Awesome GitHub RepositoriesContainer Execution

This project is a Docker educational resource and a collection of practical examples designed for learning containerization technologies. It serves as a guide for understanding container fundamentals, including the creation and management of custom images and the use of registries. The repository provides specialized references for container security hardening, such as managing kernel privileges and implementing supply chain security. It also includes tutorials for multi-container orchestration and a DevOps guide focused on CI/CD automation and image optimization. The material covers a broad

Agent Zero is an LLM agent framework and multi-agent orchestrator that provides an AI-powered interface for operating system tasks. It functions as a containerized AI workspace, allowing large language models to interact with a filesystem and terminal within an isolated Linux environment. The system distinguishes itself through a hierarchical orchestration model that decomposes complex goals by spawning specialized sub-agents to collaborate and consolidate results. It features a plugin-based architecture for extending capabilities via a community plugin hub, a custom skills system, and extern

This project is a comprehensive collection of tutorials and guided laboratories designed to teach containerization, networking, and security using Docker. It serves as a learning path for building portable images and executing isolated processes. The materials provide specific guides for managing container clusters and scaling services through Docker Swarm and overlay networks. It includes a security handbook for implementing image scanning and secret management, as well as laboratories dedicated to modernizing legacy applications by wrapping older software installers into containers. The co

Azure Docs is the official technical documentation repository for Microsoft Azure, the cloud computing platform. It provides comprehensive guidance on the full spectrum of Azure services, covering everything from core infrastructure components like virtual machines, Kubernetes clusters, and serverless computing to platform services for AI, machine learning, data analytics, and storage. The documentation details how to provision, manage, and govern cloud resources at scale, including policy enforcement, identity management, and cost optimization. The documentation distinguishes Azure through i

Bottlerocket is a container-optimized operating system and minimal Linux distribution designed specifically for hosting container workloads. It functions as an immutable infrastructure OS, utilizing a read-only root filesystem and atomic partition swapping to ensure consistent and reversible system updates. The system is distinguished by an API-driven host manager that replaces traditional shell-based configuration with a local REST API for administrative tasks. To maintain security and stability, it employs a dual-runtime isolation model that separates workload runtimes from system operation

Cross is a container-based build environment and cross-compilation tool for Rust. It functions as a multi-architecture binary builder and testing framework, allowing users to compile crates into binaries for different operating systems and CPU architectures without installing local toolchains on the host system. The project distinguishes itself by using Docker images to provide consistent toolchains and system dependencies for foreign target architectures. It integrates the Zig toolchain within container images to facilitate compilation across various architectures and library versions, and i

dockerlabs is a collection of educational labs and technical tutorials designed to teach the fundamentals of containerization and microservice architecture. It provides instructional material and hands-on exercises covering image optimization, security training, infrastructure setup, and cluster orchestration. The project features specific courses and guides focused on reducing image size through multi-stage builds, securing workloads via vulnerability scanning and encrypted networks, and deploying multi-node clusters with high availability using Swarm orchestration. The materials cover a br

SD.Next is an all-in-one web interface and multi-backend inference engine for generating, editing, and processing images and videos using diffusion models. It functions as a comprehensive tool for diffusion model management and an automated image processing pipeline for bulk operations. The project is distinguished by its hardware-backend abstraction layer, which provides automatic detection and acceleration for NVIDIA CUDA, AMD ROCm, Intel OpenVINO, and DirectML. It features a headless generative API and a programmatic command interface, allowing users to trigger tasks via REST API or CLI wi

This is an educational resource that provides a comprehensive guide to blockchain and distributed ledger technologies, covering everything from fundamental concepts to practical deployment. The guide systematically explains the core architecture of blockchain systems, including consensus-based distributed ledgers, cryptographic hash chains, Merkle trees, and smart contract execution engines, while also detailing permissioned channel architectures and modular service platforms for enterprise use. The resource distinguishes itself by offering a dual-track learning path that serves both non-tech

This project is a collection of curated and standardized Docker base images that serve as reliable starting points for building containerized applications. It functions as an OCI container image repository and a build template library, providing a central source of truth for images that adhere to Open Container Initiative standards for portability. The project utilizes an automated image lifecycle pipeline to build, tag, and push images, ensuring that dependencies remain current and security patches are applied. It specifically supports cross-platform distribution by providing a multi-archite

SSHFS-Win is a Windows implementation of SSHFS that mounts remote directories over SSH as local Windows drives, enabling seamless file access as if they were local network drives. It provides both command-line and graphical interfaces for creating, managing, and disconnecting SSHFS mounts, supporting password or SSH key authentication with optional credential storage in the Windows Credential Manager. The project extends beyond basic SSH mounting to support a wide range of remote file access scenarios, including mounting cloud storage services like Azure Blob or Amazon S3, distributed POSIX f

Dynamo is a distributed inference orchestration platform designed for large language models. It functions as a system to coordinate prefill and decode phases across GPU nodes, utilizing a multi-backend runtime adapter to connect engines like vLLM and TensorRT-LLM through a unified block-oriented memory interface. An OpenAI-compatible API server provides the frontend for integration with existing tools and clients. The project is distinguished by its disaggregated serving architecture, which separates prompt processing and token generation onto independent GPU pools to optimize throughput and

CRI-O is an open-source container runtime that implements the Kubernetes Container Runtime Interface (CRI) to manage container images, pods, and containers on cluster nodes using OCI-compatible runtimes. It serves as a node-level container manager that handles image pulling, container lifecycle, and resource monitoring for Kubernetes clusters, running containers according to the Open Container Initiative specifications. The runtime distinguishes itself through live configuration reloading that applies changes to runtime definitions, registry mirrors, and TLS certificates without restarting th

ZenML is an orchestration platform designed for building, deploying, and monitoring reproducible machine learning pipelines and agentic workflows. It provides a unified framework that manages the entire lifecycle of machine learning assets, from data processing and model training to the deployment of persistent inference services. By decoupling pipeline logic from underlying compute and storage, the platform enables teams to transition workflows seamlessly from local development environments to production-grade cloud infrastructure. The platform distinguishes itself through a service-oriented

يوفر هذا المشروع مخططاً معمارياً شاملاً ومجموعة تنفيذ لبناء منصة كخدمة (PaaS) على Kubernetes. يعمل كمورد فني لنشر بيئات تنسيق الحاويات، وإدارة دورة حياة تطوير البرمجيات بالكامل، ودمج سلسلة أدوات DevOps كاملة. يؤكد التنفيذ على تسليم البرمجيات الآلي من خلال دمج خطوط أنابيب البناء والتسليم، وسجلات الحاويات الخاصة، وأنظمة التكوين الموزعة. يتيح فصل إعدادات التطبيق عن الصور عبر مدير تكوين مركزي، مما يسمح بتحديثات خاصة بالبيئة دون إعادة بناء الحاويات. تغطي المنصة مجموعة واسعة من القدرات السحابية الأصلية، بما في ذلك تنسيق شبكات الحاويات، وإدارة حركة المرور من الطبقة 4 و7، وتنسيق الخدمات المصغرة مع استراتيجيات التحديث المتداول. كما تتضمن حزمة مراقبة كاملة للتسجيل المركزي، والتتبع الموزع، وتصور مقاييس السلاسل الزمنية. يتم تنفيذ المشروع بشكل أساسي كمجموعة من نصوص Shell وملفات التكوين لأتمتة نشر طبقة التنسيق وخدماتها الداعمة.

This project provides a collection of official base images for building and running .NET applications across various operating systems and hardware architectures. It includes standardized runtime environments, containerized development kits, and specialized images designed for isolated application execution. The collection is distinguished by its focus on image optimization and security hardening. It offers distroless images that remove shells and package managers to reduce the attack surface, as well as composite layering and ahead-of-time compilation to improve startup performance and lower

Pouch is a Linux container runtime and OCI container engine designed to execute containerized applications. It functions as a Kubernetes container runtime, integrating with orchestrators to manage the lifecycle of pods and isolated application environments. The project features a peer-to-peer image distribution system to deliver large container images across large-scale clusters while reducing bandwidth load. It also provides support for legacy Linux kernel versions, allowing modern container runtimes to maintain compatibility with older hardware. The runtime implements application isolation

Strider هو خادم CI/CD مصمم لأتمتة بناء واختبار ونشر البرمجيات من خلال خطوط أنابيب التكامل والتسليم المستمر. يعمل كنظام بناء حاويات ينفذ المهام داخل حاويات معزولة للحفاظ على بيئات متسقة عبر أجهزة مضيفة مختلفة. تطبق المنصة نموذج التكوين ككود، حيث تدير إعدادات المشروع ومتغيرات البيئة من خلال ملفات خاضعة للتحكم في الإصدار لضمان سير عمل قابل للتكرار. كما تتكامل مع خوادم الدليل الخارجية عبر LDAP لإدارة هويات المستخدمين وأذونات الوصول الإداري. يتضمن النظام واجهة برمجة تطبيقات أتمتة RESTful لإدارة الحالة الداخلية وتشغيل خطوط الأنابيب عبر طلبات الويب. يدعم تنفيذ المهام المتزامنة لتقليل وقت المعالجة ويوفر نموذج توسيع قائم على المكونات الإضافية لإضافة خطافات مخصصة وعناصر واجهة مستخدم.

Jetson Containers هو نظام إدارة حاويات يقوم ببناء وتشغيل صور Docker المسرعة بـ GPU لأحمال عمل التعلم الآلي على أجهزة ARM64 الطرفية. يعمل كمنسق حاويات CUDA، حيث يكتشف تلقائياً إصدار مجموعة أدوات CUDA للمضيف وقدرات GPU لضمان توافق الحاوية في وقت التشغيل، مع اختيار صورة الحاوية الصحيحة من خلال مطابقة إصدار JetPack أو L4T للمضيف عند الإطلاق. يقدم المشروع حاويات مهيأة مسبقاً لتنفيذ نماذج لغوية كبيرة مكممة وخطوط أنابيب توليد معززة بالاسترجاع (RAG) محسنة للأجهزة الطرفية، إلى جانب حاويات ROS وإطارات عمل الذكاء الاصطناعي المتكاملة لنشر الوكلاء المستقلين والمعالجة متعددة الوسائط. يقوم نظام البناء الطبقي المعياري الخاص به بتجميع صور Docker من طبقات قابلة لإعادة الاستخدام ومبنية مسبقاً، وتجميع إطارات عمل AI/ML من المصدر لتحسينها لمعماريات GPU الطرفية المحددة وإصدارات CUDA، مع تخزين مؤقت محلي للعجلات (wheel caching) لتسريع عمليات البناء اللاحقة. توفر المنصة حاويات Docker مبنية مسبقاً مع إصدارات مسرعة بـ GPU من PyTorch و TensorFlow و JAX و ONNX Runtime لمنصات Jetson، مما يدعم قدرات مثل تشغيل LLMs، ونماذج الكلام، ونماذج الرؤية واللغة، والترجمة الآلية العصبية على الأجهزة الطرفية. كما يتيح بناء حاويات مخصصة مع حزم ذكاء اصطناعي مسرعة بـ GPU، وتشغيل حاويات Triton Inference Server و Transformer Engine، وتسريع سير عمل علوم البيانات باستخدام مكتبات RAPIDS.