How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Tini is a lightweight process management tool designed to act as the entrypoint for OCI compliant containers. It functions as a minimal init process that manages the lifecycle of a primary child process, preventing the root process from ignoring critical termination signals. The project focuses on signal proxying and zombie process reaping. It forwards system signals from the container runtime to child processes and process groups to ensure graceful shutdowns. Additionally, it automatically collects terminated child processes to prevent the process table from filling with defunct entries. Ti
Phusion/baseimage-docker is a minimal Ubuntu-based Docker base image that includes a proper init system for managing multiple services and processes inside a single container. It provides a lightweight init process that reaps zombie processes, forwards stop signals for graceful shutdown, and supervises daemons through runit, restarting them automatically if they crash. The image includes a preconfigured OpenSSH server restricted to public-key authentication for secure shell access to running containers, along with a cron daemon for scheduling recurring tasks. It supports ordered startup scrip
This project is a collection of best practices and curated templates for building secure, stable, and production-ready Docker images. It provides standards for OCI image optimization and a guide for implementing industry-standard configurations in container environments. The repository offers specific patterns for security hardening, such as implementing non-root user execution with static IDs to prevent host privilege escalation. It also provides structural templates for multi-stage builds to separate build-time dependencies from the final runtime environment. Additional capabilities cover
gosu is a Go-based user identity switcher and process wrapper designed to execute commands under a specific user and group identity. It functions as a lightweight binary for switching user identities and forwarding signals before executing a target process. The tool focuses on container entrypoint optimization and user management within Docker containers. It enables the execution of processes as non-root users while ensuring that operating system signals reach the child process and the target command is established as the primary process. The utility manages Linux process identity switching
dumb-init is a lightweight process supervisor and minimal init system designed to run as the primary process in a Linux container. It functions as a manager for the first process in a namespace, specifically handling the responsibilities of a Linux init system.
The main features of yelp/dumb-init are: Container Init Process, Container Signal Forwarders, Zombie Process Reclamation, Process Signal Forwarding, Process Group Signaling, Lifecycle Supervision, OCI Container Process Management, Process Lifecycle Managers.
Projects with overlapping indexed features include: krallin/tini — Tini is a lightweight process management tool designed to act as the entrypoint for OCI compliant containers. It… phusion/baseimage-docker — Phusion/baseimage-docker is a minimal Ubuntu-based Docker base image that includes a proper init system for managing… hexops-graveyard/dockerfile — This project is a collection of best practices and curated templates for building secure, stable, and production-ready… tianon/gosu — gosu is a Go-based user identity switcher and process wrapper designed to execute commands under a specific user and… ochinchina/supervisord — This project is a Go process supervisor designed to start and monitor multiple background programs with automatic… angrave/systemprogramming — This is an open-source, crowd-sourced wiki textbook that teaches Linux system programming in C. It covers the core…