Awesome GitHub RepositoriesContainer Execution

This project is a Docker educational resource and a collection of practical examples designed for learning containerization technologies. It serves as a guide for understanding container fundamentals, including the creation and management of custom images and the use of registries. The repository provides specialized references for container security hardening, such as managing kernel privileges and implementing supply chain security. It also includes tutorials for multi-container orchestration and a DevOps guide focused on CI/CD automation and image optimization. The material covers a broad

Agent Zero is an LLM agent framework and multi-agent orchestrator that provides an AI-powered interface for operating system tasks. It functions as a containerized AI workspace, allowing large language models to interact with a filesystem and terminal within an isolated Linux environment. The system distinguishes itself through a hierarchical orchestration model that decomposes complex goals by spawning specialized sub-agents to collaborate and consolidate results. It features a plugin-based architecture for extending capabilities via a community plugin hub, a custom skills system, and extern

This project is a comprehensive collection of tutorials and guided laboratories designed to teach containerization, networking, and security using Docker. It serves as a learning path for building portable images and executing isolated processes. The materials provide specific guides for managing container clusters and scaling services through Docker Swarm and overlay networks. It includes a security handbook for implementing image scanning and secret management, as well as laboratories dedicated to modernizing legacy applications by wrapping older software installers into containers. The co

Azure Docs is the official technical documentation repository for Microsoft Azure, the cloud computing platform. It provides comprehensive guidance on the full spectrum of Azure services, covering everything from core infrastructure components like virtual machines, Kubernetes clusters, and serverless computing to platform services for AI, machine learning, data analytics, and storage. The documentation details how to provision, manage, and govern cloud resources at scale, including policy enforcement, identity management, and cost optimization. The documentation distinguishes Azure through i

Bottlerocket is a container-optimized operating system and minimal Linux distribution designed specifically for hosting container workloads. It functions as an immutable infrastructure OS, utilizing a read-only root filesystem and atomic partition swapping to ensure consistent and reversible system updates. The system is distinguished by an API-driven host manager that replaces traditional shell-based configuration with a local REST API for administrative tasks. To maintain security and stability, it employs a dual-runtime isolation model that separates workload runtimes from system operation

Cross is a container-based build environment and cross-compilation tool for Rust. It functions as a multi-architecture binary builder and testing framework, allowing users to compile crates into binaries for different operating systems and CPU architectures without installing local toolchains on the host system. The project distinguishes itself by using Docker images to provide consistent toolchains and system dependencies for foreign target architectures. It integrates the Zig toolchain within container images to facilitate compilation across various architectures and library versions, and i

dockerlabs is a collection of educational labs and technical tutorials designed to teach the fundamentals of containerization and microservice architecture. It provides instructional material and hands-on exercises covering image optimization, security training, infrastructure setup, and cluster orchestration. The project features specific courses and guides focused on reducing image size through multi-stage builds, securing workloads via vulnerability scanning and encrypted networks, and deploying multi-node clusters with high availability using Swarm orchestration. The materials cover a br

SD.Next is an all-in-one web interface and multi-backend inference engine for generating, editing, and processing images and videos using diffusion models. It functions as a comprehensive tool for diffusion model management and an automated image processing pipeline for bulk operations. The project is distinguished by its hardware-backend abstraction layer, which provides automatic detection and acceleration for NVIDIA CUDA, AMD ROCm, Intel OpenVINO, and DirectML. It features a headless generative API and a programmatic command interface, allowing users to trigger tasks via REST API or CLI wi

This is an educational resource that provides a comprehensive guide to blockchain and distributed ledger technologies, covering everything from fundamental concepts to practical deployment. The guide systematically explains the core architecture of blockchain systems, including consensus-based distributed ledgers, cryptographic hash chains, Merkle trees, and smart contract execution engines, while also detailing permissioned channel architectures and modular service platforms for enterprise use. The resource distinguishes itself by offering a dual-track learning path that serves both non-tech

This project is a collection of curated and standardized Docker base images that serve as reliable starting points for building containerized applications. It functions as an OCI container image repository and a build template library, providing a central source of truth for images that adhere to Open Container Initiative standards for portability. The project utilizes an automated image lifecycle pipeline to build, tag, and push images, ensuring that dependencies remain current and security patches are applied. It specifically supports cross-platform distribution by providing a multi-archite

SSHFS-Win is a Windows implementation of SSHFS that mounts remote directories over SSH as local Windows drives, enabling seamless file access as if they were local network drives. It provides both command-line and graphical interfaces for creating, managing, and disconnecting SSHFS mounts, supporting password or SSH key authentication with optional credential storage in the Windows Credential Manager. The project extends beyond basic SSH mounting to support a wide range of remote file access scenarios, including mounting cloud storage services like Azure Blob or Amazon S3, distributed POSIX f

Dynamo is a distributed inference orchestration platform designed for large language models. It functions as a system to coordinate prefill and decode phases across GPU nodes, utilizing a multi-backend runtime adapter to connect engines like vLLM and TensorRT-LLM through a unified block-oriented memory interface. An OpenAI-compatible API server provides the frontend for integration with existing tools and clients. The project is distinguished by its disaggregated serving architecture, which separates prompt processing and token generation onto independent GPU pools to optimize throughput and

CRI-O is an open-source container runtime that implements the Kubernetes Container Runtime Interface (CRI) to manage container images, pods, and containers on cluster nodes using OCI-compatible runtimes. It serves as a node-level container manager that handles image pulling, container lifecycle, and resource monitoring for Kubernetes clusters, running containers according to the Open Container Initiative specifications. The runtime distinguishes itself through live configuration reloading that applies changes to runtime definitions, registry mirrors, and TLS certificates without restarting th

ZenML is an orchestration platform designed for building, deploying, and monitoring reproducible machine learning pipelines and agentic workflows. It provides a unified framework that manages the entire lifecycle of machine learning assets, from data processing and model training to the deployment of persistent inference services. By decoupling pipeline logic from underlying compute and storage, the platform enables teams to transition workflows seamlessly from local development environments to production-grade cloud infrastructure. The platform distinguishes itself through a service-oriented

Acest proiect oferă un plan arhitectural cuprinzător și un set de implementări pentru construirea unei platforme ca serviciu (PaaS) pe Kubernetes. Acesta servește drept resursă tehnică pentru implementarea mediilor de orchestrare a containerelor, gestionarea întregului ciclu de viață al dezvoltării software și integrarea unui toolchain DevOps complet. Implementarea pune accent pe livrarea automată de software prin integrarea pipeline-urilor de build și livrare, registre private de containere și sisteme de configurare distribuite. Permite decuplarea setărilor aplicației de imagini printr-un manager de configurare centralizat, permițând actualizări specifice mediului fără a reconstrui containerele. Platforma acoperă o gamă largă de capabilități cloud-native, inclusiv orchestrarea rețelelor de containere, gestionarea traficului la nivelul 4 și 7 și orchestrarea microserviciilor cu strategii de actualizare rolling. De asemenea, încorporează un stack complet de observabilitate pentru logare centralizată, tracing distribuit și vizualizarea metricilor de tip time-series. Proiectul este implementat în principal ca o colecție de scripturi shell și fișiere de configurare pentru a automatiza implementarea stratului de orchestrare și a serviciilor sale suport.

This project provides a collection of official base images for building and running .NET applications across various operating systems and hardware architectures. It includes standardized runtime environments, containerized development kits, and specialized images designed for isolated application execution. The collection is distinguished by its focus on image optimization and security hardening. It offers distroless images that remove shells and package managers to reduce the attack surface, as well as composite layering and ahead-of-time compilation to improve startup performance and lower

Pouch este un runtime de containere Linux și un motor de containere OCI conceput pentru a executa aplicații containerizate. Funcționează ca un runtime de containere Kubernetes, integrându-se cu orchestratoarele pentru a gestiona ciclul de viață al pod-urilor și mediile de aplicații izolate. Proiectul dispune de un sistem de distribuție a imaginilor de tip peer-to-peer pentru a livra imagini mari de containere în clustere la scară largă, reducând în același timp încărcarea lățimii de bandă. Oferă, de asemenea, suport pentru versiuni legacy de kernel Linux, permițând runtime-urilor de containere moderne să mențină compatibilitatea cu hardware-ul mai vechi. Runtime-ul implementează izolarea aplicațiilor folosind sandbox-uri bazate pe hypervisor și izolarea resurselor la nivel de kernel. Arhitectura sa include un sistem de fișiere stratificat (overlay) și un sistem de gestionare a ciclului de viață bazat pe shim, asigurând compatibilitatea cu specificațiile Open Container Initiative pentru imagini și runtime.

Strider este un server CI/CD conceput pentru a automatiza construirea, testarea și desfășurarea software-ului prin pipeline-uri de integrare și livrare continuă. Funcționează ca un sistem de build containerizat care execută sarcini în containere izolate pentru a menține medii consistente pe diferite mașini gazdă. Platforma implementează un model de configurare ca cod (configuration as code), gestionând setările proiectului și variabilele de mediu prin fișiere controlate prin versiuni pentru a asigura fluxuri de lucru reproductibile. De asemenea, se integrează cu servere de directoare externe prin LDAP pentru a gestiona identitățile utilizatorilor și permisiunile de acces administrativ. Sistemul include un API de automatizare RESTful pentru gestionarea stării interne și declanșarea pipeline-urilor prin cereri web. Suportă execuția concurentă a job-urilor pentru a reduce timpul de procesare și oferă un model de extensie bazat pe plugin-uri pentru adăugarea de hook-uri personalizate și elemente de interfață utilizator.

Jetson Containers este un sistem de gestionare a containerelor care construiește și rulează imagini Docker accelerate prin GPU pentru sarcini de învățare automată pe hardware edge ARM64. Acesta funcționează ca un orchestrator de containere CUDA, detectând automat versiunea toolkit-ului CUDA al gazdei și capabilitățile GPU pentru a asigura compatibilitatea containerului la runtime, selectând în același timp imaginea de container corectă prin potrivirea versiunii JetPack sau L4T a gazdei la momentul lansării. Proiectul livrează containere preconfigurate pentru executarea modelelor de limbaj mari cuantificate și a pipeline-urilor de generare augmentată prin recuperare (RAG) optimizate pentru dispozitive edge, alături de containere ROS și AI framework integrate pentru implementarea agenților autonomi și a procesării multimodale. Sistemul său modular de construcție pe straturi asamblează imagini Docker din straturi reutilizabile, pre-construite, compilând framework-urile AI/ML din sursă pentru a le optimiza pentru arhitecturi GPU edge specifice și versiuni CUDA, cu caching local de wheel-uri pentru a accelera construcțiile ulterioare. Platforma oferă containere Docker pre-construite cu versiuni accelerate prin GPU de PyTorch, TensorFlow, JAX și ONNX Runtime pentru platformele Jetson, suportând capabilități precum rularea LLM-urilor, modelelor de vorbire, modelelor viziune-limbaj și traducerea neuronală automată pe hardware edge. De asemenea, permite construirea de containere personalizate cu pachete AI accelerate prin GPU, rularea containerelor Triton Inference Server și Transformer Engine și accelerarea fluxurilor de lucru de știință a datelor cu bibliotecile RAPIDS.