Open source. Open possibilities.

Graft is an early-alpha tool that turns typed TOML workload intent into a Nix-built rootfs, a Podman Quadlet unit, and a systemd service for NixOS system containers or Home Manager user containers.

Trivy is a comprehensive security scanner used to detect vulnerabilities, misconfigurations, secrets, and SBOMs across various targets including containers, Kubernetes, and code repositories.

Fission is an open-source, Kubernetes-native serverless framework for deploying and managing functions and applications on Kubernetes. It supports multiple languages, offers fast cold starts (~100ms), and enables automatic scaling.

Podman is a daemonless tool for managing OCI containers and pods, supporting rootless operation and Docker-compatible CLI.

minikube is a tool that implements a local Kubernetes cluster on macOS, Linux, and Windows, designed for local application development.

Harbor is an open-source, CNCF-hosted cloud-native registry used to store, sign, and scan container images and Helm charts.

Cog packages machine learning models into production-ready Docker containers, automatically handling CUDA compatibility and generating an HTTP inference API from Python type definitions.

A community-maintained DevOps reference guide covering Docker, Kubernetes, Prometheus, Git, Ansible, Terraform, Jenkins, GitLab CI, GitHub Actions, CircleCI, Travis CI, Puppet, Chef, Linux, and networking, with concepts, commands, tutorials, interview questions, and curated learning links.

Docker Compose stack deploying XWiki behind Traefik with automatic Let's Encrypt TLS, PostgreSQL 15, scheduled database and wiki-data backups with restore scripts, digest-pinned images, container hardening and CI deployment verification.

Moby is an open-source project providing a modular toolkit of components for assembling custom container-based systems.

Pulumi is an open-source Infrastructure as Code (IaC) platform that allows users to provision and manage cloud infrastructure using general-purpose programming languages.

Firecracker is an open-source virtualization technology from AWS that runs container and function workloads in lightweight microVMs using KVM, combining hardware-level isolation with container-like speed for serverless and multi-tenant use.

VibeCoder is an automated GitHub issue worker that monitors repositories, picks up issues, writes code using AI agents (Claude, Codex, Gemini), runs quality checks, and opens pull requests. It supports review feedback loops, self-healing, and cost optimization.

Kubernetes (K8s) is an open-source system for automating the deployment, scaling, and management of containerized applications across multiple hosts.

Syft is a CLI tool and Go library for generating Software Bills of Materials (SBOM) from container images and filesystems, supporting multiple ecosystems and output formats.

Buildah is a command-line tool for building OCI and Docker container images without requiring root privileges. It can create containers from scratch or existing images, run commands inside them, mount their filesystems, and commit changes into new images, with or without a Dockerfile.

Dokku is a Docker-powered mini-PaaS that allows users to build and manage the lifecycle of applications on their own servers.

Colima provides container runtimes on macOS and Linux with minimal setup, supporting Docker, Containerd, and Incus.

debux is an open-source container debugger for Docker and Kubernetes that debugs distroless, scratch, and minimal images with a ready-to-use toolbox. It attaches to targets, shares namespaces, and exposes the filesystem for inspection.

Skaffold is a CLI tool for continuous development of Kubernetes applications, automating the build, push, and deploy workflow with support for CI/CD pipelines and GitOps.