Awesome Containers

A curated list of awesome Linux containers related technologies inspired by other Awesome lists

Container runtimes

• Binctr - Fully static, unprivileged, self-contained, containers as executable binaries (!)
• Bubblewrap - Unprivileged sandboxing tool.
• Charliecloud - Lightweight user-defined software stacks for HPC.
• Cromwell - Rust Rootless Container Runtime
• crun - Fast and lightweight fully featured OCI runtime.
• Docker - Open-source application container engine.
• enroot - Simple, yet powerful tool to turn traditional container/OS images into unprivileged sandboxes by nviDIA.
• Fakechroot
• Youki - Container runtime written in Rust.
• Garden
• Lmctfy - Open source version of Google’s container stack.
• Lxc - Linux containers.
• Nsroot - Minimalist process isolation tool implemented with Linux namespaces.
• Podman - Rootless/Daemonless container runtime (from RedHat)
• Proot - Chroot, mount --bind, and binfmt_misc without privilege/setup.
• Rkt - App Container runtime for Linux.
• Runc
• Sarus - OCI-compatible runtime to deploy Linux containers on HPC environments from CSCS.
• Shifter - Linux Containers for HPC.
• Singularity - Containers without the container.
• Udocker - Execute simple containers in batch or interactive systems without root privileges.
• Vagga - Containerization tool without daemons.
• plash - Rootless, no daemons, docker integration, lightweight, extendable and executable build files.

Micro-VMs

• Firecracker - Secure and fast microVMs for serverless computing
• Gvisor - Container Runtime Sandbox
• Katacontainers - The speed of containers, the security of VMs
• Colima - Container runtimes on macOS (and Linux) with minimal setup
• UTM - Virtual machines for iOS and macOS

Image collections

• cgl-docker-lib
• minideb

Image / Registry tools

• Skopeo - Work with remote images registries - retrieving information, images, signing content.
• Sinker - tool to sync images from one container registry to another.

Misc

• cdebug - a swiss army knife of container debugging
• buildkit-cli-for-kubectl - Build containers from K8s cluster
• Img - Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
• CRFS - CRFS: Container Registry Filesystem
• Kaniko - A tool to build container images from a Dockerfile, inside a container.
• Trivy - A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI.
• Rootless Containers
• https://github.com/shipwright-io/build - framework for building container images on Kubernetes
• micromamba-docker - Rapid builds of small Conda-based containers using micromamba.
• ContainerSSH - Launch containers on demand