↓ Перейти к основному содержимому
Dominicus In ★ Awesome: 54
Категории ai career dao links media notes philosophy security systems web

awesome-docker

Курируемый awesome-список · открыть репозиторий ↗

← Ко всем спискам

Источник: awesome-docker — синхронизируется из внешнего репозитория как sparse-субмодуль (только список).

A curated list of projects for Docker.

If you would like to contribute, please read CONTRIBUTING.md first. If this list is not complete, you can contribute to make it so. If you see a link here that is not (any longer) a good fit, you can fix it by submitting a [pull request][editreadme] to improve this file. Thank you!

The project has to be for Docker, not just using Docker.

Rule of thumb: if removing the Docker integration wouldn’t kill the project’s value proposition, it doesn’t belong in the this list.

The creators and maintainers of this list do not receive any form of payment to accept a change made by any contributor. This page is not an official Docker product in any way. It is a list of links to projects and is maintained by volunteers. Everybody is welcome to contribute. The goal of this repo is to index open-source projects, not to advertise for profit.

Docker is an open platform for developers and sysadmins to build, ship, and run distributed applications. Consisting of Docker Engine, a portable, lightweight runtime and packaging tool, and Docker Hub, a cloud service for sharing applications and automating workflows, Docker enables apps to be quickly assembled from components and eliminates the friction between development, QA, and production environments. As a result, IT can ship faster and run the same app, unchanged, on laptops, data center VMs, and any cloud.

Source: What is Docker

Contents
#

Projects
#

Official Projects
#

  • Moby
  • Docker Hub
  • Docker Compose - Define and run multi-container applications with Docker.
  • [Docker Registry][distribution] - The Docker toolset to pack, ship, store, and deliver content

Engine & Runtime
#

  • colima - Container runtimes on macOS (and Linux) with minimal setup.
  • containerd - An open and reliable container runtime.
  • cri-o - Open Container Initiative-based implementation of Kubernetes Container Runtime Interface.
  • gVisor - Application Kernel for Containers.
  • lxc - LXC - Linux Containers.
  • Mocker - Docker-compatible container CLI for macOS, built on Apple’s Containerization framework.
  • podman - Libpod is a library used to create container pods. Home of Podman.
  • runc - CLI tool for spawning and running containers according to the OCI specification.
  • runtime-tools - Oci-runtime-tool is a collection of tools for working with the OCI runtime specification.
  • youki - Container runtime written in Rust, implementing the OCI runtime specification.

Building Images
#

Builder
#

Applications designed to help or simplify building new images

  • ansible-bender - A tool utilising ansible and buildah.
  • apko - Declarative OCI image builder from apk packages; reproducible by design.
  • buildah - A tool that facilitates building OCI images.
  • BuildKit - Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit.
  • buildx - Official Docker CLI plugin for multi-platform builds backed by BuildKit.
  • cekit - A tool used by openshift to build base images using different build engines.
  • dlayer - Docker layer analyzer.
  • docker-companion - A command line tool written in Golang to squash and unpack docker images.
  • docker-repack - Repacks a Docker image into a smaller, more efficient version that makes it significantly faster to pull.
  • DockerSlim shrinks fat Docker images creating the smallest possible images.
  • earthly - Containerized build automation with Dockerfile-meets-Makefile syntax.
  • essex - Boilerplate for Docker Based Projects: Essex is a CLI utility written in bash to quickly setup clean and consistent Docker projects with Makefile driven workflows.
  • HPC Container Maker - Generates Dockerfiles from a high level Python recipe, including building blocks for High-Performance Computing components.
  • img - Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
  • ko - Build and deploy Go applications as container images without a Dockerfile.
  • nix2container - Build OCI images with Nix without docker load round-trips.
  • packer - Hashicorp tool to build machine images including docker image integrated with configuration management tools like chef, puppet, ansible.
  • Production-Ready Python Containers - :yen: A template for creating production-ready Docker images for Python applications.
  • RAUDI - A tool to automatically update (and optionally push to Docker Hub) Docker Images for 3rd party software whenever theres is a new release/update/commit.
  • runlike - Generate docker runcommand and options from running containers.
  • Whaler - Program to reverse Docker images into Dockerfiles.

Base Images
#

Minimal, hardened, or purpose-built container base images.

  • Chainguard Images - Minimal, signed, SBOM-attested container images built on Wolfi.
  • distroless - Language focused docker images, minus the operating system.
  • melange - Build apk packages from declarative YAML for use with apko.
  • pglayers - Pre-built PostgreSQL extensions as composable Docker layers. 50+ extensions, ready-to-use combined images (full, Azure-compatible).
  • Wolfi - Undistro Linux designed for containers; glibc-based, signed, daily SBOMs.

Dockerfile
#

  • Dockerfile Generator dfg is both a Go library and an executable that produces valid Dockerfiles using various input channels.
  • Dockershelf - A repository that serves as a collector for docker recipes that are universal, efficient and slim. Images are updated, tested and published daily via a Travis cron job.
  • Dofigen - A Dockerfile generator using a simplified description in YAML or JSON format.
  • Trsuted Builds - Trusted Automated Docker Builds. Dockerfile Project maintains a central repository of Dockerfile for various popular open source software services runnable on a Docker container.

Linter
#

  • Dockadvisor - Lightweight Dockerfile linter with 60+ rules, quality scoring, and security checks.
  • docker-image-size-limit - A tool to keep an eye on your docker images size.
  • Hadolint - A Dockerfile linter that checks for best practices, common mistakes, and is also able to lint any bash written in RUN instructions;.

Image Lifecycle
#

Registry
#

Services to securely store your Docker images.

  • Amazon Elastic Container Registry - :yen: Amazon Elastic Container Registry (ECR) is a fully-managed Docker container registry that makes it easy for developers to store, manage, and deploy Docker container images.
  • Azure Container Registry - :yen: Manage a Docker private registry as a first-class Azure resource.
  • Cloudsmith - :yen: A fully managed package management SaaS, with first-class support for public and private Docker registries (and many others, incl. Helm charts for the Kubernetes ecosystem). Has a generous free-tier and is also completely free for open-source.
  • Container Registry Service - :yen: Harbor based Container Management Solution as a Service for teams and organizations. Free tier offers 1 GB storage for private repositories.
  • Cycle.io - :yen: Bare-metal container hosting.
  • DigitalOcean - :yen: DigitalOcean Container Registry.
  • Docker Hub provided by Docker Inc.
  • [Docker Registry v2][distribution] - The Docker toolset to pack, ship, store, and deliver content
  • Dragonfly - Provide efficient, stable and secure file distribution and image acceleration based on p2p technology.
  • GCP Artifact Registry - :yen: Fast, private Docker image storage on Google Cloud Platform.
  • Gitea Container Registry - Integrated Docker registry in Gitea, ideal for private, small-scale image hosting.
  • GitHub Container Registry - GitHub’s solution for storing and managing Docker images, with tight integration into GitHub Actions.
  • GitLab Container Registry - Registry focused on using its images in GitLab CI.
  • Granite Registry - :yen: Store private Docker images alongside the workloads that pull them, with scoped read-only and read-write keys.
  • Harbor An open source trusted cloud native registry project that stores, signs, and scans content. Supports replication, user management, access control and activity auditing.
  • JFrog Artifactory - :yen: Artifact Repository Manager, can be used as private Docker Registry as well.
  • kontain.me - On-demand container image registry that builds and serves images when they are pulled.
  • Kraken - Uber’s Highly scalable P2P docker registry, capable of distributing TBs of data in seconds.
  • NORA - Lightweight multi-protocol artifact registry supporting Docker, Maven, npm, Cargo and PyPI in a single 32MB binary. Pull-through cache, Web UI, Prometheus metrics, RBAC auth.
  • nscr - A light-weight, self-contained container registry that’s easy to run and maintain.
  • Quay.io - :yen: Secure hosting for private Docker repositories.
  • Registryo - UI and token based authentication server for onpremise docker registry.
  • RepoFlow - A simple and easy-to-use package management platform with Docker support alongside other formats like PyPI, Maven, npm, and Helm. Includes smart search, built-in Docker image scanning, and a great free option for both self-hosted and cloud use.
  • Sonatype Nexus Repository - Manage binaries and build artifacts across your software supply chain.

Registry CLI
#

Daemonless command-line tools for inspecting, copying, and manipulating images in OCI/Docker registries.

  • crane - Lightweight CLI to manipulate registry images, from go-containerregistry.
  • go-containerregistry - Go library and CLI tools (crane, gcrane, registry) for working with container registries.
  • oras - Push and pull arbitrary OCI artifacts to and from any OCI registry.
  • regctl - Daemonless registry client; copy, inspect, modify, and sign OCI images.
  • skopeo - Work with remote image registries: retrieve information, copy images, sign content.

Image Scanning & SBOM
#

Image vulnerability scanners, SBOM generators, and digest pinning tools. Commercial entries marked :yen:.

  • Anchor - A tool to ensure reproducible builds by pinning dependencies inside your Dockerfiles.
  • Anchor Enterprise - :yen: Analyze images for CVE vulnerabilities and against custom security policies.
  • BomLens - Scan container images (plus source, binaries, and firmware) into CycloneDX SBOMs with vulnerability, license, and notice reports. Ships as a single Docker image with a web UI.
  • Clair - Clair is an open source project for the static analysis of vulnerabilities in appc and docker containers.
  • Docker Scout - Official Docker CLI for SBOM generation, vulnerability analysis, and policy evaluation.
  • Grype - A vulnerability scanner for container images, filesystems and SBOMs.
  • oscap-docker - OpenSCAP provides oscap-docker tool which is used to scan Docker containers and images.
  • pindock - Pin and update Docker image digests in Dockerfiles and compose files.
  • Syft - CLI tool and library for generating a Software Bill of Materials (SBOM) from container images and filesystems.
  • Trivy - Aqua Security’s open source simple and comprehensive vulnerability scanner for containers (suitable for CI).

Supply Chain
#

Signing, attestation, and provenance for container images.

  • cosign - Container signing, verification, and transparency log for OCI artifacts.
  • in-toto - Framework for supply chain attestations; underpins SLSA and cosign provenance.
  • policy-controller - Kubernetes admission controller enforcing cosign signatures on container images.
  • witness - Generate and verify in-toto attestations across the build pipeline.

Running Containers
#

Composition
#

  • Composerize - Convert docker run commands into docker-compose files.
  • ctk - Visual composer for container based workloads.
  • kompose - Go from Docker Compose to Kubernetes.
  • plash - A container run and build engine - runs inside docker.
  • podman-compose - A script to run docker-compose.yml using podman.
  • Smalte – Dynamically configure applications that require static configuration in docker container.

Orchestration
#

  • CloudSlang - CloudSlang is a workflow engine to create Docker process automation.
  • docker rollout - Zero downtime deployment for Docker Compose services.
  • Kubernetes - Open source orchestration system for Docker containers by Google.
  • Mesos - Resource/Job scheduler for containers, VM’s and physical hosts.
  • Nebula - A Docker orchestration tool designed to manage massive scale distributed clusters.
  • Nomad - Easily deploy applications at any scale. A Distributed, Highly Available, Datacenter-Aware Scheduler.
  • Rancher - An open source project that provides a complete platform for operating Docker in production.
  • Swarm-cronjob - Create jobs on a time-based schedule on Swarm.

Deployment & Platforms
#

Self-hosted and managed cloud platforms (PaaS/CaaS, deployment automation). Commercial entries marked :yen:.

  • Amazon ECS - :yen: A management service on EC2 that supports Docker containers.
  • Appfleet - :yen: Edge platform to deploy and manage containerized services globally; routes traffic to the closest location for low latency.
  • Azure AKS - :yen: Fully managed Kubernetes container orchestration service.
  • blackfish - A CoreOS VM to build swarm clusters for Dev & Production.
  • BosnD - BosnD, the boatswain daemon - A dynamic configuration file writer & service reloader for dynamically changing container environments.
  • caprover - [Previously known as CaptainDuckDuck] Automated Scalable Webserver Package (automated Docker+nginx) - Heroku on Steroids.
  • Cloud 66 - :yen: Full-stack hosted container management as a service.
  • Cloud Run Compose - :yen: Deploy docker-compose.yaml files directly to Google Cloud Run as a managed service.
  • Convox Rack - Convox Rack is open source PaaS built on top of expert infrastructure automation and devops best practices.
  • docker-to-iac - Translate docker run and commit into Infrastructure as Code templates for AWS, Render.com and DigitalOcean.
  • doco-cd - Lightweight GitOps and Continuous Deployment tool to deploy Docker Compose projects and Swarm stacks using polling and webhooks.
  • Dokku - Docker powered mini-Heroku that helps you build and manage the lifecycle of applications.
  • Exoframe - A self-hosted tool that allows simple one-command deployments using Docker.
  • Giant Swarm - :yen: Simple microservice infrastructure. Deploy your containers in seconds.

…превью ограничено; полный список — в репозитории.