Open-source alternatives to Podman

podman-compose is a command line tool and compose specification wrapper that translates YAML definitions into commands for the Podman container engine. It functions as a multi-container orchestrator that deploys application stacks without requiring a background daemon process. The tool enables rootless container management, allowing the execution of containerized applications and services without administrative privileges on the host. It translates high-level compose commands into individual shell calls to coordinate the deployment of multiple containers. The system manages container network

Jib is a build plugin for Maven and Gradle that packages Java applications into container images directly within the build lifecycle. By integrating into the standard build process, it eliminates the need for Dockerfiles or a local container daemon to create and store images. The tool constructs images by organizing application artifacts into distinct filesystem layers, which improves cache efficiency and reduces data transfer during registry pushes. It communicates directly with container registries using standard protocols and supports credential helper orchestration to manage authenticatio

Waypoint is an application delivery platform and multi-cloud deployment orchestrator. It enables the definition of the build, deploy, and release lifecycle as code to manage application resources across multiple target environments from a single interface. The project functions as an infrastructure-as-code workflow tool and self-service portal. It abstracts complex infrastructure configurations into reusable patterns, allowing developers to deploy applications using pre-approved templates and modular infrastructure add-ons. The system provides cloud resource governance through role-based acc

Asterinas is a memory-safe operating system kernel designed to prevent data races and memory corruption. It functions as a Linux-ABI compatible kernel, enabling the execution of existing Linux binaries and container workloads while providing a declarative operating system distribution model. The project distinguishes itself by acting as a virtual machine container host and a confidential computing guest OS, allowing it to run within hardware-isolated Trusted Execution Environments such as Intel TDX. It implements a minimal trusted computing base by isolating unsafe low-level operations and se

This project is a Docker educational resource and a collection of practical examples designed for learning containerization technologies. It serves as a guide for understanding container fundamentals, including the creation and management of custom images and the use of registries. The repository provides specialized references for container security hardening, such as managing kernel privileges and implementing supply chain security. It also includes tutorials for multi-container orchestration and a DevOps guide focused on CI/CD automation and image optimization. The material covers a broad

Shannon is an integrated security platform designed for autonomous penetration testing, static and dynamic analysis, and automated vulnerability remediation within self-hosted, private infrastructure. It functions as a unified security suite that orchestrates the entire lifecycle of vulnerability management, from initial discovery and reachability prioritization to the generation and verification of code-level patches. The platform distinguishes itself through its agentic approach to security, deploying autonomous agents to execute both black-box and white-box exploits against running applica

Vagrant is a virtual machine environment manager and infrastructure as code tool used to create and configure consistent development environments. It acts as a virtual machine provisioner and hypervisor abstraction layer, allowing users to define machine specifications and automate software installation on guest systems via declarative configuration files. The project enables cross-hypervisor orchestration by decoupling the command interface from specific virtualization backends. It ensures environment consistency through the distribution of pre-configured machine images and the orchestration

Puphpet is a web-based infrastructure as code generator and local development environment orchestrator. It provides a graphical interface for defining and automating the setup of isolated virtual machine environments used for web development. The tool functions as a virtual machine environment builder that transforms user inputs into structured, declarative configuration models. It abstracts the complexity of infrastructure automation tools by mapping visual interface selections to configuration files. The system covers the generation of virtual machine configurations and the provisioning of

Natpass is a web-based remote access gateway and orchestrator designed to manage remote server instances, desktop streaming, and cloud development environments through a browser. It functions as a centralized portal for executing shell commands and accessing graphical desktops on remote servers without the need for local clients. The system includes a remote IDE host and a remote desktop streamer, enabling server-side development environments and the transmission of a remote machine's visual interface directly to a web browser. It also features a natural language documentation query tool for

Vagrant is a virtual machine environment manager and development environment provisioner. It functions as an infrastructure as code tool and multi-hypervisor orchestrator, allowing for the definition and automation of virtualized development environments through a single configuration file. The project enables the creation of portable, virtualized development environments to ensure consistency across different host operating systems. It supports deploying these environments across various backends, including local hypervisors, cloud providers, and container runtimes, using a unified interface

OpenSandbox is a secure execution environment and runtime designed for running untrusted code and scripts generated by AI agents. It utilizes a containerized code execution engine and microVM-based isolation to protect host systems from malicious actions while providing isolated virtual environments. The project features a sandbox server based on the Model Context Protocol to automate the creation and control of virtual workspaces. It supports the deployment of secure remote desktop hosts, including headless web browsers and editor instances, for automated interaction. The system includes an

CRI-O is an open-source container runtime that implements the Kubernetes Container Runtime Interface (CRI) to manage container images, pods, and containers on cluster nodes using OCI-compatible runtimes. It serves as a node-level container manager that handles image pulling, container lifecycle, and resource monitoring for Kubernetes clusters, running containers according to the Open Container Initiative specifications. The runtime distinguishes itself through live configuration reloading that applies changes to runtime definitions, registry mirrors, and TLS certificates without restarting th

Gaphor is the simple modeling tool

firecracker-containerd enables containerd to manage containers as Firecracker microVMs

Pencil is a cross-platform design environment and vector drawing application used for GUI prototyping and diagramming. It provides a canvas-based editor to create interactive user interface mockups, system architecture diagrams, and scalable visual representations of technical flows. The tool functions as a vector graphic editor that renders shapes as mathematical paths to ensure scalability across different resolutions. It includes a PDF export layout engine specifically designed to convert screen-based visual designs into fixed-layout documents for physical printing and distribution. The p

crun is a low-level container runtime that implements the Open Container Initiative specification for managing the lifecycle of isolated processes. It provides the core mechanisms for container creation, execution, and deletion, ensuring compatibility across platforms through standardized lifecycle management. The project distinguishes itself by offering a shared C library that allows container runtime operations to be embedded directly into other compiled applications. It further extends execution capabilities through specialized handlers that enable the deployment of containers within isola

AppScale is an easy-to-manage serverless platform for building and running scalable web and mobile applications on any infrastructure.

Swarm is a container clustering system that pools multiple Docker hosts into a single virtual host, enabling transparent container scheduling and management across the cluster. It exposes the standard Docker API so existing Docker-compatible tools and clients can operate on the cluster without any modifications. The system uses a distributed key-value store to maintain cluster state, enabling consistent scheduling decisions across nodes. A Docker-API proxy layer translates standard API calls into cluster-wide operations, while a host-pool abstraction hides individual host details from the cli

Spin is a WebAssembly serverless framework and development toolchain for building and running portable microservices. It functions as an event-driven orchestrator and runtime that executes WebAssembly components, allowing developers to map HTTP requests, Redis messages, and cron schedules to specific modules. The project distinguishes itself by implementing a Wasm-based AI inference gateway, enabling components to perform model inference and generate text embeddings. It utilizes the WebAssembly Component Model and WASI for language-agnostic composition and portable host interfacing, while emp

Bug reports for Docker Desktop for Linux

Flox is a Nix environment manager designed to create, share, and maintain reproducible software stacks. It uses declarative manifests to isolate project dependencies and toolchains, ensuring identical runtimes across different machines and operating systems. The platform distinguishes itself by enabling the deployment of imageless workloads to Kubernetes, allowing software to run in pods without traditional container images. It can also synthesize OCI-compliant container images and distroless artifacts directly from declarative environment definitions. The project covers broad capability are

Docker Compose is a tool for defining and running multi-container applications through declarative configuration files. It functions as an application lifecycle manager, coordinating the startup, shutdown, and scaling of interconnected services within isolated environments. By using a standardized configuration format, it enables infrastructure as code, allowing developers to manage complex application stacks and their dependencies in a single, repeatable file. The project distinguishes itself by integrating directly with the broader Docker platform, leveraging a client-server architecture wh

img is a collection of toolsets for building, managing, and manipulating OCI compliant container images. It functions as an image build tool and registry client, providing the capabilities to create images from configuration files, push and pull images to remote registries, and extract image layers into root filesystems or archives. The project distinguishes itself through support for multi-platform builds using hardware emulators and the ability to perform unprivileged container builds via namespace-based process isolation and user ID mapping. It also includes a cross-platform binary compile

MIRROR Check hashes for your files - A GUI tool to generate, compare and verify MD5, SHA-1, SHA-256, SHA-512, Blake3, CRC32 & Adler32 hashes.

Facilitates running Wasm / WASI workloads managed by containerd