Open-source alternatives to Docker Webtop

KasmVNC is a web-based VNC server and remote access solution that provides a secure gateway for accessing remote desktop environments through a web browser. It implements the Remote Frame Buffer protocol to transmit pixel data and serves as a secure remote access gateway with integrated user auditing and input controls. The project distinguishes itself through extensive hardware acceleration, using GPU-accelerated frame capture and graphics acceleration to support graphics-intensive tasks with low latency. It employs a multi-threaded compression pipeline and dynamic encoding negotiation to ma

noVNC is an HTML5 remote desktop viewer and VNC web client that allows users to access and control remote desktops, virtual machines, and containers through a web browser. It functions as a remote desktop management tool that integrates the VNC protocol to enable remote server administration without the need for a dedicated client application. The project includes a VNC WebSocket proxy that translates binary VNC network traffic into WebSockets to bypass browser restrictions on direct TCP connections. This proxy service supports bridging connections to multiple remote servers by listening on v

Crossdesk is a cross-platform remote desktop software used for streaming and controlling remote computers. It consists of a hardware-accelerated video streamer and a web-based client that allows users to operate remote devices through a browser without installing platform-specific software. The system utilizes a self-hosted connection relay deployed via containers to manage remote sessions and forward traffic when direct peer-to-peer connections fail. To maintain performance, it employs hardware-accelerated video encoding and streaming to reduce latency and CPU load. The software provides cr

DetectionLab is a reproducible Windows Active Directory security lab designed for testing detection capabilities. It uses an automation framework based on Vagrant and Packer to provision virtualized networks across multiple hypervisors and cloud platforms. The project utilizes Ansible for the declarative installation and configuration of domain services and endpoint security tools. It incorporates a browser-based remote access interface via Apache Guacamole to manage laboratory hosts without requiring standalone remote desktop clients. The environment includes a telemetry pipeline that aggre

x11docker is an OCI container GUI orchestrator and hardware bridge designed to execute graphical applications and full desktop environments inside containers. It functions as a Linux GUI sandbox, linking containerized processes to host X11 or Wayland display servers and audio systems. The project differentiates itself by providing deep system integration for hardware acceleration, including NVIDIA driver automation and GPU passthrough. It supports cross-architecture GUI emulation and provides remote access capabilities through VNC, SSH forwarding, and browser-based HTML5 rendering. The tool

This project provides a remote development platform that enables users to access a full-featured integrated development environment through a standard web browser. By decoupling the user interface from the server-side filesystem, it allows for persistent coding workspaces to be hosted on remote servers, virtual machines, or cloud-native infrastructure, ensuring a consistent development experience from any device. The platform distinguishes itself through a secure gateway architecture that manages traffic, authentication, and encryption at the edge. It utilizes persistent WebSocket connections

This project provides a containerized environment for running a full macOS desktop operating system. It utilizes a hardware-accelerated virtualization engine to execute the guest environment, allowing for the deployment and management of virtual machines through standard container orchestration tools. The platform distinguishes itself by enabling direct hardware passthrough, which maps physical host disks, partitions, and USB controllers directly into the virtual machine for native driver access. It also supports advanced network integration, allowing the guest system to obtain its own unique

This project is a comprehensive collection of tutorials and guided laboratories designed to teach containerization, networking, and security using Docker. It serves as a learning path for building portable images and executing isolated processes. The materials provide specific guides for managing container clusters and scaling services through Docker Swarm and overlay networks. It includes a security handbook for implementing image scanning and secret management, as well as laboratories dedicated to modernizing legacy applications by wrapping older software installers into containers. The co

This project packages the official WeChat and QQ Linux clients inside Docker containers and streams their graphical interfaces to a web browser using WebRTC. It functions as a self-hosted gateway that provides browser-based access to these messaging applications without requiring native client installation on the local machine. The core design combines containerized desktop environments with real-time video streaming, GPU passthrough for hardware-accelerated rendering, and persistent volume mounting to preserve chat history and application configuration across container restarts. The system d

This project is a Kubernetes certification study guide and hands-on lab designed to prepare candidates for the Certified Kubernetes Application Developer exam. It provides a containerized learning sandbox and a resource validator to simulate real-world cluster configuration challenges. The environment uses scenario-based learning modules that require the implementation of pods, network policies, and persistent volumes. Correctness is verified through automated cluster queries that check the state of resources against defined expectations. The exercises cover a broad capability surface includ

This project is a collection of shell-based automation scripts designed to automate the deployment and configuration of Linux containers and virtual machines on Proxmox VE hosts. It provides toolsets for the scripted provisioning of virtual machine infrastructure and the creation of pre-defined containers for various applications. The toolset includes specialized utilities for Proxmox host management, such as automating post-installation setup, managing system backups, and cleaning up old kernels to reclaim disk space. It further provides automated configurations for hardware passthrough, ena

MotionEye is a network camera surveillance system and containerized surveillance manager. It functions as a web-based management interface for the motion daemon, providing a centralized platform to monitor live video feeds and control motion detection rules for multiple IP and USB cameras. The system allows for the administration of the motion daemon through a visual dashboard, where users can define triggers and recording rules based on visual movement detected by camera sensors. It is designed to run in isolated environments with persistent storage for video recordings and configuration set

Kivy is a cross-platform Python GUI framework used to build graphical user interfaces that run on desktop and mobile operating systems from a single codebase. It functions as a multi-touch UI library and a custom widget toolkit, providing a development environment for packaging Python applications into binary installations for Android and iOS. The framework is distinguished by its ability to handle complex multi-touch gestures and interactive input across various devices. It utilizes a specialized domain language for declarative UI construction to separate visual layout definitions from Pytho

This project provides a containerized environment for hosting and managing dedicated Minecraft Bedrock multiplayer servers. It functions as a portable image that automates the deployment lifecycle, including the automatic retrieval and installation of the latest server binaries upon container startup. The system distinguishes itself through its reliance on environment variables to dynamically generate server configurations and manage game parameters. It includes built-in support for automated asset injection, allowing for the seamless deployment of behavior and resource packs, alongside integ

This project is a containerized deployment of an OpenLDAP server, providing a lightweight directory access protocol service for storing and retrieving organizational data and user credentials. It functions as a directory server for identity management and user authentication across network services. The service supports the creation of LDAP replication clusters to maintain data consistency across multiple hosts for high availability. It includes capabilities for secure connectivity through TLS encryption and certificate management to protect sensitive directory data during transmission. Addi

This project is a Linux distribution build system and deployment framework designed to compile tailored Debian and Ubuntu server images for Amlogic ARM hardware. It functions as an operating system deployer and kernel builder, providing the tools necessary to flash system images to internal or external storage and manage boot configurations on ARM boards. The system includes a specialized build pipeline for compiling Linux kernels with hardware-specific patches and out-of-tree driver modules. It also features a dual-boot partition manager that enables the backup and restoration of original An

This library is a PHP environment variable loader and configuration parser. It extracts key-value pairs from local text files to populate global server and system environment arrays, ensuring that sensitive credentials and application settings remain separate from the source code. The tool implements twelve-factor app configuration principles by mapping local files to process-level variables. It utilizes a regex-based parser to identify variable assignments while stripping comments and whitespace, and it includes guards to prevent local configuration files from overwriting existing host-level

This is a configuration manager for Node.js applications that handles hierarchical settings across different deployment environments. It functions as an environment-based loader and settings parser that merges default configurations with overrides based on the current runtime context and hostname. The project distinguishes itself through a priority-based merge strategy that incorporates environment variables, command-line arguments, and external data sources to supersede file-based settings. It supports multi-format parsing for JSON, YAML, JavaScript, and TypeScript files, and allows for cust

TechEmpower FrameworkBenchmarks is an open-source project that provides a standardized, reproducible suite for measuring and comparing the performance of web frameworks across many languages. At its core, it defines a set of common server-side tasks—such as JSON serialization, database queries, and server-side template rendering—and executes them uniformly against hundreds of framework implementations to produce comparable throughput and latency metrics. The project is built around a multi-language benchmark harness that automates the full test lifecycle, from dependency installation and serve

mcp-context-forge is a Model Context Protocol federation gateway that unifies diverse AI tool servers and APIs into a single consistent interface for discovery and execution. It acts as a centralized proxy that aggregates multiple servers and APIs, allowing AI agents to access and invoke a unified set of tools, prompts, and resources. The project distinguishes itself through a multi-protocol translation bridge that converts communication between standard I/O, SSE, gRPC, and REST to enable interoperability between disparate tool servers. It includes a comprehensive LLM evaluation framework for

This project provides a containerized Ubuntu desktop environment with a graphical user interface accessible via a web browser. It implements a Docker-based image that integrates a web gateway and a browser-based client to stream a Linux workstation over HTTP and HTTPS. The system is distinguished by its ability to route audio from the container to the host system for playback and its support for SSL/TLS encryption to secure the remote desktop connection. It also includes configurations for hosting the interface behind a reverse proxy using relative URL path mapping. The project covers displa

This project is an Android device farm management platform and mobile device testing lab. It provides a web-based interface for remotely controlling, debugging, and managing fleets of physical Android devices. The platform enables remote hardware access through an ADB remote control system, allowing for remote shell execution, application installation via drag-and-drop, and real-time screen interaction through a browser. It includes tools for mapping remote device connections to local ports, enabling the use of integrated development environments for debugging. The system covers hardware inv

Alnoda Workspaces is a cloud-native platform for provisioning and managing containerized development environments. It provides a system for hosting isolated, portable workspaces that ensure consistent tooling and configurations across distributed teams, whether deployed on local infrastructure or remote cloud servers. The platform distinguishes itself by integrating local language model execution directly into the development environment. This allows for private, offline, chat-based coding assistance that functions without requiring external network connectivity. Furthermore, it facilitates r

NanoKVM is a KVM-over-IP device that provides remote keyboard, video, and mouse control over IP networks for headless server management. It functions as remote server management hardware enabling out-of-band control of a computer's power, BIOS, and operating system over a network, while also serving as a RISC-V single-board computer for embedded and edge applications. The device additionally operates as an AI edge inference device running neural network models locally for real-time image recognition and object detection, and integrates Tailscale as a VPN appliance for secure peer-to-peer conne

Floem is a native desktop UI framework and cross-platform toolkit for building high-performance user interfaces. It functions as a reactive UI library that uses a signal-based state management system to automatically synchronize the interface with data changes via lightweight observable primitives. The framework utilizes a GPU-accelerated rendering engine to ensure visual consistency and high performance across different desktop operating systems. It features a layout engine based on flexible box and grid models to create responsive screens that adapt to various window sizes. The toolkit cov

TacticalRMM is a remote monitoring and management platform designed for overseeing endpoints and automating IT administration. It functions as an endpoint management tool and IT automation framework, providing a centralized dashboard for executing scripts, monitoring system health, and managing remote devices across multiple tenants. The platform distinguishes itself through a comprehensive remote administration suite that includes real-time shell access, remote file management, and registry editing. It integrates with third-party remote desktop software and provides a hierarchical policy inh

Vibetunnel is a remote shell infrastructure project consisting of a headless terminal server, a remote shell manager, and a web-based terminal proxy. It provides the backend and connectivity tools necessary to execute processes on cloud instances and stream the resulting output to a web browser. The system distinguishes itself through secure tunneling connectivity and real-time terminal state synchronization. It uses encrypted tunnels to expose local shell environments to the internet and includes a terminal session recorder to capture activity in a playback-ready format for sharing and revie