4 repository-uri
Awesome GitHub RepositoriesRootless Execution
Running a container daemon without administrative or root privileges.
Distinct from Container Daemon Security: Specifically focuses on the unprivileged execution of the daemon itself, rather than just API access security
Explore 4 awesome GitHub repositories matching security & cryptography · Rootless Execution. Refine with filters or upvote what's useful.
Awesome Rootless Execution GitHub Repositories
Găsește cele mai bune repo-uri cu AI.Vom căuta cele mai potrivite repository-uri folosind AI.
- moby/moby
moby/moby
71,729Vezi pe GitHubMoby is an OCI container engine and runtime manager designed for building, running, and managing isolated containers based on Open Container Initiative standards. It functions as a container daemon and image builder, providing a core engine to orchestrate the full lifecycle of containers and the packaging of source code into portable images. The project provides a standardized HTTP interface that allows for programmatic container management, enabling external clients to control daemon settings and container operations. It supports a rootless security model, allowing the engine daemon to execu
Enables the container engine daemon to execute without root privileges to reduce the host security attack surface.
Gocontainersdockergo - moby/buildkit
moby/buildkit
10,061Vezi pe GitHubBuildkit is a programmable container build toolkit and OCI container image builder that converts build definitions into concurrent dependency graphs for image construction. It functions as an OCI image distribution engine, capable of generating container images and exporting artifacts to local storage or remote registries. The project is distinguished by its use of a low-level binary intermediate representation to decouple high-level build languages from the execution engine. It supports multi-platform image builds through user-mode architecture emulation and provides a distributed build cach
Provides the ability to run the build daemon without administrative or root privileges to enhance security.
Gobuilderbuildkitcloud-native - containers/buildah
containers/buildah
8,618Vezi pe GitHubBuildah is a tool for creating OCI-compliant container images without requiring a background daemon process. It functions as a daemonless image constructor and distribution tool, allowing users to build, push, and pull images between local storage and remote registries. The project distinguishes itself by supporting unprivileged image building through the use of user namespaces and rootless mode. It enables direct modification of container root filesystems by mounting them to the host, allowing images to be treated as directories that can be manipulated via standard shell commands or scripts.
Enables image creation without root privileges by utilizing user namespaces and rootless mode.
Gocontainercontainer-imagecontainers - runfinch/finch
runfinch/finch
4,036Vezi pe GitHubFinch is a virtual machine-based container runtime and OCI container management CLI used for local container development. It operates by running container workloads inside a background virtual machine to isolate them from the host operating system. The project serves as an OCI image builder and a multi-container service orchestrator for simulating complex production environments on a workstation. The runtime functions as a cross-platform container engine, utilizing emulation layers to execute container images built for foreign CPU architectures. It distinguishes its image distribution through
Configures socket access and group permissions to operate the container engine without administrative or root privileges.
Gocontainerdcontainerslima-vm
