Awesome GitHub RepositoriesLinux Container Managers

This project is a Docker educational resource and a collection of practical examples designed for learning containerization technologies. It serves as a guide for understanding container fundamentals, including the creation and management of custom images and the use of registries. The repository provides specialized references for container security hardening, such as managing kernel privileges and implementing supply chain security. It also includes tutorials for multi-container orchestration and a DevOps guide focused on CI/CD automation and image optimization. The material covers a broad

Bocker is a minimal container management tool written in Bash that implements core container functionality using Linux namespaces and control groups. It serves as a Linux container manager capable of starting and managing isolated processes and images through low-level kernel features. The project includes an OCI image tool for pulling, saving, and building container images compatible with industry standards. It further integrates a cgroup resource controller to restrict CPU and memory consumption for isolated processes. The tool covers the full container lifecycle, including process isolati

rkt is a pod-native container engine and runtime for Linux that executes containerized applications as isolated pods. It serves as an OCI container runtime and a Linux container manager, supporting the execution of images based on Open Container Initiative, appc, and Docker specifications. The project distinguishes itself by offering hardware-level container isolation, allowing pods to run within virtual machines using KVM or QEMU for a dedicated kernel. It further separates itself through secure container deployment practices, utilizing SELinux mandatory access control and TPM-backed integri

rkt 是一个安全的 Linux 容器引擎和 Pod 原生容器管理器。它提供了一个可组合的执行环境，用于在 Linux 上启动和管理隔离的应用程序容器，作为一个围绕镜像格式和网络接口的开放行业标准设计的运行时。 该系统以 Pod 原生执行模型为特色，将多个容器和共享资源分组为单个、自包含的单元。它利用可插拔的执行引擎提供安全隔离，包括使用基于硬件的虚拟化在主机系统和运行中的应用程序之间创建安全边界。 该项目涵盖了容器管理的广泛功能，包括符合 OCI 标准的镜像执行和基于 CNI 的网络。它还提供与集群编排器和系统初始化工具的集成，以管理跨分布式环境的工作负载。

Containerization is a Swift-based framework that runs Linux containers in lightweight virtual machines on Apple Silicon Macs. It provides a native container runtime for macOS, enabling developers to execute Linux containers directly on their Apple Silicon hardware without requiring a separate Linux environment or Docker Desktop. The framework supports custom Linux kernel injection, allowing users to provide their own kernel images and select per-container kernel versions and configurations. It includes an ext4 filesystem image builder for creating root filesystems from scratch, and an OCI ima

Docker CE 是一个符合 OCI 标准的容器平台和运行时引擎，用于在隔离环境中构建和运行应用。它作为一个 Linux 容器编排器，并提供了一个命令行界面来管理运行中应用实例的整个生命周期。 该平台通过将软件及其依赖项打包，实现了容器化应用部署和跨平台软件分发。它支持微服务架构管理和可重现的本地开发环境的创建。 该系统包括应用生命周期编排功能，允许用户启动、停止和检查容器。它还提供了管理隔离容器的工具，以确保跨不同计算基础设施的一致行为。

LXC is an OS-level virtualization framework and Linux container manager used to run multiple isolated Linux systems on a single host. It functions as a kernel namespace orchestrator and unprivileged container runtime, allowing for the creation and management of system containers without the overhead of a hypervisor. The project provides unprivileged container execution by mapping container root users to unprivileged host users to prevent host system access. It ensures security through system call filtering and root user isolation, enabling containers to run without requiring host root privile

Incus is a unified orchestration platform for managing system containers, OCI application containers, and virtual machines through a single control plane. It brings together cluster infrastructure management, secure multi-tenancy, software-defined networking, and pluggable storage backend orchestration into one cohesive system exposed via a full REST API and command-line interface. What distinguishes Incus is its ability to run multiple instance types side by side—full Linux system containers, OCI application containers, and QEMU virtual machines—all managed with consistent tooling. Networkin

LXD is a system container manager and virtual machine manager that provides a unified interface for running full Linux systems. It acts as a container cluster orchestrator, an image format converter, and an infrastructure manager that exposes control through a REST API and language-specific SDKs. The project distinguishes itself by providing a unified container and virtual machine abstraction, treating both as generic instances within a single management layer. It supports distributed cluster coordination to synchronize state and distribute workloads across multiple physical nodes. The syste