Awesome GitHub RepositoriesCLI Control Interfaces

yabai is a tiling window manager and workspace orchestrator for macOS. It uses a binary space partitioning algorithm to automatically arrange application windows into non-overlapping rectangular regions to maximize screen real estate. The project provides a command line interface for controlling windows, displays, and virtual spaces, enabling the creation of custom desktop automation scripts. It includes capabilities for managing virtual desktops and disabling system animations to increase navigation speed. The system also supports mouse-based window focus, which automatically shifts the act

Runtipi is a home server dashboard and orchestration tool designed for deploying and managing containerized applications. It provides a web-based interface for discovering and installing software from a curated app store, utilizing a Docker Compose orchestrator to handle the deployment of self-hosted services. The system integrates a reverse proxy and SSL manager to route external traffic to internal containers, automating HTTPS certificate renewal and domain assignment. It also features a built-in backup and update manager that uses cron-based scheduling to perform automatic security patchin

Cadence is a distributed workflow orchestration engine designed to execute long-running, asynchronous business logic with built-in durability and resilience across distributed systems. It functions as a stateful process manager that ensures processes resume from their last known state following system crashes or network outages. The platform utilizes a distributed task queue to manage work across independent worker nodes and supports persistence via SQL or Cassandra backend storage. It includes a workflow visualization dashboard for inspecting execution histories and state traces, alongside a

Psst is a cross-platform Spotify music client and library manager. It functions as a desktop application for streaming music and podcasts, providing a native playback interface and tools for organizing saved albums and playlists. The project is distinguished by a client-server architecture that separates the core audio playback engine from the user interface. This allows for dual-interface state sharing, where a graphical user interface and a dedicated command-line interface can simultaneously control the same playback session. The application covers audio streaming with loudness normalizati

ExternalDNS is a controller that automatically synchronizes Kubernetes resource states with external DNS providers. It monitors cluster resources such as services, ingresses, and gateway APIs to dynamically create and update DNS records, enabling automated service discovery and external traffic management. The project features a provider-agnostic interface that supports a wide array of cloud-managed vendors and on-premises providers, as well as an extension system for custom providers via webhooks and sidecars. It implements a reconciliation loop that uses resource annotations and custom reso

Concourse is a container-based continuous integration and delivery platform that functions as a distributed build system. It operates as a declarative pipeline orchestrator, using a central controller and multiple worker nodes to execute concurrent tasks within isolated containers. The system distinguishes itself by executing every build step in a separate container to ensure environment consistency and by defining software delivery sequences through portable, versionable configuration files. It provides a web-based pipeline visualizer to display the real-time status and progress of automated

Rancher Desktop is a cross-platform desktop application for Windows and macOS that provides a graphical interface for managing local containers and Kubernetes clusters. It serves as a local development environment for running and coordinating containerized workloads on a personal workstation. The project features a pluggable container engine, allowing users to switch between different runtimes such as containerd or Docker within a single interface. It automates the provisioning of local Kubernetes distributions to facilitate the development and testing of orchestration environments. The appl

Civitai is a platform for generative media creation and AI model distribution. It provides a centralized service for producing images, videos, audio, and music, while serving as a repository where users can share, discover, and browse custom model weights and fine-tuned adaptations. The platform distinguishes itself through a provider-agnostic orchestration layer that manages multi-step generation pipelines and complex workflows across different backends. It integrates with autonomous AI agents and editors via the Model Context Protocol, allowing external tools to access generation pipelines

Blocky is a stateless DNS proxy that functions as a network-wide ad-blocker and content filter. It operates as a single binary or Docker container with no database or persistent state, accepting DNS queries over UDP, TCP, HTTPS, TLS, QUIC, and HTTP/3 through a unified plugin-based query pipeline. The core of the system is a client-group policy engine that assigns devices to named groups and applies per-group blocklists, allowlists, and upstream resolvers, with all configuration changes applied through hot-reloading without requiring a restart. The project distinguishes itself through its modu

Microsandbox is a runtime for creating and managing lightweight, hardware-isolated virtual machines — called sandboxes — that boot directly from standard OCI container images. Each sandbox runs as its own host process with a separate kernel, filesystem, and network stack, providing process-per-sandbox isolation. The project includes a command-line tool and multi-language SDKs (Rust, TypeScript, Python, Go) for programmatic lifecycle control, and it communicates with sandbox agents over Unix sockets using a CBOR-encoded protocol. What distinguishes Microsandbox is its combination of host-manag

CodeIgniter is a PHP web framework built on the Model-View-Controller pattern, designed for building full-stack web applications. It provides a lightweight toolkit with minimal configuration, organizing application logic into controllers, models, and views for clean separation of concerns. The framework includes a fluent query builder for constructing SQL statements programmatically, PSR-4 autoloading with namespace mapping, and a service-based dependency injection container for managing shared class instances. The framework distinguishes itself through its comprehensive set of built-in tools

Karmada 是一个 Kubernetes 多集群编排器和多云集群管理器，旨在跨多个集群和云提供商部署和管理云原生应用。它作为一个集中式控制平面，充当资源传播器和工作负载调度器，协调跨公有云、本地数据中心和边缘位置的资源。 该项目通过基于策略的引擎脱颖而出，该引擎使用亲和性、拓扑约束和资源配额来分发应用。它为多区域灾难恢复提供特定功能，包括自动应用故障转移和地理冗余部署，以保持服务可用性。此外，它还允许进行集群感知的资源覆盖，以根据目标集群区域或提供商专门配置参数。 该系统涵盖广泛的运营领域，包括双向状态同步、聚合 API 代理和多维调度。它包括用于集群生命周期管理、全局资源搜索和跨集群流量平衡的工具。 安装和管理可以通过基于 Operator 的安装过程以及用于管理和控制平面操作的专用命令行界面来执行。

TransformerLab 是一个 MLOps 编排平台和研究环境，专为大语言模型的训练、微调和评估而设计。它作为中央控制平面，用于管理机器学习任务，并协调跨混合云和本地提供商的分布式 GPU 计算。 该平台的特色在于代理驱动的模型优化，利用 AI 助手分析指标并自动提出和排队超参数实验。它提供了一个远程开发环境，允许用户直接在远程计算节点上启动交互式 Notebook、代码编辑器和 SSH 会话。 该系统涵盖了广泛的机器学习工作流功能，包括分布式任务协调、自动化超参数搜索和全面的实验跟踪。它具有用于版本化数据集和模型制品的集成注册表，以及用于模型性能评估和推理服务器部署的工具。 平台提供了命令行界面，用于平台控制、任务监控以及管理本地服务器实例的安装和更新。

Nameko 是一个用于构建分布式系统的 Python 微服务框架。它作为 RPC 通信框架和事件驱动架构工具，利用消息代理实现服务组件间的解耦。 该框架提供了一个多协议网关，通过 HTTP 端点和 WebSocket 将内部微服务逻辑暴露给外部客户端。它支持请求-响应消息交换以及异步事件广播，以维护分布式系统中的数据一致性。 系统包含用于控制和交互服务的命令行界面，以及用于分布式服务逻辑单元测试和集成测试的实用工具。

microsandbox is a platform that runs untrusted code inside hardware-isolated microVMs, each with its own kernel, filesystem, and network stack. It boots directly from standard OCI container images, supports copy-on-write filesystem layers, and integrates with AI agents to execute tool calls and generated code in isolated environments with secret protection. What sets microsandbox apart is its host-side network proxy that enforces firewall rules, intercepts DNS, inspects TLS traffic, and injects secrets at the network boundary without exposing them inside the VM. It provides SSH access to micr

这是一个多提供商动态 DNS 客户端和同步器，可监控本地 IPv4 和 IPv6 地址，并自动更新各云提供商的 DNS 记录。它作为 IP 地址监控工具和网络 IP 更新 Webhook，确保域名始终指向当前网络地址。 该系统通过广泛的原生提供商集成脱颖而出，包括 Cloudflare、AliDNS、DNSPod、华为云和 HE.net。除了简单的记录更新外，它还允许管理 CDN 代理状态、TTL 时长和区域路由线路，同时支持自定义 HTTP Webhook，以便在检测到 IP 更改时触发外部通知。 其功能面包括通过 API 查询和 shell 命令进行的公共 IP 发现、用于防止冗余 API 调用的本地状态缓存，以及通过 cron 表达式或系统原生任务管理器进行的自动化调度。它还通过环境变量、JSON 文件和远程 HTTP URL 提供灵活的配置。

ClashMac is a macOS network proxy manager and graphical user interface client for the Clash core. It serves as a system tool for controlling network traffic routing, managing proxy nodes, and organizing network subscriptions. The project distinguishes itself through an interactive network traffic visualizer that renders real-time data flows and multi-hop proxy connection paths on a global map. It also includes a command line network controller that provides machine-readable data for custom scripting and network automation. The software covers broad capability areas including rule-based traff

Uncloud is a decentralized container orchestrator designed to deploy and manage applications across multiple servers without a central control plane. It functions as a peer-to-peer system and a Docker Compose cluster deployer, using SSH-based infrastructure management to coordinate operations across remote nodes. The project distinguishes itself by using a secure mesh network overlay to enable direct inter-container communication across different physical machines. It facilitates container image distribution by transferring missing layers directly from local environments to target nodes, bypa

snarkOS 是一个分布式运行时环境和零知识证明区块链，专为部署和管理依赖于零知识密码原语的应用程序而设计。它作为一个去中心化账本，使用零知识证明来验证状态转换和交易，而无需泄露私有数据。 该系统利用绑定账户共识网络，验证者锁定资产作为抵押品以保护全局状态。它具有加密状态账本以私密地跟踪应用程序数据，以及 GPU 加速的证明器，将繁重的密码计算卸载到图形硬件以提高证明速度。 该项目提供了一个基于角色的节点层次结构，包括验证者、核心和证明者节点。其能力涵盖去中心化节点操作、点对点网络同步以及加密应用程序状态的管理。其他工具包括用于节点控制的命令行界面、用于监控共识参与的遥测，以及引导本地开发网络的能力。

该项目是一个 Linux WiFi 热点管理器，提供图形用户界面和命令行工具，用于创建无线接入点和共享互联网连接。它充当网络接口共享器和接入点控制器，将连接从任何网络接口分发给无线客户端。 该软件的独特之处在于包含一个 VPN 流量路由器，通过虚拟网络接口隧道传输热点流量，以提供安全连接。它还具有生成用于共享连接详情的二维码的实用程序，允许设备无需手动输入密码即可加入网络。 该工具涵盖全面的网络管理，包括 DHCP 和 DNS 分配、SSID 和信道配置以及连接设备的实时监控。安全性通过 MAC 地址访问控制和无线客户端隔离来处理，以防止连接设备之间的通信。 该项目包含一个构建系统，使用容器将软件编译为 Debian 软件包，以确保构建环境的一致性。