Awesome GitHub RepositoriesInstance Volume Mounts

Microsandbox is a runtime for creating and managing lightweight, hardware-isolated virtual machines — called sandboxes — that boot directly from standard OCI container images. Each sandbox runs as its own host process with a separate kernel, filesystem, and network stack, providing process-per-sandbox isolation. The project includes a command-line tool and multi-language SDKs (Rust, TypeScript, Python, Go) for programmatic lifecycle control, and it communicates with sandbox agents over Unix sockets using a CBOR-encoded protocol. What distinguishes Microsandbox is its combination of host-manag

LXD is a unified platform for managing both system containers and virtual machines through a single REST API and command-line interface. It provides a programmatic HTTP interface for controlling the full lifecycle of instances, enabling automation and integration with external tools. The system runs unprivileged containers with per-instance UID/GID mappings, seccomp filters, and AppArmor profiles for kernel-level isolation, while supporting multiple storage backends including directory, Btrfs, LVM, ZFS, Ceph, LINSTOR, and TrueNAS through a unified driver interface. The platform distinguishes

ZenML is an orchestration platform designed for building, deploying, and monitoring reproducible machine learning pipelines and agentic workflows. It provides a unified framework that manages the entire lifecycle of machine learning assets, from data processing and model training to the deployment of persistent inference services. By decoupling pipeline logic from underlying compute and storage, the platform enables teams to transition workflows seamlessly from local development environments to production-grade cloud infrastructure. The platform distinguishes itself through a service-oriented

本项目作为官方 Docker 镜像的文档中心和规范仓库。它作为一个元数据驱动的文档生成器，将结构化内容文件转换为 Markdown 文件和 Readme，以供公开发布。 该仓库提供了用于跨多种 CPU 架构部署容器化软件的技术指南和配置标准。它包括用于配置环境变量、卷挂载和网络设置的详细手册，以确保一致的镜像部署。 该文档涵盖了广泛的容器化环境，包括各种 Linux 发行版和最小化 Unix 环境。它详细介绍了数据库实例、Java 运行时和内容管理系统的部署，重点在于轻量级容器优化和数据持久化。 该项目使用自动化验证在发布前根据格式标准检查 Markdown 和 YAML 源文件。

Opserver 是一个跨平台监控服务器和基础设施仪表板，旨在跟踪系统健康状况、性能指标和后端服务可用性。它作为一个外部指标聚合器和企业级健康监控工具，将来自第三方监控源的数据集中到一个视图中。 该系统与 PagerDuty 等事件响应服务集成，以映射用户身份并管理通知工作流。它还连接到外部目录和身份提供商，以处理用户身份验证和权限分配。 该平台涵盖了多个核心能力领域，包括独立实例和集群的数据库可用性跟踪、异常日志的应用程序错误跟踪，以及网络服务后端的管理。它支持基于网络范围的访问控制，允许特定公共网络范围无需身份验证即可访问仪表板。 该应用程序以独立可执行文件或容器镜像的形式分发，可部署在 Windows、macOS 和 Linux 上。

Whalebrew 是一个容器化包管理器和别名管理器，将 Docker 镜像封装为可执行的系统命令。它作为一个容器运行时编排器，将特定镜像映射为具有原生行为的二进制文件，使用户无需手动输入容器引擎字符串即可运行容器化应用。 该系统利用包装器工具将主机命令映射到镜像入口点。它提供了安装、更新和删除这些映射的工具，并包含一个在已配置的注册表中定位可用镜像的搜索机制。 该工具通过注入主机环境变量和将主机文件系统路径映射到容器卷来管理运行时环境。它还支持已安装包的版本管理，并利用生命周期钩子在安装或删除别名时执行脚本。

Unikraft is a modular library operating system and unikernel framework designed to compile applications into minimal, bootable virtual machine images. It serves as an OCI-compliant image builder and a cloud-native hypervisor target, enabling the creation of specialized runtimes that include only the specific drivers and libraries required by a single application. The system features a Linux compatibility layer that maps standard API calls and POSIX standards to unikernel libraries, allowing unmodified binaries to run without a full general-purpose kernel. It distinguishes itself by allowing c

Jenkinsfile runner is a continuous integration engine that executes declarative workflows and pipeline scripts directly from the command line or container environments without requiring a persistent master server. It provides terminal-based execution tools for running, testing, and linting pipeline definitions locally, supporting build parameter passing, interactive shell sessions, and source control checkout configurations with authentication for private repositories. The system supports declarative instance configuration through mounted YAML files, automatic dependency resolution, and on-de