Projects sharing features with Rancher Os

This project is an Arch Linux-based operating system designed specifically for handheld gaming consoles. It functions as an immutable Linux distribution, utilizing a read-only root filesystem to protect core system files from accidental modification or corruption, which ensures consistent stability across device reboots. The distribution distinguishes itself through specialized configurations that prioritize gaming performance on portable hardware. It employs kernel-level hardware tuning to adjust power profiles and clock speeds, alongside containerized application runtimes that isolate softw

Raspberry Pi Imager is a graphical utility designed to download and write operating system images directly to SD cards and USB drives. It serves as a deployment tool for preparing bootable storage media for single-board computers, facilitating the automated installation and initial configuration of embedded systems. The application distinguishes itself by enabling on-the-fly image customization, which allows users to inject network settings and user credentials directly into the image during the writing process. It supports custom image sources and remote repository manifests, providing flexi

Firejail is a Linux application sandbox and kernel security wrapper that isolates untrusted applications from the host system. It uses kernel namespaces and seccomp filters to restrict filesystem access, drop kernel capabilities, and limit the system attack surface. The project is distinguished by its use of predefined security profiles to automatically apply filesystem restrictions and syscall limits based on the executable being launched. It provides specialized isolation for portable packages such as AppImages and implements X11 display isolation via proxy servers to prevent keyboard loggi

This project is a Buildroot-based Linux distribution and embedded home server operating system designed to host containerized home automation services. It serves as a dedicated platform that manages the hardware and software requirements of a local smart home hub. The system is built as an immutable operating system, utilizing a read-only root filesystem and image-based updates to ensure consistent versioning and prevent accidental changes. It employs container-based process isolation to decouple applications from the core operating system. The platform provides a supervised container manage

Holoiso is a tool for building custom, bootable operating system images based on SteamOS 3 for installation on non-Steam Deck hardware. It uses a Linux Archiso base to generate installable disk images that replicate a handheld gaming experience on generic devices. The project enables the creation of a gaming-oriented distribution featuring a gamepad-driven interface and the ability to toggle between a standard desktop environment and a gaming session. It includes high-performance shaders for system-wide image upscaling to balance visual quality and frame rates across the gaming interface. Th

Reinstall is an automated operating system deployer and bare metal provisioning tool designed for virtual private servers and remote hardware. It functions as a remote disk imaging utility and OS management tool, enabling the deployment and reinstallation of Linux and Windows operating systems without requiring physical access to the machine. The project distinguishes itself by automating complex installation hurdles, such as bypassing hardware requirements for RAM, TPM, and SecureBoot. It manages critical low-level tasks including hardware-aware driver injection, raw disk image deployment wi

This project serves as a documentation hub and specification repository for official Docker images. It functions as a metadata-driven documentation generator that transforms structured content files into markdown files and readmes for public distribution. The repository provides technical guides and configuration standards for deploying containerized software across multiple CPU architectures. It includes detailed manuals for configuring environment variables, volume mounts, and network settings to ensure consistent image deployments. The documentation covers a broad range of containerized e

This project is a dynamic tiling window manager configuration and automated desktop installer for Linux. It provides a system for organizing application windows to maximize screen real estate and productivity, specifically centered around a Hyprland desktop configuration. The environment features an adaptive visual theme that extracts dominant hues from wallpapers to automatically update the global user interface colors. It also includes specialized optimizations for virtual machine environments to ensure system stability and performance. The project covers automated desktop deployment throu

Unattend-generator is a .NET programmatic library designed for creating and parsing customized unattended installation files to automate operating system deployments. It functions as a configuration tool for building tailored setup scripts and installation answers for unattended operating system provisioning, enabling automated setup across physical or virtual hardware. The library supports two-way configuration parsing by deserializing existing markup files back into object graphs for round-trip modification of previously generated parameters. It utilizes object-oriented configuration buildi

Sysbox is an OCI-compliant container runtime that provides virtual-machine-level isolation for containers without requiring hardware virtualization. It achieves this by mapping the container's root user to an unprivileged host user ID range, virtualizing the /proc and /sys filesystems, and applying seccomp-BPF system call filtering, all while using cgroup v2 for resource partitioning. The runtime enables running system-level software such as systemd, Docker, and Kubernetes inside unprivileged containers without requiring special images or privileged mode. It supports nested namespace stacking

This project is a Linux distribution build system and deployment framework designed to compile tailored Debian and Ubuntu server images for Amlogic ARM hardware. It functions as an operating system deployer and kernel builder, providing the tools necessary to flash system images to internal or external storage and manage boot configurations on ARM boards. The system includes a specialized build pipeline for compiling Linux kernels with hardware-specific patches and out-of-tree driver modules. It also features a dual-boot partition manager that enables the backup and restoration of original An

KubeArmor is a runtime security enforcement system designed to protect containerized workloads and host infrastructure by restricting unauthorized process, file, and network activity. It operates by deploying lightweight agents across nodes that utilize kernel-level interception and Linux Security Modules to monitor and block system operations in real time. By mapping these enforcement actions to specific container and pod identities, the platform maintains granular access control within multi-tenant environments. The project distinguishes itself through a declarative policy orchestration fra

This project is a serverless application framework used to define and deploy cloud infrastructure, serverless APIs, and static frontends through infrastructure as code. It functions as a full stack deployment pipeline and a cloud infrastructure orchestrator for provisioning resources like databases and storage buckets across multiple cloud accounts. The framework includes a local cloud development environment that allows for testing and debugging API endpoints and cloud functions on a local machine before deployment. It also features a containerized build pipeline specifically designed to con

This project is a reference library and collection of example code patterns for deploying cloud infrastructure using the AWS CDK. It provides a set of sample projects that demonstrate how to define compute, storage, and networking resources using general purpose programming languages. The library includes reference implementations for various architectural patterns, including serverless backends with GraphQL and WebSocket APIs, container orchestration with load balancers and auto-scaling, and global static website hosting via content delivery networks. It also provides designs for isolated ne

The AWS Cloud Development Kit is an infrastructure-as-code framework that enables developers to define and provision cloud resources using familiar programming languages. By utilizing construct-based synthesis, it translates high-level, object-oriented code into declarative templates, allowing for the automated management of complex cloud environments through a centralized, code-driven control plane. The framework distinguishes itself through its ability to model infrastructure as a dependency-aware resource graph, ensuring that components are provisioned and updated in the correct order. It

ai-toolkit is a diffusion model training toolkit designed for fine-tuning image and video generation models. It functions as a containerized model trainer and GPU training job manager, providing the infrastructure to orchestrate dependencies and manage training processes on remote GPU hardware. The system utilizes low-rank adaptation techniques, including LoRA and LoKr weight optimization, to reduce the hardware requirements for model training. It distinguishes itself through a web-based training controller that allows for the monitoring and modification of hyperparameters, secured by token-b

Bubblewrap is a Linux sandbox runner that creates lightweight, isolated execution environments for running untrusted applications. It combines Linux user, mount, network, PID, and UTS namespaces with seccomp-BPF system call filtering to restrict filesystem, network, process, and inter-process communication access. The project provides comprehensive process isolation by giving each sandbox its own private tmpfs root with selective bind-mounts, a separate network stack containing only a loopback interface, an independent process ID space, and remapped user and group identifiers. It applies secc

A courseware built on the belief that anyone can learn foundational cloud engineering skills with the right guide and discipline

Awless is a command-line interface and infrastructure orchestrator for managing, deploying, and inspecting AWS cloud resources. It functions as a resource inspector, identity manager, and secure connection utility, providing a hierarchical set of commands to control cloud environments. The tool distinguishes itself by syncing remote cloud state to local graphs, enabling offline infrastructure analysis, auditing, and resource relationship querying without active API calls. It further streamlines operations by mapping human-readable aliases to system identifiers and facilitating secure shell co

This project is a Terraform provider that enables the management of Azure cloud resources through an infrastructure as code workflow. It serves as a programmatic interface for creating and configuring services via the Azure Resource Manager API, functioning as a declarative system for provisioning virtual infrastructure. The tool orchestrates the lifecycle of Azure virtual machines, networks, and storage. It replaces manual portal configuration with version-controlled scripts to automate the deployment of cloud services and scale environments across development, staging, and production stages

Meshery is a service mesh management plane and cloud native infrastructure orchestrator. It provides a visual design-as-code environment for modeling microservices and infrastructure components through declarative blueprints, functioning as a centralized platform for designing, deploying, and managing service mesh infrastructure. The platform is distinguished by its ability to translate visual designs into active deployments and its use of gRPC-based adapters to integrate with diverse infrastructure providers. It features a multi-tenant architecture that manages shared workspaces and role-bas

Atlantis is a GitOps deployment tool and infrastructure as code orchestrator that synchronizes cloud resources with a git repository using pull request comments. It serves as a policy-based infrastructure gate and automation system for Terraform, executing plans and applies directly from version control to coordinate deployments across multiple projects and environments. The system differentiates itself through a lock-based concurrency model that prevents simultaneous modifications to the same project or workspace. It features server-side policy validation to intercept plan outputs for compli

Fleet is an open-source device management platform that provides centralized control over computing devices running macOS, Linux, Windows, Chromebooks, iOS, and Android. It enables organizations to enroll devices, collect real-time telemetry, enforce security compliance policies, and manage software remotely from a single system. The platform can be deployed as a single binary, run locally for testing, or scaled horizontally across cloud infrastructure on AWS, Kubernetes, GCP, or Render, with support for high availability through database replication and load balancing. The platform distingui

Pocket ID is a self-hosted OpenID Connect (OIDC) identity provider that replaces traditional passwords with passkey-based authentication using WebAuthn public-key cryptography. It runs as a standalone service on user-managed infrastructure, eliminating shared secrets entirely by authenticating users through passkeys instead of passwords. The project distinguishes itself through security-hardened deployment patterns, including distroless container images, non-root user execution, and read-only root filesystems to reduce the attack surface. It supports configurable token signing algorithms (RSA

Bubblewrap is an unprivileged sandbox execution utility for Linux that isolates processes from the host system. It creates secure environments by leveraging Linux namespaces to separate system resources, including network, PID, and IPC stacks. The project distinguishes itself by enabling the execution of untrusted software without requiring root privileges on the host machine. It prevents privilege escalation by disabling the execution of setuid binaries and uses user identity mapping to isolate process permissions from the host operating system. The tool manages a comprehensive security sur

Tau is a unified development and operations environment designed as a DevOps coordination platform. It functions as a fullstack development workspace that synchronizes coding and infrastructure management tasks for both human users and automated machine processes. The system acts as a hybrid infrastructure orchestrator, employing modular drivers to deploy and manage software across both public cloud providers and self-hosted private servers. It provides a shared workspace that integrates command line interface operations with infrastructure deployment to unify development and operational work

Practicalnode is a comprehensive educational resource and backend development framework for mastering server-side programming with Node.js. It provides a structured approach to building scalable network services, REST APIs, and real-time applications using asynchronous JavaScript. The project serves as a detailed implementation guide for several core backend patterns, including MongoDB data modeling and the construction of REST API development kits. It emphasizes a specific workflow for Docker containerization and offers a variety of strategies for managing user identity through stateless tok