiles

Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.

container-diff: Diff your Docker containers

Container build and runtime tool

"Docker Push Readme" - a Docker CLI plugin to update container repo docs

Enter kernel namespaces from Python

Works with Linux namespaces througth glibc with pure python

The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems

Making Docker and Kubernetes management easy.

Lightweight mobile-friendly Docker Swarm management UI

Application Kernel for Containers

Quick and Easy server testing/validation

A tool to help forensicate offline docker acquisitions

OCI hook to trace syscalls and generate a seccomp profile

Assessing compliance of a container

A proxy for docker.sock that enforces access control and isolated privileges

drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

Custom & better AppArmor profile generator for Docker containers.

Low-level unprivileged sandboxing tool used by Flatpak and similar projects

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

Singularity has been renamed to Apptainer as part of us moving the project to the Linux Foundation. This repo has been persisted as a snapshot right before the changes.

Run programs on linux with selectively restricted permissions.

A lightweight, flexible, and safer alternative to chroot and/or Docker.

Powerful system container and virtual machine manager

Process supervisor that supports linux containers

Creates a system where users are forced to login in dedicated independent docker containers.

OCI Runtime Specification

Cloud Native Application Bundle Specification

Minimal Linux container host

Cloud Foundry - the open platform as a service project

The Container Ecosystem Project