Docker
Container Operations
Container Composition
- Composable docker orchestration with added scripting support by [byrnedo].
- Tool for managing multiple Docker containers (docker-compose alternative).
- Utility to update docker configs and secrets for deploying in a compose file.
- An opinionated, multi-language, build tool based on Docker and Docker Compose.
A CLI and companion app to effortlessly run LLM backends, APIs, frontends, and services with one command. By av.
Deployment and Infrastructure
- Clocker creates and manages a Docker cloud infrastructure. Clocker supports single-click deployments and runtime management of multi-node applications that run as containers distributed across multiple hosts, on both Docker and Marathon. It leverages [Calico][calico] and [Weave][weave] for networking and Brooklyn for application blueprints. By brooklyncentral.
- Depcon is written in Go and allows you to easily deploy Docker containers to Apache Mesos/Marathon, Amazon ECS and Kubernetes. By [ContainX][containx].
Translate docker run and commit into Infrastructure as Code templates for AWS, Render.com and DigitalOcean.
- Gitkube is a tool for building and deploying docker images on Kubernetes using git push. By Hasura.
A common API for metadata about containers, from image and build details to security vulnerabilities. By grafeas.
Swarm-Ansible bootstraps a production-ready swarm cluster using ansible. Comes with tools to automate CI, help monitoring and traefik pre-configured for SSL certificates and simple-auth. Comes with a private registry and more!.
Monitoring
Analyzes resource usage and performance characteristics of running containers.
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.
DLIA is an AI-powered Docker log monitoring agent that uses Large Language Models (LLMs) to intelligently analyze container logs, detect anomalies, and provide contextual insights over time. By zorak1103.
Monitor and send alerts based on docker container resource usage/statistics.
Reconfigures Prometheus when a new service is updated or deployed automatically.
Lightweight Docker monitoring dashboard in a single container. Real-time metrics, 6 anomaly detection rules, Telegram alerts, and 16 automated security scans. Zero config, ~50MB RAM. By DeepOn.
Docker hosts and containers monitoring with Prometheus, Grafana, cAdvisor, NodeExporter and AlertManager.
Doku is a simple web-based application that allows you to monitor Docker disk usage. amerkurev.
Container update monitoring with web dashboard, 23 registry providers, 20 notification triggers, and distributed agent architecture. By CodesWhat.
A cross-platform curses-based system monitoring tool written in Python.
An open-source real-time monitoring system with custom-monitor and agentless.
InfluxDB Time series DB in combination with Grafana and cAdvisor.
Self-discovering infrastructure monitoring for Docker and Kubernetes. Auto-detects containers via labels, with endpoint monitoring, heartbeats, TLS certificates, resource metrics, update intelligence, and a built-in status page. Single binary with embedded SPA. By kolapsis.
Monitor docker containers resources usage or status and execute docker commands or inside containers. [decryptus][decryptus].
NexClipper is the container monitoring and performance management solution specialized in Docker, Apache Mesos, Marathon, DC/OS, Mesosphere, Kubernetes.
Docker host and container monitoring, logging and alerting out of the box using cAdvisor, Prometheus, Grafana for monitoring, Elasticsearch, Kibana and Logstash for logging and elastalert and Alertmanager for alerting. Set up in 5 Minutes. Secure mode for production use with built-in Automated Nginx Reverse Proxy (jwilder's).
Open source live application debugger like Chrome DevTools for your backend. Collect traces and generate logs on-demand without stopping & redeploying your applications.
Monitors a Docker Swarm and sends Pushover alerts when it finds a container with no healthy service task running.
Zabbix module that provides discovery of running containers, CPU/memory/blk IO/net container metrics. Systemd Docker and LXC execution driver is also supported. It's a dynamically linked shared object library, so its performance is (~10x) better, than any script solution.
Flannel is a virtual network that gives a subnet to each host for use with container runtimes. By [coreos][coreos].
High performance container overlay networks on Linux. Enabling RDMA (on both InfiniBand and RoCE) and accelerating TCP to bare metal performance. By Microsoft.
All in one IP Toolbox. Easy to check all your IPs, IP geolocation, check for DNS leaks, examine WebRTC connections, speed test, ping test, MTR test, check website availability, whois search and more. By jason5ng32.
The netshoot container has a powerful set of networking tools to help troubleshoot Docker networking issues.
Software-Defined Networking for Linux Containers, Pipework works with "plain" LXC containers, and with the awesome Docker. By [jpetazzo][jpetazzo].
An automation platform with a plugin architecture that allows you to easily create and share services.
Docker container orchestration to enable the testing of long-running cluster deployments.
Docker Flow Swarm Listener project is to listen to Docker Swarm events and send requests when a change occurs. By [docker-flow][docker-flow].
Haven is a simplified container management platform that integrates container, application, cluster, image, and registry managements. By codeabovelab.
Easily deploy applications at any scale. A Distributed, Highly Available, Datacenter-Aware Scheduler.
An open source project that provides a complete platform for operating Docker in production.
PaaS
[Previously known as CaptainDuckDuck] Automated Scalable Webserver Package (automated Docker+nginx) - Heroku on Steroids.
Convox Rack is open source PaaS built on top of expert infrastructure automation and devops best practices.
Docker-compose SSH wrapper: a very poor man PaaS, exposing the docker-compose and custom-container commands defined in container labels.
Docker powered mini-Heroku that helps you build and manage the lifecycle of applications (originally by [progrium][progrium]).
A self-hosted tool that allows simple one-command deployments using Docker.
Open source PaaS for Kubernetes that adds a developer-friendly layer to any Kubernetes cluster, making it easy to deploy and manage applications. Fork of Deis Workflow.
Reverse Proxy
Open-source and next-gen Web Application Firewall (WAF). By Bunkerity.
Caddy-based reverse proxy, configured with service or container labels. By lucaslorentz.
Docker upstreams module for Caddy, configured with container labels. By invzhi.
Update a remote dnsmasq server with Docker container hostnames.
Reconfigures proxy every time a new service is deployed, or when a service is scaled. By [docker-flow][docker-flow].
A fast, modern, zero-conf load balancing HTTP(S) router for deploying microservices managed by consul. By magiconair (Frank Schroeder).
Reverse proxy with automatic Wake-on-LAN — wakes sleeping backend servers when traffic arrives, shows a waiting screen, and redirects when ready. By tvup.
A lightweight companion container for the nginx-proxy. It allow the creation/renewal of Let's Encrypt certificates automatically. By JrCs.
Free domain(nsl.sh) provider for Docker containers with automatic HTTPS routing. Uses Wireguard VPN to securely route subdomain requests across networks. Ideal for self-hosted NAS and cloud deployments. By Yundera.
A beautiful web interface for proxying web based services with SSL. By jc21.
The easiest using, powerful and beautiful OpenResty Manager(Nginx Enhanced Version), open source alternative to OpenResty Edge. By Safe3.
Runtime
Security
A tool to ensure reproducible builds by pinning dependencies inside your Dockerfiles SongStitch.
Restricts outbound network access during Docker builds to prevent supply chain attacks, working as a drop-in BuildKit remote driver for Docker Buildx, with ready-to-use GitHub Actions.
CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.
Static analysis for infrastructure as code manifests (Terraform, Kubernetes, Cloudformation, Helm, Dockerfile, Kustomize) find security misconfiguration and fix them. By bridgecrew.
- This [InSpec][inspec] compliance profile implement the CIS Docker 1.12.0 Benchmark in an automated way to provide security best-practice tests around Docker daemon and containers in a production environment. By dev-sec.
Clair is an open source project for the static analysis of vulnerabilities in appc and docker containers. By [coreos][coreos].
Aggregates 36 free threat intelligence feeds into 120k+ malicious IPs for CrowdSec bouncers, providing 10-20x more blocks than default lists. By wolffcatskyy.
- Dagda is a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities. By eliasgranderubio.
Powerful runtime vulnerability scanner for kubernetes, virtual machines and serverless. By [deepfence][deepfence].
Script that checks for dozens of common best-practices around deploying Docker containers in production. By [docker][docker].
- SSL-enabled Damn Vulnerable Web App to test Web Application Firewalls. By [Peco602][peco602].
An infrastructure-as-code scanning tool, find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle. Can be extended for additional policies. By Checkmarx.
OpenSCAP provides oscap-docker tool which is used to scan Docker containers and images. By OpenSCAP.
Extracts network dependencies from Docker Compose, Kubernetes manifests, Helm charts, and other config files to generate Kubernetes NetworkPolicies with evidence tracing. By dormstern.
CLI tool and library for generating a Software Bill of Materials (SBOM) from container images and filesystems. By Anchore.
Sysdig Falco is an open source container security monitor. It can monitor application, container, host, and network activity and alert on unauthorized activity.
Aqua Security's open source simple and comprehensive vulnerability scanner for containers (suitable for CI).
Self-hosted sandbox runtime for AI agents with Docker containers, security hardening, REST API and WebSocket support. By us.
Service Discovery
Lightweight DNS forwarder for Docker containers, resolves container names with custom suffixes (e.g. .docker) on the host to simplify service discovery.
Volume Management / Data
- The Blockbridge plugin is a volume plugin that provides access to an extensible set of container-based persistent storage options. It supports single and multi-host Docker environments with features that include tenant isolation, automated provisioning, encryption, secure deletion, snapshots and QoS. By blockbridge
A lightweight, Docker-aware backup agent that automatically discovers and backs up containerized databases (PostgreSQL, MySQL, MongoDB, Redis) based on Docker labels. Supports local storage and S3-compatible destinations with flexible scheduling via cron expressions.
Backup Docker volumes locally or to any S3 compatible storage. By offen
Docker-based encrypted dual-storage backup automation using Duplicacy CLI with cross-site redundancy and Telegram notifications. By GeiserX.
Docker NFS, AWS EFS, Ceph & Samba/CIFS Volume Plugin. By [ContainX][containx]
IDE integrations
Desktop
Terminal UI
A fast, keyboard-driven terminal UI to manage Docker containers, Compose stacks, and Swarm services with the ergonomics of K9s.
Lightweight terminal-based Docker and Podman manager with a text-based user interface,.
DockSTARTer helps you get started with home server apps running in Docker by GhostWriters.
A developer-focused TUI for managing Docker containers with real-time log streaming and container management. Built with Rust. By durableprogramming.
TUI tool to view and manage your docker objects blazingly fast with sensible keybindings, also supports VIM navigation out of the box.
The lazier way to manage everything docker. A simple terminal UI for both docker and docker-compose, written in Go with the gocui library. By jesseduffield.
A interface for reading and filtering the logs output of Docker and Podman containers like Dozzle but for the terminal with support for fuzzy find, regex and output coloring.
A simple tui to view & control docker containers. Written in Rust, making heavy use of ratatui & Bollard,.
A Terminal UI highly inpired by k9s levaraging beatiful BubbleTea graphics. By joao-zanutto.
CLI tools
Easily start and stop docker compose projects from any directory. By jenssegers.
The powerful and smallest binary size of template engine for docker command line environment. By Falldog.
Dctl is a Cli tool that helps developers by allowing them to execute all docker compose commands anywhere in the terminal, and more. By FabienD.
A Docker CLI plugin that lets you push the README.md file from the current directory to Docker Hub. Also supports Quay and Harbor. By christian-korneck.
A friendly CLI to manage multiple Docker Compose deployments with style — powered by Typer, Rich, questionary, and sh.
Proco will help you to organise and manage Docker, Docker-Compose, Kubernetes projects of any complexity using simple YAML config files to shorten the route from finding your project to initialising it in your local environment.
Transparently use Docker containers to encapsulate software build environments,.
Work with remote images registries - retrieving information, images, signing content.
Other
Web
An easy and modern Docker management platform, built with everybody in mind. By getarcaneapp.
Outsource the administration of a handful of containers to your co-workers,.
Visualizes Docker services on a Docker Swarm (for running demos).
Easy-to-use and reactive self-hosted docker compose.yaml stack-oriented manager.
A lightweight management UI for managing your Docker hosts or Docker Swarm clusters.
Swarmpit provides simple and easy to use interface for your Docker Swarm cluster. You can manage your stacks, services, secrets, volumes, networks etc.
Swirl is a web management tool for Docker, focused on swarm cluster By cuigh.
Communities and Meetups
Docker Images
Container introspection tool. Find out what container runtime is being used as well as features available.
A single PID1 process designed for docker containers. Does user management, log management, startup, zombie reaping, all in one small package.
Utility to simplify running applications in docker containers by [jwilder][jwilder], [powerman][powerman].
Run this specific application as this specific user and get out of the pipeline (entrypoint script tool).
Lightweight health check utilities for Docker containers (75 KB instead of 9.3 MB for httpcheck versus cURL) in pure C - http(s), port checks, and parallel execution are included.
Ofelia is a modern and low footprint job scheduler for docker environments, built on Go. Ofelia aims to be a replacement for the old fashioned cron. Supports configuration from container labels and/or configuration files.
Access VMs, desktops, servers or applications anytime and from anywhere, without complex and costly client roll-outs or user management.
This is a simple tool that will simply execute a program with different privileges. The program will be executed directly and not run as a child, like su and sudo does, which avoids TTY and signal issues. Why reinvent gosu? This does more or less exactly the same thing as gosu but it is only 10kb instead of 1.8MB. By ncopa.
Executes a program as a user different from the user running sue. This is a maintainable alternative to ncopa/su-exec, which is the better tianon/gosu. This one is far better (higher performance, smaller size), than the original gosu, however it is far easier to maintain, than su-exec, which is written in plain C. Made by [Akito][akito].
Crontab-compatible job runner, designed specifically to run in containers.
A minimalistic Runtime Configuration system and process manager for containers vorakl.
A bare essential OS for running the Docker Engine on bare metal or Cloud. By RedCoolBeans.
A small tool to delete image manifests from a Docker Registry implementing the API v2, dereferencing them for the GC.
Custom docker registry that allows for lightning fast deploys through bittorrent.
Provide efficient, stable and secure file distribution and image acceleration based on p2p technology.
An open source trusted cloud native registry project that stores, signs, and scans content. Supports replication, user management, access control and activity auditing. By CNCF formerly VMWare
Uber's Highly scalable P2P docker registry, capable of distributing TBs of data in seconds.
A light-weight, self-contained container registry that's easy to run and maintain.
Builder
A tool used by openshift to build base images using different build engines.
Produces Docker images from tarballs of application source code.
Copy a Docker image between registries without a full Docker installation.
A tool help you to automate the generation of Dockerfile and dockerize application by scanning the code. By alibaba.
A command line tool written in Golang to squash and unpack docker images.
Build, tag,and push a bunch of related docker images via a single command.
Repacks a Docker image into a smaller, more efficient version that makes it significantly faster to pull. By orf.
Generate docker runcommand and options from running containers. By bcicen.
Dockly is a gem made to ease the pain of packaging an application in Docker.
Boilerplate for Docker Based Projects: Essex is a CLI utility written in bash to quickly setup clean and consistent Docker projects with Makefile driven workflows. jamesbrink.
Generates Dockerfiles from a high level Python recipe, including building blocks for High-Performance Computing components.
Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
A tool to automatically update (and optionally push to Docker Hub) Docker Images for 3rd party software whenever theres is a new release/update/commit. By SecSI.
Dockerfile
- A set of images using the Chaperone process manager, including a lean Alpine image, LAMP, LEMP, and bare-bones base kits.
dfg is both a Go library and an executable that produces valid Dockerfiles using various input channels.
Development with Docker
API Client
An idiomatic, data-driven, REPL friendly Clojure client for OCI container engines. By [lispyclouds][lispyclouds].
A Docker remote api client library for the JVM, written in Groovy.
Docker API client for JavaScript, automatically generated from Swagger API definition from moby repository. By masaeedu.
- Lightweight, truly object-oriented, Java client for Docker's API. By amihaiemil.
.NET (C#) Client Library for interacting with a Docker Registry API (v2) rquackenbush.
CI/CD
Convert your Git workflow to Docker containers ready for Continuous Delivery.
Powerful workflow engine and end-to-end pipeline solutions implemented with native Kubernetes resources.
Receive notifications when an image or repository is updated on a Docker registry by [crazy-max].
A script checking updates for docker images without pulling then auto-update selected/all containers. With notifications, pruning and more.
The aim of the docker plugin is to be able to use a docker host to dynamically provision a slave, run a single build, then tear-down that slave.
Continuous integration server built on Docker and configured using YAML files.
Simple, very flexible, powerful CI / CD / automation system configured in Python. Offline and local first.
Modern CI/CD, open-source, on-premise system that is highly scalable and focused on testing. One of its executors is Docker. Developed.
Continuous deployment of a microservices application.
Development Environment
- Containerize your development workflow. (formerly DevLab by TechnologyAdvice).
CLI utility for straightforward provisioning and interacting with an application configured by docker-compose. By bibendi.
- A set of bash commands to shortcut typical docker dev-ops. An alternative to creating typical helper scripts like "build.sh" and "deploy.sh" inside code repositories. By NandoQuintana.
- Generate Web/CLI projects Dockerized development environments, from 1 simple YAML file. By Ph3nol.
Drastically improves performance (50-70x) when using Docker for development on Mac OS X/Windows and Linux while sharing code to the container. By EugenMayer.
- Simple and transparent alternative to boot2docker (backed by Vagrant).
Deep Learning Docker Images. Don't waste time setting up a deep learning env when you can get a deep learning environment with everything pre-installed.
- Developer workspace server with Docker runtimes, cloud IDE, next-generation Eclipse IDE.
- Replace your local installation of Node, Go, ... with project-specific docker containers. By EnvCLI.
- Container solution to compile Linux and develop it for ESP32 microcontrollers - By Hpsaturn.
- A tool that makes debugging of Dockerized Go applications super easy by enabling Debugger and Hot-Reload features, seamlessly.
- A portable and disposable Shell environment, based on Docker and Nix. By senges.
- Lando is for developers who want to quickly specify and painlessly spin up the services and tools needed to develop their projects. By Tandem.
- Container solution to compile Rust projects for Linux, macOS and Windows. By [Peco602][peco602].
- Uni(versal)get, the installer and updater for container tools and beyond (formerly docker-setup). By nicholasdille.
- Vagga is a containerisation tool without daemons. It is a fully-userspace container engine inspired by Vagrant and Docker, specialized for development environments.
- Install Zsh, Oh-My-Zsh and plugins inside a Docker container with one line! By Deluan.
Garbage Collection
Serverless
A serverless, open source cloud platform that executes functions in response to events at any scale. By apache.
- The serverless microservices platform FaaS (Functions as a Service) which uses Docker containers to run Any language or AWS Lambda functions.
Testing
A framework to validate the structure of an image by checking the outputs of commands or the contents of the filesystem. By [GoogleContainerTools][googlecontainertools].
- A small Ruby Gem to run RSpec and Serverspec, Infrataster and Capybara tests against Dockerfiles or Docker images easily. By zuazo.
- Golang test harness for easily setting up tests that rely on services in a docker-compose.yml. By [byrnedo].
InSpec is an open-source testing framework for infrastructure with a human- and machine-readable language for specifying compliance, security and policy requirements. By chef
A composable build system for multi-container test environments that provides developers with: a powerful Python-like SDK for environment configuration, a compile-time validator to verify environment behavior & setup, and a runtime for environment execution, monitoring, & debugging capabilities. By Kurtosis.
Wrappers
Command line interface written in Go for running code with Docker Exec images.
A Docker + Kubernetes CLI for application developers; used to containerize an application and to manage its lifecycle throughout development, testing, and release cycles. From artsy.
Preview environments for Docker and Docker Compose projects. Test your changes and get feedback from devs and non-devs (Product/Design) by deploying pull requests to the your cloud provider as part of your CI pipeline.
Makes it easy to securely and portably run graphical desktop applications in Docker.
Terraform module for deploying a single Docker image or docker-compose.yaml file to any Cloud VM.
Services based on Docker (mostly :yen:)
Awesome Lists
more general about container than this repo, by Friz-zy.