Akihiro Suda

🍺 Alcoholless: lightweight security sandbox for Homebrew, AI agents, etc. on macOS

[Experimental] jail for Go modules

social reputation checker for Go modules

OCI transport plugin for apt-get (i.e., apt-get over ghcr.io)

Moved to https://github.com/containerd/nerdctl

Linux Subsystem for FreeBSD (😈 on 🐧)

:whale: Docker Issues and Tips (aufs/overlay/btrfs..)

Dockerfile examples for containerized systemd (mainly for test environments)

Go bindings for libnetfilter_queue (Forked from openshift/geard)

benchmark tool for Docker, BuildKit, img, Buildah, and Kaniko

Aspect-Oriented Programming framework for Go

silence negligible CVE alerts using LLM

Kubernetes in Apple Containerization

Succeeded by https://github.com/yomaytk/elfconv

Workaround for running ubuntu:21.10, fedora:35, and other glibc >= 2.34 distros on Docker <= 20.10.9

Create a dedicated IaaS instance per Pod to mitigate container breakout (including CPU vulnerabilities depending on the instance type)

Not A Container, for macOS

Profile page for https://github.com/AkihiroSuda

An experimental tool to modify YAMLs without losing (most of) comment lines.

Binary snapshot of Moby (irregularly updated)

:watch: time(1) with average time, flaky rate, .. [Deprecated in favor of hyperfine]

Mirror of https://passt.top/passt/ . Pull requests are not accepted here.

CNI Bridge Isolation Plugin (Merged into the firewall plugin v1.1.0)

convert `Wrap(err, "foo")` to `Errorf("foo: %w", err)`

`podman network create` for Rootless Podman

rootless runc-based container engine

recursive read-only bind-mount for Docker

Informative site with EoL dates of everything

critest example (rootless+cgroup2)

Mirror of https://build.anbox.io/android-images

Fast docker image distribution plugin for CNCF containerd (for discussion purpose).

Facilitates running Wasm / WASI workloads managed by containerd

Analyzes resource usage and performance characteristics of running containers.

Anbox is a container-based approach to boot a full Android system on a regular GNU/Linux system

WasmEdge is a lightweight, high-performance, and extensible WebAssembly runtime for cloud native, edge, and decentralized applications. It powers serverless apps, embedded functions, microservices, smart contracts, and IoT devices.

An experimental AOT compiler that translates Linux ELF binary to WebAssemlby

Plugin index for Trivy. This repo is for plugin maintainers.

No description.

Scripts to generate metadata (source IDs, build IDs)

Docker Official Image packaging for WordPress

LangChain for Go, the easiest way to write LLM-based programs in Go

Docker Official Image packaging for Ruby

Primary source of truth for the Docker "Official Images" program

Configures `/etc/apt/sources.list` and similar files for installing packages from a snapshot.

qcow2 reader for Go

Centralized documents and information for the OCI organization and projects

No description.

A production-ready remote container image format (overlaybd) base on block-device.

Go-IPFS API implementation over HTTP API

Create virtual machines and run Linux-based operating systems in Go using Apple Virtualization.framework.

Nix derivations as Dockerfiles (`docker build -f default.nix .`)

Reproducible apt/dnf/apk, with content-addressing

Website repo for https://containerd.io

A new network stack based on gVisor

No description.

eBPF Library for Go

A release tool for generating detailed release notes

Linux distro packaging for containerd

AinD: Android in Docker. Ain't an emulator.

golang.org/x/sys/unix with automatic EINTR handler

Lightweight Kubernetes. 5 less than k8s.

development repository. not ready to be used by anyone. contributions welcome

Cross-project utilities, scripts, etc.

Run Kubernetes locally

Cache for https://github.com/AkihiroSuda/gosocialcheck

libpod is a library used to create container pods. Home of Podman.

Work with remote images registries - retrieving information, images, signing content

A draft proposal to update the web site of https://containerd.io

A test repo for https://github.com/moby/buildkit/issues/3565

C-friendly API to make path resolution safer on Linux.

Examples for https://github.com/AkihiroSuda/apt-transport-oci

Docker Packaging (deb, rpm, static)

Proxy TCP connections based on static rules, HTTP Host headers, and SNI server names (Go package or binary)

🍻 Default formulae for the missing package manager for macOS

vmnet.framework support for unmodified rootless QEMU (no dependency on VDE)

slirp for network namespaces, without copying buffers across the namespaces

parser for `go.mod` directive comments (used by gomodjail)

[mirror] GitHub action for govulncheck

Node Resource Interface

OCI Runtime Tools

The Docker CLI

Utilities for manipulating POSIX capabilities in Go.

Machine management for a container-centric world

An open-source AI agent that brings the power of Gemini directly into your terminal.

Optimal implementation of ordered maps for Golang - ie maps that remember the order in which keys were inserted.

utility for validating git commits (in a CI like GH actions, CircleCI, Jenkins, etc.)

Run non-Ubuntu distributions such as Fedora on GitHub Actions

No description.

[mirror] Go module mechanics libraries

👩🏿‍🎓👨🏽‍🎓👩🏻‍🎓CNCF Mentoring + CommunityBridge + Summer of Code

Implements a subset of PKCS #7 / Cryptographic Message Syntax (CMS, RFC 2315, RFC 5652)

upstream mirror

Encryption libraries for Encrypted OCI Container images

Docker Official Image packaging for golang

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

Many versions of Bash, Dockerized

Docker Official Image packaging for HAProxy

Docker Official Image packaging for memcached

flannel is a network fabric for containers, designed for Kubernetes

Code and configuration to manage Kubernetes project infrastructure, including various *.k8s.io sites

Documentation repository for NVIDIA Cloud Native Technologies

Go package for handling platform type

No description.

Docker Official Image packaging for Apache HTTP Server

Docker Official Image packaging for gcc

No description.

kubetest2 driver for Kubernetes in (Rootless) Docker in (GCE) VM

Dockerfile examples for reproducing package cache (e.g., `/etc/apk/cache`)

OCI registry client - managing content like artifacts, images, packages

A GHA composite action to forcefeed a cache into buildkit ( Forked from https://github.com/overmindtech/buildkit-cache-dance )

diff for Docker and OCI container images

opencontainers.org

Mirror of https://packages.debian.org/u-boot-qemu

dockerd as a compliant Container Runtime Interface for Kubernetes

Go package for managing marshaled types to protobuf.Any

tmp (public)

A containerd snapshotter with data deduplication and lazy loading in P2P fashion

A draft web site for https://github.com/lima-vm/lima

🍻 A CLI workflow for the administration of macOS applications distributed as binaries

Golang LRU cache

No description.

The open-source repo for docs.github.com

☁️♮🏛File non-technical issues related to CNCF

🎨CNCF-related logos and artwork

🌄The Cloud Native Interactive Landscape filters and sorts hundreds of projects and products, and shows details including GitHub stars, funding or market cap, first and last commits, contributor counts, headquarters location, and recent tweets.

Container runtimes on macOS (and Linux) with minimal setup

Test infrastructure for the Kubernetes project.

Lima default community health files

Create an alpine based image for lima

OCI Distribution Specification

The /etc/hosts parsing and resolver library for golang

CNI website

Accelerates slirp4netns using SECCOMP_IOCTL_NOTIF_ADDFD. As fast as `--net=host`.

The Go programming language

Rust crates to extend containerd

This cross-project repository holds utilities, scripts, and common files used across the containerd master project and many sub-projects within the containerd organization

No description.

Prepends project files with given template.

🍺 The missing package manager for macOS (or Linux)

vmnet.framework support for rootless QEMU (without patching QEMU)

Linux virtual machines, on macOS (aka "Linux-on-Mac", "macOS subsystem for Linux", "containerd for Mac", unofficially)

WebDAV server for SSH. Similar to sshfs but does not require proprietary MacFUSE on macOS

ssh + reverse sshfs + port forwarder, in Docker-like CLI

Idiomatic Go 9P2000.L client and server, extracted from gVisor for general use

Btrfs library in a pure Go

Kubernetes website and documentation repo:

console package for Go

9P2000 implementation in Go

Unofficial containerd nightly builds

Documentation for Rancher products (for 2.0/new site)

Little helper to run Rancher Lab's k3s in Docker

Reference library for the parsing and loading Compose files

fuse-overlayfs plugin for rootless containerd

🏃🏿‍♀️🏃🏽‍♀️🏃🏻‍♂️🕒CNCF Special Interest Group for Runtime

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface

Some reference and example networking plugins, maintained by the CNI team.

test OCI archives

common selinux implementation

SOCKS4/5 server library and command in Go

The main libseccomp repository

The easiest multi-host & multi-cloud networking ever. No root privilege required. (Transfers loopback packets over stdio)

The Compose specification

SELinux policy files for Container Runtimes

A generic CNI library to provide APIs for CNI plugin interactions

CLI and validation tools for Kubelet Container Runtime Interface (CRI) .

Rootless Containers without `/etc/subuid` and `/etc/subgid`

Release infrastructure for Kubernetes and related components

FUSE implementation for overlayfs

Docker CE

K3s agent user space binaries

No description.

A simple, fast, and fun package for building command line apps in Go

A fast and lightweight fully featured OCI runtime and C library for running containers

Container Runtime Interface (CRI) – a plugin interface which enables kubelet to use a wide variety of container runtimes.

faasd - serverless with containerd and CNI 🐳

slirp4netns implementation using gvisor/netstack

OCI Image Encryption Package

Moby Technical Steering Committee

fifo pkg for Go

cgroups package for Go

A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI

Docker Official Image packaging for Docker

Lightweight JSON library written in C.

Kubernetes IN Docker - local clusters for testing Kubernetes

Documentation for Docker Official Images in docker-library

Docker in UserModeLinux in Docker

Features tracking repo for Kubernetes releases

[POC] Moby Integration Test Runner for Kubernetes

Catalog of shared Tasks and Pipelines.

test

Fast and flexible Docker image building tool, works in unprivileged containerized environments like Mesos and Kubernetes.

Parse and print size and time units in human-readable format

Docker installation script

SSH tarpit that slowly sends an endless banner

NVIDIA container runtime

Packaging scripts for Docker CE

No description.

No description.

poor man's load-balancer for `docker`

A library of build templates.