Awesome GitHub RepositoriesContainer Execution

This project is a Docker educational resource and a collection of practical examples designed for learning containerization technologies. It serves as a guide for understanding container fundamentals, including the creation and management of custom images and the use of registries. The repository provides specialized references for container security hardening, such as managing kernel privileges and implementing supply chain security. It also includes tutorials for multi-container orchestration and a DevOps guide focused on CI/CD automation and image optimization. The material covers a broad

Agent Zero is an LLM agent framework and multi-agent orchestrator that provides an AI-powered interface for operating system tasks. It functions as a containerized AI workspace, allowing large language models to interact with a filesystem and terminal within an isolated Linux environment. The system distinguishes itself through a hierarchical orchestration model that decomposes complex goals by spawning specialized sub-agents to collaborate and consolidate results. It features a plugin-based architecture for extending capabilities via a community plugin hub, a custom skills system, and extern

This project is a comprehensive collection of tutorials and guided laboratories designed to teach containerization, networking, and security using Docker. It serves as a learning path for building portable images and executing isolated processes. The materials provide specific guides for managing container clusters and scaling services through Docker Swarm and overlay networks. It includes a security handbook for implementing image scanning and secret management, as well as laboratories dedicated to modernizing legacy applications by wrapping older software installers into containers. The co

Azure Docs is the official technical documentation repository for Microsoft Azure, the cloud computing platform. It provides comprehensive guidance on the full spectrum of Azure services, covering everything from core infrastructure components like virtual machines, Kubernetes clusters, and serverless computing to platform services for AI, machine learning, data analytics, and storage. The documentation details how to provision, manage, and govern cloud resources at scale, including policy enforcement, identity management, and cost optimization. The documentation distinguishes Azure through i

Bottlerocket is a container-optimized operating system and minimal Linux distribution designed specifically for hosting container workloads. It functions as an immutable infrastructure OS, utilizing a read-only root filesystem and atomic partition swapping to ensure consistent and reversible system updates. The system is distinguished by an API-driven host manager that replaces traditional shell-based configuration with a local REST API for administrative tasks. To maintain security and stability, it employs a dual-runtime isolation model that separates workload runtimes from system operation

Cross is a container-based build environment and cross-compilation tool for Rust. It functions as a multi-architecture binary builder and testing framework, allowing users to compile crates into binaries for different operating systems and CPU architectures without installing local toolchains on the host system. The project distinguishes itself by using Docker images to provide consistent toolchains and system dependencies for foreign target architectures. It integrates the Zig toolchain within container images to facilitate compilation across various architectures and library versions, and i

dockerlabs is a collection of educational labs and technical tutorials designed to teach the fundamentals of containerization and microservice architecture. It provides instructional material and hands-on exercises covering image optimization, security training, infrastructure setup, and cluster orchestration. The project features specific courses and guides focused on reducing image size through multi-stage builds, securing workloads via vulnerability scanning and encrypted networks, and deploying multi-node clusters with high availability using Swarm orchestration. The materials cover a br

SD.Next is an all-in-one web interface and multi-backend inference engine for generating, editing, and processing images and videos using diffusion models. It functions as a comprehensive tool for diffusion model management and an automated image processing pipeline for bulk operations. The project is distinguished by its hardware-backend abstraction layer, which provides automatic detection and acceleration for NVIDIA CUDA, AMD ROCm, Intel OpenVINO, and DirectML. It features a headless generative API and a programmatic command interface, allowing users to trigger tasks via REST API or CLI wi

This is an educational resource that provides a comprehensive guide to blockchain and distributed ledger technologies, covering everything from fundamental concepts to practical deployment. The guide systematically explains the core architecture of blockchain systems, including consensus-based distributed ledgers, cryptographic hash chains, Merkle trees, and smart contract execution engines, while also detailing permissioned channel architectures and modular service platforms for enterprise use. The resource distinguishes itself by offering a dual-track learning path that serves both non-tech

This project is a collection of curated and standardized Docker base images that serve as reliable starting points for building containerized applications. It functions as an OCI container image repository and a build template library, providing a central source of truth for images that adhere to Open Container Initiative standards for portability. The project utilizes an automated image lifecycle pipeline to build, tag, and push images, ensuring that dependencies remain current and security patches are applied. It specifically supports cross-platform distribution by providing a multi-archite

SSHFS-Win is a Windows implementation of SSHFS that mounts remote directories over SSH as local Windows drives, enabling seamless file access as if they were local network drives. It provides both command-line and graphical interfaces for creating, managing, and disconnecting SSHFS mounts, supporting password or SSH key authentication with optional credential storage in the Windows Credential Manager. The project extends beyond basic SSH mounting to support a wide range of remote file access scenarios, including mounting cloud storage services like Azure Blob or Amazon S3, distributed POSIX f

Dynamo is a distributed inference orchestration platform designed for large language models. It functions as a system to coordinate prefill and decode phases across GPU nodes, utilizing a multi-backend runtime adapter to connect engines like vLLM and TensorRT-LLM through a unified block-oriented memory interface. An OpenAI-compatible API server provides the frontend for integration with existing tools and clients. The project is distinguished by its disaggregated serving architecture, which separates prompt processing and token generation onto independent GPU pools to optimize throughput and

CRI-O is an open-source container runtime that implements the Kubernetes Container Runtime Interface (CRI) to manage container images, pods, and containers on cluster nodes using OCI-compatible runtimes. It serves as a node-level container manager that handles image pulling, container lifecycle, and resource monitoring for Kubernetes clusters, running containers according to the Open Container Initiative specifications. The runtime distinguishes itself through live configuration reloading that applies changes to runtime definitions, registry mirrors, and TLS certificates without restarting th

ZenML is an orchestration platform designed for building, deploying, and monitoring reproducible machine learning pipelines and agentic workflows. It provides a unified framework that manages the entire lifecycle of machine learning assets, from data processing and model training to the deployment of persistent inference services. By decoupling pipeline logic from underlying compute and storage, the platform enables teams to transition workflows seamlessly from local development environments to production-grade cloud infrastructure. The platform distinguishes itself through a service-oriented

Ce projet fournit un blueprint architectural complet et un ensemble d'implémentations pour construire une plateforme-as-a-service (PaaS) sur Kubernetes. Il sert de ressource technique pour déployer des environnements d'orchestration de conteneurs, gérer le cycle de vie complet du développement logiciel et intégrer une chaîne d'outils DevOps complète. L'implémentation met l'accent sur la livraison logicielle automatisée via l'intégration de pipelines de build et de livraison, de registres de conteneurs privés et de systèmes de configuration distribués. Elle permet le découplage des paramètres d'application des images via un gestionnaire de configuration centralisé, permettant des mises à jour spécifiques à l'environnement sans reconstruire les conteneurs. La plateforme couvre un large éventail de capacités cloud-native, incluant l'orchestration réseau des conteneurs, la gestion du trafic de couche 4 et 7, et l'orchestration de microservices avec des stratégies de mise à jour progressive (rolling update). Elle intègre également une stack d'observabilité complète pour la journalisation centralisée, le traçage distribué et la visualisation de métriques de séries temporelles. Le projet est principalement implémenté sous forme d'une collection de scripts shell et de fichiers de configuration pour automatiser le déploiement de la couche d'orchestration et de ses services de support.

This project provides a collection of official base images for building and running .NET applications across various operating systems and hardware architectures. It includes standardized runtime environments, containerized development kits, and specialized images designed for isolated application execution. The collection is distinguished by its focus on image optimization and security hardening. It offers distroless images that remove shells and package managers to reduce the attack surface, as well as composite layering and ahead-of-time compilation to improve startup performance and lower

Pouch est un runtime de conteneur Linux et un moteur de conteneur OCI conçu pour exécuter des applications conteneurisées. Il fonctionne comme un runtime de conteneur Kubernetes, s'intégrant aux orchestrateurs pour gérer le cycle de vie des pods et des environnements d'application isolés. Le projet dispose d'un système de distribution d'images peer-to-peer pour livrer de grandes images de conteneurs à travers des clusters à grande échelle tout en réduisant la charge de bande passante. Il prend également en charge les versions anciennes du noyau Linux, permettant aux runtimes de conteneurs modernes de maintenir la compatibilité avec du matériel plus ancien. Le runtime implémente l'isolation des applications en utilisant des sandboxes basées sur l'hyperviseur et l'isolation des ressources au niveau du noyau. Son architecture inclut un système de fichiers en couches et un système de gestion du cycle de vie basé sur des shims, garantissant la compatibilité avec les spécifications d'image et de runtime de l'Open Container Initiative.

Strider is a CI/CD server designed to automate the building, testing, and deployment of software through continuous integration and delivery pipelines. It functions as a containerized build system that executes tasks within isolated containers to maintain consistent environments across different host machines. The platform implements a configuration as code model, managing project settings and environment variables through version-controlled files to ensure reproducible workflows. It further integrates with external directory servers via LDAP to manage user identities and administrative acces

Jetson Containers est un système de gestion de conteneurs qui construit et exécute des images Docker accélérées par GPU pour les charges de travail d'apprentissage automatique sur du matériel ARM64 edge. Il fonctionne comme un orchestrateur de conteneurs CUDA, détectant automatiquement la version du toolkit CUDA de l'hôte et les capacités du GPU pour assurer la compatibilité des conteneurs au moment de l'exécution, tout en sélectionnant l'image de conteneur correcte en faisant correspondre la version JetPack ou L4T de l'hôte au moment du lancement. Le projet fournit des conteneurs pré-configurés pour l'exécution de grands modèles de langage quantifiés et des pipelines de génération augmentée par récupération (RAG) optimisés pour les appareils edge, ainsi que des conteneurs ROS et de framework d'IA intégrés pour le déploiement d'agents autonomes et le traitement multimodal. Son système de construction modulaire en couches assemble des images Docker à partir de couches réutilisables et pré-construites, compilant les frameworks AI/ML à partir de la source pour les optimiser pour des architectures GPU edge spécifiques et des versions CUDA, avec une mise en cache locale des wheels pour accélérer les constructions ultérieures. La plateforme fournit des conteneurs Docker pré-construits avec des versions accélérées par GPU de PyTorch, TensorFlow, JAX et ONNX Runtime pour les plateformes Jetson, prenant en charge des capacités telles que l'exécution de LLM, de modèles de parole, de modèles vision-langage et de traduction neuronale automatique sur du matériel edge. Il permet également de construire des conteneurs personnalisés avec des packages d'IA accélérés par GPU, d'exécuter des conteneurs Triton Inference Server et Transformer Engine, et d'accélérer les flux de travail de science des données avec les bibliothèques RAPIDS.