Awesome GitHub RepositoriesContainer Execution

This project is a Docker educational resource and a collection of practical examples designed for learning containerization technologies. It serves as a guide for understanding container fundamentals, including the creation and management of custom images and the use of registries. The repository provides specialized references for container security hardening, such as managing kernel privileges and implementing supply chain security. It also includes tutorials for multi-container orchestration and a DevOps guide focused on CI/CD automation and image optimization. The material covers a broad

Agent Zero is an LLM agent framework and multi-agent orchestrator that provides an AI-powered interface for operating system tasks. It functions as a containerized AI workspace, allowing large language models to interact with a filesystem and terminal within an isolated Linux environment. The system distinguishes itself through a hierarchical orchestration model that decomposes complex goals by spawning specialized sub-agents to collaborate and consolidate results. It features a plugin-based architecture for extending capabilities via a community plugin hub, a custom skills system, and extern

This project is a comprehensive collection of tutorials and guided laboratories designed to teach containerization, networking, and security using Docker. It serves as a learning path for building portable images and executing isolated processes. The materials provide specific guides for managing container clusters and scaling services through Docker Swarm and overlay networks. It includes a security handbook for implementing image scanning and secret management, as well as laboratories dedicated to modernizing legacy applications by wrapping older software installers into containers. The co

Azure Docs is the official technical documentation repository for Microsoft Azure, the cloud computing platform. It provides comprehensive guidance on the full spectrum of Azure services, covering everything from core infrastructure components like virtual machines, Kubernetes clusters, and serverless computing to platform services for AI, machine learning, data analytics, and storage. The documentation details how to provision, manage, and govern cloud resources at scale, including policy enforcement, identity management, and cost optimization. The documentation distinguishes Azure through i

Bottlerocket is a container-optimized operating system and minimal Linux distribution designed specifically for hosting container workloads. It functions as an immutable infrastructure OS, utilizing a read-only root filesystem and atomic partition swapping to ensure consistent and reversible system updates. The system is distinguished by an API-driven host manager that replaces traditional shell-based configuration with a local REST API for administrative tasks. To maintain security and stability, it employs a dual-runtime isolation model that separates workload runtimes from system operation

Cross is a container-based build environment and cross-compilation tool for Rust. It functions as a multi-architecture binary builder and testing framework, allowing users to compile crates into binaries for different operating systems and CPU architectures without installing local toolchains on the host system. The project distinguishes itself by using Docker images to provide consistent toolchains and system dependencies for foreign target architectures. It integrates the Zig toolchain within container images to facilitate compilation across various architectures and library versions, and i

dockerlabs is a collection of educational labs and technical tutorials designed to teach the fundamentals of containerization and microservice architecture. It provides instructional material and hands-on exercises covering image optimization, security training, infrastructure setup, and cluster orchestration. The project features specific courses and guides focused on reducing image size through multi-stage builds, securing workloads via vulnerability scanning and encrypted networks, and deploying multi-node clusters with high availability using Swarm orchestration. The materials cover a br

SD.Next is an all-in-one web interface and multi-backend inference engine for generating, editing, and processing images and videos using diffusion models. It functions as a comprehensive tool for diffusion model management and an automated image processing pipeline for bulk operations. The project is distinguished by its hardware-backend abstraction layer, which provides automatic detection and acceleration for NVIDIA CUDA, AMD ROCm, Intel OpenVINO, and DirectML. It features a headless generative API and a programmatic command interface, allowing users to trigger tasks via REST API or CLI wi

This is an educational resource that provides a comprehensive guide to blockchain and distributed ledger technologies, covering everything from fundamental concepts to practical deployment. The guide systematically explains the core architecture of blockchain systems, including consensus-based distributed ledgers, cryptographic hash chains, Merkle trees, and smart contract execution engines, while also detailing permissioned channel architectures and modular service platforms for enterprise use. The resource distinguishes itself by offering a dual-track learning path that serves both non-tech

This project is a collection of curated and standardized Docker base images that serve as reliable starting points for building containerized applications. It functions as an OCI container image repository and a build template library, providing a central source of truth for images that adhere to Open Container Initiative standards for portability. The project utilizes an automated image lifecycle pipeline to build, tag, and push images, ensuring that dependencies remain current and security patches are applied. It specifically supports cross-platform distribution by providing a multi-archite

SSHFS-Win is a Windows implementation of SSHFS that mounts remote directories over SSH as local Windows drives, enabling seamless file access as if they were local network drives. It provides both command-line and graphical interfaces for creating, managing, and disconnecting SSHFS mounts, supporting password or SSH key authentication with optional credential storage in the Windows Credential Manager. The project extends beyond basic SSH mounting to support a wide range of remote file access scenarios, including mounting cloud storage services like Azure Blob or Amazon S3, distributed POSIX f

Dynamo is a distributed inference orchestration platform designed for large language models. It functions as a system to coordinate prefill and decode phases across GPU nodes, utilizing a multi-backend runtime adapter to connect engines like vLLM and TensorRT-LLM through a unified block-oriented memory interface. An OpenAI-compatible API server provides the frontend for integration with existing tools and clients. The project is distinguished by its disaggregated serving architecture, which separates prompt processing and token generation onto independent GPU pools to optimize throughput and

CRI-O is an open-source container runtime that implements the Kubernetes Container Runtime Interface (CRI) to manage container images, pods, and containers on cluster nodes using OCI-compatible runtimes. It serves as a node-level container manager that handles image pulling, container lifecycle, and resource monitoring for Kubernetes clusters, running containers according to the Open Container Initiative specifications. The runtime distinguishes itself through live configuration reloading that applies changes to runtime definitions, registry mirrors, and TLS certificates without restarting th

ZenML is an orchestration platform designed for building, deploying, and monitoring reproducible machine learning pipelines and agentic workflows. It provides a unified framework that manages the entire lifecycle of machine learning assets, from data processing and model training to the deployment of persistent inference services. By decoupling pipeline logic from underlying compute and storage, the platform enables teams to transition workflows seamlessly from local development environments to production-grade cloud infrastructure. The platform distinguishes itself through a service-oriented

该项目为在 Kubernetes 上构建平台即服务（PaaS）提供了全面的架构蓝图和实现集。它作为部署容器编排环境、管理完整软件开发生命周期以及集成完整 DevOps 工具链的技术资源。 该实现强调通过集成构建和交付流水线、私有容器镜像仓库以及分布式配置系统来实现自动化软件交付。它通过集中式配置管理器实现了应用程序设置与镜像的解耦，从而允许在不重建容器的情况下进行特定于环境的更新。 该平台涵盖了广泛的云原生功能，包括容器网络编排、第 4 层和第 7 层流量管理以及具有滚动更新策略的微服务编排。它还整合了用于集中式日志记录、分布式追踪和时序指标可视化的完整可观测性栈。 该项目主要实现为一组 Shell 脚本和配置文件，用于自动化编排层及其支持服务的部署。

This project provides a collection of official base images for building and running .NET applications across various operating systems and hardware architectures. It includes standardized runtime environments, containerized development kits, and specialized images designed for isolated application execution. The collection is distinguished by its focus on image optimization and security hardening. It offers distroless images that remove shells and package managers to reduce the attack surface, as well as composite layering and ahead-of-time compilation to improve startup performance and lower

Pouch is a Linux container runtime and OCI container engine designed to execute containerized applications. It functions as a Kubernetes container runtime, integrating with orchestrators to manage the lifecycle of pods and isolated application environments. The project features a peer-to-peer image distribution system to deliver large container images across large-scale clusters while reducing bandwidth load. It also provides support for legacy Linux kernel versions, allowing modern container runtimes to maintain compatibility with older hardware. The runtime implements application isolation

Strider 是一个 CI/CD 服务器，旨在通过持续集成和交付流水线自动化软件的构建、测试和部署。它作为一个容器化构建系统，在隔离的容器内执行任务，以在不同宿主机器上保持一致的环境。 该平台实现了配置即代码模型，通过版本控制文件管理项目设置和环境变量，以确保可重现的工作流。它还通过 LDAP 与外部目录服务器集成，以管理用户身份和管理访问权限。 该系统包含一个用于管理内部状态并通过 Web 请求触发流水线的 RESTful 自动化 API。它支持并发作业执行以减少处理时间，并提供用于添加自定义钩子和用户界面元素的基于插件的扩展模型。

Jetson Containers 是一个容器管理系统，用于在 ARM64 边缘硬件上构建和运行用于机器学习工作负载的 GPU 加速 Docker 镜像。它作为一个 CUDA 容器编排器，在运行时自动检测主机的 CUDA 工具包版本和 GPU 功能以确保容器兼容性，同时在启动时通过匹配主机的 JetPack 或 L4T 版本来选择正确的容器镜像。 该项目提供预配置的容器，用于执行针对边缘设备优化的量化大语言模型和检索增强生成管道，以及用于部署自主代理和多模态处理的集成 ROS 和 AI 框架容器。其模块化分层构建系统从可重用的预构建层组装 Docker 镜像，从源码编译 AI/ML 框架以针对特定的边缘 GPU 架构和 CUDA 版本进行优化，并使用本地 wheel 缓存来加速后续构建。 该平台提供带有 GPU 加速版 PyTorch、TensorFlow、JAX 和 ONNX Runtime 的预构建 Docker 容器，支持在边缘硬件上运行 LLM、语音模型、视觉语言模型和神经机器翻译等功能。它还支持构建带有 GPU 加速 AI 包的自定义容器，运行 Triton Inference Server 和 Transformer Engine 容器，并使用 RAPIDS 库加速数据科学工作流。