Projects sharing features with Aws Nuke

docker-gc is a garbage collection tool for Docker hosts designed to reclaim disk space by automatically removing exited containers, unused images, and dangling volumes. It functions as a resource cleaner that optimizes host storage through the lifecycle management of orphaned or inactive container resources. The utility manages image retention by preserving a minimum number of the most recent images per repository while deleting older versions. It employs configurable grace periods to determine when images and containers become eligible for deletion and supports pattern-based exclusion to pre

Kyverno is a Kubernetes policy engine and cloud native governance tool. It functions as a policy-as-code framework that validates, mutates, and generates resources to enforce security and governance standards within a cluster. The project distinguishes itself through a declarative policy model that utilizes native Kubernetes custom resource definitions, allowing policies to be managed as standard cluster objects without custom code. It provides specific security capabilities for container image verification and signature validation to ensure only trusted images are deployed. Its broader capa

VictoriaMetrics is a high-performance, scalable time series database and observability platform designed for long-term storage and analysis of metric, log, and trace data. It functions as a unified backend for monitoring ecosystems, offering full compatibility with industry-standard protocols and query languages. The system is built to handle massive data volumes through a distributed architecture that supports horizontal scaling and efficient data lifecycle management. The platform distinguishes itself through a storage engine that utilizes consistent hashing for data sharding and log-struct

Helm is a package manager for Kubernetes that simplifies the deployment and management of multi-component applications. It functions as a template rendering engine and release coordinator, allowing users to bundle, version, and deploy software as standardized packages. By maintaining a persistent metadata layer within the cluster, it tracks release history and manages the full lifecycle of applications, including installations, upgrades, and rollbacks. What distinguishes Helm is its ability to handle complex application hierarchies through automated dependency resolution and the composition o

OrbStack is a native macOS application that replaces Docker Desktop, providing an all-in-one environment for running Docker containers, full Linux virtual machines, and local Kubernetes clusters. It runs Linux VMs directly on the macOS hypervisor framework for near-native performance, uses VirtioFS for fast bidirectional file sharing between macOS and Linux, and leverages Rosetta for near-native x86 emulation on Apple Silicon. The system assigns predictable local domain names to containers and VMs with automatic HTTPS certificate generation, forwards ports via event-driven updates, and stores

Osmedeus is a security workflow orchestration engine that coordinates AI agents, shell commands, and scanning tools through declarative YAML pipelines. It functions as a distributed security scanner, a declarative workflow automator, and an AI agent framework for security, enabling automated multi-step security analysis with conditional branching, parallel execution, and distributed workers. The engine distinguishes itself through a hybrid runner model that executes workflow steps on the local host, inside Docker containers, or over SSH to remote machines, selected per step or module. It supp

Outline is a server that manages and runs Shadowsocks proxy instances, each isolated inside its own Docker container, to provide encrypted internet access. It is designed to bypass censorship by routing traffic through secure tunnels that use AEAD cipher encryption and traffic obfuscation to resist detection. Access to the proxy servers is controlled through a REST API that allows administrators to create, list, and revoke cryptographic access keys. The server automates the provisioning and configuration of proxy servers on cloud platforms like DigitalOcean, simplifying deployment through a m

This project is a technical setup guide for installing and configuring Docker within a Windows Subsystem for Linux 2 environment. It serves as a walkthrough for creating a virtualized Linux workspace on Windows to build and run software with native performance. The guide focuses on integrating container engines for isolated application deployment and establishing a cross-platform workflow. It provides instructions for linking external code editors to the subsystem, running graphical Linux applications on the host, and executing host binaries within the Linux terminal. It covers the managemen

nerdctl is a command-line tool that manages containers and images using containerd as the runtime, providing a Docker-compatible interface for container lifecycle management. It supports running containers with the same command syntax and flags as Docker, including multi-container Compose workflows, and enables rootless container execution without host kernel escalation. The tool extends beyond basic container management with several advanced distribution and security capabilities. It can start containers before full image download by fetching only metadata and on-demand layers from eStargz-f

Ofelia is a recurring job scheduler designed to run commands inside Docker containers or directly on the host system using a defined timetable. It functions as a configuration engine that reads job schedules and commands from container labels, a concurrency guard to prevent overlapping task executions, and a log router for reporting job outcomes. The system distinguishes itself by using a label-based configuration model, allowing job schedules and execution logic to be defined within container metadata rather than external configuration files. It employs a lock-based concurrency control mecha

Kitematic is a graphical user interface for managing and running Docker containers on desktop operating systems. It serves as a visual Docker management tool and API client that translates user interface interactions into REST API calls to control the Docker daemon without requiring the command line. The application is built as a cross-platform Electron desktop application, utilizing a Chromium-based shell to provide a consistent administrative interface across Mac and Windows. The software covers the full container lifecycle, including the creation, configuration, and monitoring of containe

ChatGPT-CodeReview is an AI-driven code analysis tool and bot that uses a large language model to automatically review pull request diffs and post feedback on code changes. It functions as a system for detecting bugs and suggesting improvements in source code. The tool provides a containerized runtime for deployment as a background process or through a GitHub Action. Users can customize the analysis behavior, style, and technical depth by adjusting model parameters and system prompts. The system handles automated code review workflows by triggering analysis via webhooks and CI pipelines, upd

DailyCheckin is an automated multi-platform daily check-in tool that logs into dozens of online services to collect rewards without manual intervention. It supports a wide range of platforms including Bilibili, Baidu Tieba, Aliyun Drive, AcFun, and many others, handling tasks such as daily sign-ins, coin tipping, lottery draws, and virtual currency conversion. The system is built around a config-file-based platform registry that allows dynamic addition or exclusion of tasks, with a cron-driven scheduler executing all check-in scripts sequentially in a single process. The tool distinguishes it

This project provides a containerized environment for deploying Apache Airflow, enabling the orchestration of complex data pipelines and automated task scheduling. By packaging the orchestration platform into portable images, it ensures consistent execution across diverse infrastructure setups and simplifies the management of runtime dependencies. The platform facilitates distributed task execution by decoupling the scheduler from the execution layer, allowing for horizontal scaling of processing power across multiple worker nodes. It supports dynamic configuration through environment variabl

rkt is a pod-native container engine and runtime for Linux that executes containerized applications as isolated pods. It serves as an OCI container runtime and a Linux container manager, supporting the execution of images based on Open Container Initiative, appc, and Docker specifications. The project distinguishes itself by offering hardware-level container isolation, allowing pods to run within virtual machines using KVM or QEMU for a dedicated kernel. It further separates itself through secure container deployment practices, utilizing SELinux mandatory access control and TPM-backed integri

This project provides a server-side language runtime and a standardized Docker image for deploying applications across different operating systems. It functions as an execution environment for generating dynamic HTML, JSON, and XML content, while also serving as a command line interface for automation scripts and background jobs. The runtime is designed for extensibility through a C-based extension architecture, allowing the loading of custom modules for specialized functionality. It supports multiple server application interfaces, including a FastCGI web interface for high-performance commun

Terraforming is an infrastructure as code generator and AWS Terraform resource exporter. It converts live cloud infrastructure into declarative configuration and state files, allowing existing cloud resources to be brought under programmatic management. The tool functions as a state file manager capable of generating and merging JSON state files. It translates live cloud provider API responses into HashiCorp Configuration Language syntax and can integrate newly exported resource data into existing state files without overwriting unrelated entries. The system includes capabilities for resourc

This project is a Markdown static site generator and documentation server that converts files and folder structures into responsive websites. It functions as a Confluence documentation publisher, enabling the direct upload and synchronization of processed Markdown content to enterprise knowledge base servers. The system distinguishes itself through its technical rendering capabilities, transforming Mermaid syntax into visual diagrams and TeX expressions into mathematical formulas. It supports multilingual documentation by creating localized versions of a site with dedicated navigation structu

Mago is a PHP static analysis tool, linter, and code formatter. It detects type errors, dead code, and logic bugs through advanced type inference and flow analysis, while providing a deterministic engine to rewrite source files according to style guides. The project distinguishes itself with a WebAssembly runtime that enables PHP analysis to execute entirely within a web browser, allowing results to be shared via URL. It also provides a minimal Dockerized toolchain distributed as a scratch image for consistent execution across different processor architectures. The toolset covers architectur

Deepagents is an LLM agent orchestration platform and stateful application server designed for deploying and managing AI agents built with computational graphs. It provides a containerized runtime environment that handles agent execution, state persistence, and the versioning of AI assistants. The platform distinguishes itself through deep integration with the Model Context Protocol, allowing agents to function as servers that expose tools and capabilities to external clients. It features a sophisticated observability suite for capturing execution traces, performing LLM-based evaluations agai

Flutter Server Management App is a mobile application designed for monitoring and controlling remote servers through a graphical interface. It serves as a central hub for remote server administration, providing a visual way to manage Linux, Unix, and Windows systems. The application distinguishes itself by integrating mobile hardware features, such as biometric authentication and native push notifications, to secure and alert users about system contexts. It features a dedicated Docker container manager for controlling the lifecycle and status of containers and a server health monitor for trac

TechXueXi is an automated learning tool designed to complete daily tasks and quizzes on a political education platform, earning points without manual intervention. It combines headless browser automation with human-like behavior simulation, randomizing user-agent strings and mimicking interaction patterns to avoid detection during automated sessions. The tool is built as a Python script that can run directly from source code after installing dependencies and a browser driver, or be deployed inside a Docker container for persistent, 24/7 operation on servers, VPS, or NAS devices. It supports c

TaskWeaver is an LLM agent framework that interprets natural language requests and executes them as Python code, SQL queries, or shell commands. It functions as a conversational code interpreter that maintains stateful data structures across turns, generating executable code from user prompts within a session-based environment. The system is designed as a self-hosted AI agent platform that can be deployed in Docker, managing sessions and providing a web UI for data analytics and automation tasks. The framework distinguishes itself through a role-based multi-agent architecture that divides the

This project provides a framework for defining and distributing reproducible development environments through modular, containerized configuration units. It functions as an infrastructure-as-code tool that automates the setup of standardized workspaces, ensuring that programming languages, command-line utilities, and system dependencies are consistently provisioned across different projects and team members. The system distinguishes itself by packaging these configuration units as versioned, discoverable artifacts that can be layered onto base container images. By utilizing a standardized spe

Visualize call graph of a Go program using Graphviz

Mosint is an email OSINT framework and intelligence tool designed to gather data and identify digital footprints associated with email addresses. It functions as a suite of automated utilities for email validation, breach scanning, and social account discovery. The tool maps digital identities by linking email addresses to social media profiles and identifying related identities to expand the scope of investigations. It includes a breach scanner that checks email addresses against known database leaks and password dumps to detect compromised accounts. The framework also covers network intell

ANTLR is a grammar-based code generator and multi-language parser generator used to design and implement custom languages. It functions as a toolkit for transforming formal language definitions into executable source code for processing structured text or binary files, while providing a framework for automatically constructing and traversing hierarchical parse trees. The project is distinguished by its ability to generate lexers and parsers in various target programming languages from a single shared grammar definition. It supports grammars containing direct left recursion and utilizes adapti