Awesome GitHub RepositoriesRuntime Memory Limits

The Operator SDK is a framework for building, packaging, and managing custom controllers that extend the Kubernetes API. It serves as a toolset for defining new API types and implementing reconcile loops to automate the lifecycles of complex applications. The project provides specialized support for creating operators based on Helm charts or Ansible playbooks, allowing users to maintain a desired cluster state using existing automation tools. It includes a dedicated system for packaging controllers into standardized container image bundles for distribution via the Operator Lifecycle Manager.

Gopher-lua is a complete implementation of the Lua language and its standard libraries written natively in Go. It serves as an embedded scripting engine and virtual machine that allows Go applications to execute Lua scripts and exchange data between the host and the script environment. The project provides a bytecode compiler to transform source code into a binary format for faster execution. It enables deep integration between the two languages by allowing the registration of native Go functions to be called from scripts, and the invocation of script functions directly from Go. The engine c

Suricata is an open-source network intrusion detection and prevention engine that analyzes live network traffic in real-time to identify and alert on malicious activity. It operates as a rule-based threat detection system, matching traffic against user-defined signatures to detect known attack patterns and policy violations, and can be placed inline to actively block malicious packets before they reach their target. The engine inspects a wide range of application-layer protocols including HTTP, DNS, TLS, SMB, and MQTT, and supports high-performance packet capture through specialized hardware a

GreptimeDB is a distributed, open-source time-series database built for unified observability. It stores and queries metrics, logs, and traces together in a single columnar engine, supporting both SQL and PromQL for analysis. The database is designed as a Kubernetes-native operator with a decoupled compute and storage architecture, enabling horizontal scaling and multi-region deployment. What distinguishes GreptimeDB is its role as a multi-protocol ingestion gateway, accepting data through OpenTelemetry, Prometheus Remote Write, InfluxDB, Loki, Elasticsearch, Kafka, and MQTT protocols without

CRI-O is an open-source container runtime that implements the Kubernetes Container Runtime Interface (CRI) to manage container images, pods, and containers on cluster nodes using OCI-compatible runtimes. It serves as a node-level container manager that handles image pulling, container lifecycle, and resource monitoring for Kubernetes clusters, running containers according to the Open Container Initiative specifications. The runtime distinguishes itself through live configuration reloading that applies changes to runtime definitions, registry mirrors, and TLS certificates without restarting th

LXD is a unified platform for managing both system containers and virtual machines through a single REST API and command-line interface. It provides a programmatic HTTP interface for controlling the full lifecycle of instances, enabling automation and integration with external tools. The system runs unprivileged containers with per-instance UID/GID mappings, seccomp filters, and AppArmor profiles for kernel-level isolation, while supporting multiple storage backends including directory, Btrfs, LVM, ZFS, Ceph, LINSTOR, and TrueNAS through a unified driver interface. The platform distinguishes

CPython-Internals este un ghid tehnic de implementare și referință pentru interpretorul CPython. Oferă o analiză detaliată a codului sursă C intern și a arhitecturii, concentrându-se pe logica care guvernează comportamentul interpretorului. Proiectul documentează modelul de obiecte Python și pipeline-ul de compilare, urmărind procesul de la gramatica brută și arborii de sintaxă abstractă până la bytecode-ul executabil. De asemenea, servește ca referință pentru dezvoltarea extensiilor C, explicând cum să interfațați cu structurile de date interne și să utilizați API-ul C. Materialul acoperă gestionarea memoriei, inclusiv numărarea referințelor și garbage collection-ul generațional, precum și funcția global interpreter lock (GIL).

Incus is a unified orchestration platform for managing system containers, OCI application containers, and virtual machines through a single control plane. It brings together cluster infrastructure management, secure multi-tenancy, software-defined networking, and pluggable storage backend orchestration into one cohesive system exposed via a full REST API and command-line interface. What distinguishes Incus is its ability to run multiple instance types side by side—full Linux system containers, OCI application containers, and QEMU virtual machines—all managed with consistent tooling. Networkin

goflyway is an encrypted traffic relay and HTTP TCP tunneling proxy. It encapsulates TCP traffic within HTTP POST or WebSocket requests to bypass restrictive firewalls and network proxies. The system provides a SOCKS5 proxy server that routes traffic via a WebSocket relay and includes a UDP over TCP tunnel to enable transport across networks that block UDP traffic. It also functions as a TCP traffic interceptor for capturing and inspecting data passing through relayed connections. Capabilities cover network tunneling and traffic proxying through various transport protocols, including HTTP PO

This project is a C language interpreter and a practical implementation of a programming language. It parses and executes C source code directly, removing the requirement for a separate compilation step. The interpreter is designed for self-hosting, meaning it is capable of interpreting its own source code to demonstrate recursive language processing and execution. The system covers the primary stages of language processing, including lexical analysis, recursive descent parsing, and tree-walk interpretation using an abstract syntax tree. It manages memory and scope through a dynamic symbol t

MiniOB is an open-source educational relational database kernel designed for learning the internals of database systems. It implements a dual-engine storage architecture combining B+ Tree and LSM-Tree, supports SQL parsing and query execution, and provides transactional processing with multi-version concurrency control. The system communicates with clients using the MySQL wire protocol and includes a vector database extension for storing and querying high-dimensional vectors. The project distinguishes itself through its comprehensive coverage of core database concepts in a single, learnable c

earlyoom este un daemon Linux OOM killer care monitorizează memoria sistemului și termină procesele pentru a preveni blocarea sistemului. Acționează ca un monitor de resurse de memorie și manager de terminare a proceselor, urmărind RAM-ul disponibil și spațiul swap pentru a se asigura că sistemul de operare rămâne receptiv. Proiectul se distinge prin selectarea țintelor de terminare pe baza celei mai mari dimensiuni a setului rezident (resident set size), în loc să se bazeze doar pe scorurile OOM ale kernel-ului. Oferă un control granular prin filtrarea proceselor bazată pe expresii regulate pentru a proteja aplicații specifice și poate termina grupuri întregi de procese pentru a asigura curățarea completă a aplicațiilor. Sistemul include un framework de notificare care trimite alerte d-bus atunci când memoria atinge praguri critice și suportă hook-uri de terminare personalizate. Aceste hook-uri permit execuția de scripturi și binare externe înainte sau după ce un proces este terminat. De asemenea, se integrează cu OOM killer-ul nativ al kernel-ului Linux pentru a amâna selectarea victimei către OS atunci când este solicitat. Daemon-ul extrage statistici despre procese și date despre memorie prin parsarea pseudo-sistemului de fișiere al kernel-ului și înregistrează evenimentele operaționale prin logarea evenimentelor de sistem.

Memgraph is an in-memory, distributed graph database designed for high-performance labeled property graph management. It utilizes a Cypher query engine for declarative data retrieval and manipulation, providing a scalable knowledge graph backend that integrates vector search and graph traversals. The system distinguishes itself as a real-time graph analytics platform, employing native C++ and CUDA implementations to execute complex network analysis and dynamic community detection on streaming data. It provides specialized support for AI integration, including GraphRAG capabilities, the constr

Uptrace is an OpenTelemetry-based observability platform designed to collect, store, and analyze distributed traces, metrics, and logs. It functions as a centralized logging backend, a distributed tracing system, and a metrics engine to monitor application performance and system health. The platform is distinguished by AI-powered operational capabilities, allowing users to query telemetry data and manage monitoring dashboards using natural language. It specifically includes specialized monitoring for generative AI pipelines, tracking token usage and response quality for LLM interactions and r

dn este o arhivă locală de date de browser și un arhivator web conceput pentru a salva și reda pagini web din browserele Chromium pentru vizualizare offline și stocare permanentă. Funcționează ca un repository auto-găzduit pentru istoricul de navigare și conținutul paginilor, operând ca un server de conținut web offline care găzduiește datele salvate ca și cum site-urile originale ar fi încă online. Sistemul include un motor de căutare full-text care indexează toate paginile web salvate, permițând recuperarea instantanee a informațiilor specifice din întreaga colecție locală. Utilizează un sistem de filtrare bazat pe domeniu pentru a bloca adresele site-urilor web specifice de la a fi arhivate printr-o listă neagră. Proiectul acoperă servirea conținutului local prin randarea paginilor bazată pe Chromium și oglindirea web a sistemului de fișiere pentru a menține layout-urile vizuale originale. De asemenea, oferă instrumente pentru gestionarea resurselor sistemului, cum ar fi alocarea limitelor de stocare și memorie pentru arhivă.

Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o