Awesome GitHub RepositoriesInstance Volume Mounts

Microsandbox is a runtime for creating and managing lightweight, hardware-isolated virtual machines — called sandboxes — that boot directly from standard OCI container images. Each sandbox runs as its own host process with a separate kernel, filesystem, and network stack, providing process-per-sandbox isolation. The project includes a command-line tool and multi-language SDKs (Rust, TypeScript, Python, Go) for programmatic lifecycle control, and it communicates with sandbox agents over Unix sockets using a CBOR-encoded protocol. What distinguishes Microsandbox is its combination of host-manag

LXD is a unified platform for managing both system containers and virtual machines through a single REST API and command-line interface. It provides a programmatic HTTP interface for controlling the full lifecycle of instances, enabling automation and integration with external tools. The system runs unprivileged containers with per-instance UID/GID mappings, seccomp filters, and AppArmor profiles for kernel-level isolation, while supporting multiple storage backends including directory, Btrfs, LVM, ZFS, Ceph, LINSTOR, and TrueNAS through a unified driver interface. The platform distinguishes

ZenML is an orchestration platform designed for building, deploying, and monitoring reproducible machine learning pipelines and agentic workflows. It provides a unified framework that manages the entire lifecycle of machine learning assets, from data processing and model training to the deployment of persistent inference services. By decoupling pipeline logic from underlying compute and storage, the platform enables teams to transition workflows seamlessly from local development environments to production-grade cloud infrastructure. The platform distinguishes itself through a service-oriented

This project serves as a documentation hub and specification repository for official Docker images. It functions as a metadata-driven documentation generator that transforms structured content files into markdown files and readmes for public distribution. The repository provides technical guides and configuration standards for deploying containerized software across multiple CPU architectures. It includes detailed manuals for configuring environment variables, volume mounts, and network settings to ensure consistent image deployments. The documentation covers a broad range of containerized e

Opserver ist ein plattformübergreifender Monitoring-Server und ein Infrastruktur-Dashboard, das für die Verfolgung von Systemzustand, Leistungsmetriken und der Verfügbarkeit von Backend-Diensten entwickelt wurde. Es fungiert als externer Metrik-Aggregator und Tool zur unternehmensweiten Gesundheitsüberwachung, das Daten aus Monitoring-Quellen Dritter in einer einzigen Ansicht zentralisiert. Das System integriert sich mit Incident-Response-Diensten wie PagerDuty, um Benutzeridentitäten abzubilden und Benachrichtigungs-Workflows zu verwalten. Es verbindet sich zudem mit externen Verzeichnis- und Identitätsanbietern, um Benutzerauthentifizierung und Berechtigungszuweisungen zu handhaben. Die Plattform deckt mehrere Kernfunktionsbereiche ab, einschließlich der Verfolgung der Datenbankverfügbarkeit für eigenständige Instanzen und Cluster, der Verfolgung von Anwendungsfehlern für Exception-Logs und der Verwaltung von Netzwerk-Service-Backends. Sie unterstützt netzwerkbereichsbasierte Zugriffskontrolle, um nicht authentifizierten Dashboard-Zugriff für spezifische öffentliche Netzwerkbereiche zu erlauben. Die Anwendung wird als eigenständige ausführbare Datei oder als Container-Image für die Bereitstellung unter Windows, macOS und Linux vertrieben.

Whalebrew is a containerized package manager and alias manager that wraps Docker images as executable system commands. It functions as a container runtime orchestrator, mapping specific images to native-behaving binaries to allow users to run containerized applications without manual container engine strings. The system utilizes a wrapper utility to map host commands to image entrypoints. It provides tools for installing, updating, and removing these mappings, and includes a search mechanism to locate available images across configured registries. The tool manages the runtime environment by

Unikraft is a modular library operating system and unikernel framework designed to compile applications into minimal, bootable virtual machine images. It serves as an OCI-compliant image builder and a cloud-native hypervisor target, enabling the creation of specialized runtimes that include only the specific drivers and libraries required by a single application. The system features a Linux compatibility layer that maps standard API calls and POSIX standards to unikernel libraries, allowing unmodified binaries to run without a full general-purpose kernel. It distinguishes itself by allowing c

Jenkinsfile runner is a continuous integration engine that executes declarative workflows and pipeline scripts directly from the command line or container environments without requiring a persistent master server. It provides terminal-based execution tools for running, testing, and linting pipeline definitions locally, supporting build parameter passing, interactive shell sessions, and source control checkout configurations with authentication for private repositories. The system supports declarative instance configuration through mounted YAML files, automatic dependency resolution, and on-de